Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: C16Zl/HgAZtN3mDcTuFyHdD+DM8tHfjLUj8eWV2Xylg=
Subject key identifier: 85:1D:95:9A:4E:97:BC:11:8C:C7:D0:85:6C:48:0A:1D:EF:BB:08:FA
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 019E314E8B6ED5B90F31E076D2AB8825D37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 0BDB
Signing time: Sat 16 May 2026 15:01:31 +0000
Manifest this update: Sat 16 May 2026 15:01:31 +0000
Manifest next update: Sun 17 May 2026 15:01:31 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: CM8On6kbJYhECKC+UQGzZQpf2/RV+IWNbGTtgR9nkhE=)
2: KVXgF5z3zvUbDWDR9vEfB08gTrE.roa (hash: UHAb4fioT9YjE1AokUnZfVbvlTm8HooTgsw5q7QUcZ0=)
3: p_71hNByXrDuNYKSNzWqmsK9r-A.roa (hash: KH7XFzdKacxa7PKL/12r22Uz9GNXLSLW65hXt/t41hQ=)
4: wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa (hash: HaZn3L1Ow7LzOKxqi0hwoJYvNFRFIKrjZGo6K0g1OtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:8b:6e:d5:b9:0f:31:e0:76:d2:ab:88:25:d3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: May 16 15:01:31 2026 GMT
Not After : May 17 15:01:31 2026 GMT
Subject: CN=851d959a4e97bc118cc7d0856c480a1defbb08fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:83:d5:c8:03:8e:94:c6:fc:9d:84:91:a2:
c4:11:eb:d5:bb:39:04:db:d3:b0:a7:c2:96:a6:bf:
0c:bb:98:61:5a:f7:6d:44:56:26:25:1e:db:a2:f6:
9d:87:26:10:43:bf:36:86:df:fb:b8:ec:58:5b:95:
3b:37:c6:37:83:a5:df:0f:c8:49:34:8c:d3:8c:a7:
73:15:33:4f:61:47:fa:4d:63:c2:09:bd:40:a3:14:
b9:50:8e:32:d8:cd:a3:bb:ca:a5:4e:71:45:3c:ab:
f6:51:f1:49:ad:b1:c2:fd:a1:c2:88:27:48:6b:03:
cd:35:cc:8e:ea:78:10:70:e2:ab:b0:f9:63:fc:14:
9c:ad:8b:fb:97:37:a6:bd:03:ac:d6:c8:61:5f:7b:
68:78:a9:17:b3:e6:56:94:00:87:c4:69:e4:9c:41:
31:4c:0c:e1:d2:cf:39:30:8c:17:f4:c1:7c:c9:82:
72:84:65:f6:39:3a:63:9e:68:57:b4:32:a9:46:40:
e0:f3:8d:da:78:4c:25:c2:33:db:e0:6f:16:27:77:
52:45:b7:a3:eb:bf:2c:12:9b:3b:f2:f1:78:08:38:
0c:ec:ec:36:28:b0:d1:9f:9b:dd:c8:47:88:dd:ad:
65:23:c0:b0:5c:02:95:3c:a0:d4:e3:8f:18:9c:40:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1D:95:9A:4E:97:BC:11:8C:C7:D0:85:6C:48:0A:1D:EF:BB:08:FA
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:31:6a:c8:6e:2a:22:e0:85:bf:33:87:7a:b7:5b:70:f6:36:
28:e9:16:59:29:3a:6d:7c:ec:bb:76:4d:a3:ca:18:18:9d:4e:
08:27:b0:98:fb:0a:cf:e9:7f:70:7f:b4:20:55:f7:f3:4b:a0:
a4:ff:79:4e:00:ad:87:8d:2a:ff:3f:9e:9b:44:d4:b6:3f:d0:
c3:e6:33:16:67:93:c4:2d:21:a2:58:95:f9:76:a7:ec:26:a8:
33:6e:c4:f6:e1:4d:4b:39:b3:2c:ad:de:f2:46:5f:17:6a:a9:
00:fb:61:da:15:43:8a:0b:41:01:66:e2:c3:f5:cc:f0:5f:4f:
14:0c:33:a0:e4:8a:e1:74:89:ee:c4:29:55:9d:19:35:76:ef:
9d:43:83:b2:c0:34:28:8b:58:b0:0f:2b:17:c8:44:94:8e:6c:
ee:99:9a:b2:2d:f2:05:9a:f8:16:b6:74:d2:98:95:6f:8d:2d:
db:b8:bf:c3:ab:90:7d:d5:93:80:8a:eb:d5:18:37:12:25:e0:
55:ba:71:52:93:d2:2e:2a:d7:b2:db:aa:12:18:6e:ea:d5:a6:
ff:96:0d:eb:63:14:78:10:16:9c:a4:31:05:49:00:73:ee:11:
dd:a6:b4:52:6b:13:b2:b1:4e:11:84:76:de:46:2d:7d:69:a2:
8c:aa:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:29 2026 by rpki-client