Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: BdNrBMT0UGJLyDN0rKaCCf+WzYS7wLIO2rrBpSMD95k=
Subject key identifier: 24:C5:32:DE:C4:96:3E:F9:45:18:AA:80:98:AF:82:EF:A5:05:AA:96
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 01A001A62CE5B14611EC709261CD83BE4F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 19:01:02 +0000
Manifest this update: Fri 14 Aug 2026 19:01:02 +0000
Manifest next update: Sat 15 Aug 2026 19:01:02 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: APHVDE+RTsb9I3AbqrqkQan2DdiRLuwZC+3zIxWgCSA=)
2: Co-UgfR-RZ88nquGNkhgBiRlfWA.roa (hash: y8OicGcIeO8vwo/68H9AisrPu6OLxG9bR2N39A+AxS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:2c:e5:b1:46:11:ec:70:92:61:cd:83:be:4f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Aug 14 19:01:02 2026 GMT
Not After : Aug 15 19:01:02 2026 GMT
Subject: CN=24c532dec4963ef94518aa8098af82efa505aa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:10:c6:79:3d:ae:37:df:e2:ad:5f:5f:62:
92:9b:b3:59:46:ae:1e:9b:09:c3:7d:47:f3:10:c1:
e1:66:12:19:e0:a7:87:de:38:f3:1b:28:02:45:ec:
9a:d9:73:ee:19:ec:2e:72:de:6e:cb:55:fe:b3:0d:
de:27:66:e2:6b:0a:86:0e:1c:1b:13:f6:85:5f:1e:
57:7d:e3:8e:6e:48:ed:3b:99:9a:6b:20:2a:b9:4a:
12:ae:7d:43:82:5b:de:86:24:7b:f1:92:dc:71:0a:
26:33:57:01:50:e2:ec:e1:2d:26:64:a1:38:e4:8a:
9a:b6:bd:b6:ae:03:11:16:c4:92:2b:28:d5:6c:fe:
16:4c:16:e6:fd:04:73:c7:9b:d1:17:bc:18:17:62:
8f:7f:62:5d:b8:1e:41:26:42:ed:75:97:27:23:1b:
83:fa:84:f3:e1:6b:38:62:0f:bd:57:c4:9e:85:d8:
1a:01:6b:62:96:2e:58:8a:c7:c7:cb:ba:ff:8e:36:
42:c2:14:2c:d0:cd:ed:a4:7e:43:b3:b8:a1:a0:58:
d1:5d:25:99:03:60:a6:67:36:a9:67:d9:df:a0:24:
46:f0:24:4d:6f:c7:c2:43:9c:f5:66:58:d1:3a:67:
cb:85:df:bc:95:36:fa:79:f8:c5:c1:c2:ed:3d:20:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C5:32:DE:C4:96:3E:F9:45:18:AA:80:98:AF:82:EF:A5:05:AA:96
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f2:ed:72:ce:d4:5d:19:b9:49:b7:a0:b9:47:5f:d3:e4:e0:
5b:cd:f0:64:f6:df:03:8c:6d:ff:01:7f:b1:9c:fd:57:eb:64:
54:6e:29:fe:f1:00:e1:47:89:1d:e4:ce:d7:a6:80:34:b4:7f:
a6:a1:09:5a:c1:ef:2f:73:96:bc:15:35:12:45:94:a5:f6:2f:
f7:6f:97:b0:e1:6f:da:c6:7e:c3:bd:43:7a:9e:81:e1:2b:18:
12:82:e4:ce:eb:3c:d3:1c:f8:28:20:fd:5a:db:a3:91:0b:7c:
bd:41:c5:8e:f1:66:2d:88:ca:b0:c1:05:c0:f2:43:21:43:4c:
94:76:15:ad:80:dc:64:d6:de:d4:6c:46:a5:30:f3:3e:5d:34:
3c:dd:19:90:a0:4b:4f:11:aa:1a:5d:fe:f0:69:54:f0:da:21:
39:f2:90:f7:f5:a5:16:4c:79:41:44:f5:b2:dc:58:73:11:7d:
3e:17:3f:ad:32:8b:b8:f2:4a:51:d4:ad:63:ab:8f:c2:46:f5:
53:19:6e:1a:c0:a4:95:e2:a5:cf:2d:98:9a:68:22:b7:42:39:
de:02:18:a1:2a:24:50:a5:e2:2f:17:c5:1a:37:fa:23:9f:6c:
53:f5:e4:49:80:9e:63:a3:80:3d:ce:6f:73:a4:8d:8c:5c:68:
c9:75:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:59 2026 by rpki-client