
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: ybK1SnIu7kn8D0SBxiIyRurxdVRksRSNf2IRfQAuAMU=
Subject key identifier: FD:05:16:68:84:96:67:AC:62:FF:0E:99:D4:E3:EE:14:C0:F7:E3:1D
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 019EBE7FB3ADAAAA764BE3CF5C40293564D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 05DF
Signing time: Sat 13 Jun 2026 01:01:40 +0000
Manifest this update: Sat 13 Jun 2026 01:01:40 +0000
Manifest next update: Sun 14 Jun 2026 01:01:40 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: OREsmcg0AdsepRlaq4h54sGlvJOyxmx3wkkDgu4gieQ=)
2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:b3:ad:aa:aa:76:4b:e3:cf:5c:40:29:35:64:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Jun 13 01:01:40 2026 GMT
Not After : Jun 14 01:01:40 2026 GMT
Subject: CN=fd051668849667ac62ff0e99d4e3ee14c0f7e31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:74:b9:3e:42:64:2c:1d:9a:1c:b4:52:22:
d4:72:67:31:f8:81:33:17:cc:e4:0c:72:e1:3b:e9:
c0:f9:00:f7:e0:ee:b3:7a:97:6c:39:a0:f8:b3:34:
0c:a2:70:33:08:88:c3:55:eb:89:0b:2e:3f:57:f7:
61:ad:cc:c6:01:75:5c:84:30:28:8f:85:76:8c:9a:
b0:8d:79:ff:a7:cd:43:ac:32:47:e7:00:22:94:5c:
e5:9f:cc:c7:18:b4:41:ff:d3:cb:6e:8c:e5:b9:55:
5a:28:7a:68:06:71:00:8e:b5:19:bc:0e:e0:ba:48:
7e:0f:48:6d:ce:39:4a:e4:b4:cf:fb:1b:1d:ac:63:
53:64:fb:71:12:ab:39:bf:51:4a:df:8f:89:4a:40:
a0:a8:89:53:89:ac:6d:a9:8b:a4:a1:e7:94:91:57:
b8:86:92:2d:16:0f:f4:90:c5:af:4a:16:fc:4b:f7:
52:1f:63:e6:4d:db:f1:0b:04:37:62:e7:3a:c3:57:
fe:84:80:6d:7b:a5:30:e1:6a:a2:5d:50:4f:6f:e8:
6e:c9:ad:dd:58:8b:ec:68:9e:84:88:f5:e2:91:b0:
fb:9a:96:b2:a6:9b:f7:fe:28:22:5d:11:8d:b9:fc:
f9:70:d6:47:7c:82:f0:1b:9d:d0:04:e4:2f:47:2a:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:05:16:68:84:96:67:AC:62:FF:0E:99:D4:E3:EE:14:C0:F7:E3:1D
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7b:5e:c3:b6:4f:d9:b6:48:c6:5e:c9:c7:db:e3:09:ac:ca:
9e:58:a0:9e:9e:d0:19:93:a3:c3:9a:4b:6f:6e:e2:0b:a8:ca:
b9:40:63:e7:a5:25:c2:5f:40:eb:d5:44:66:00:e4:56:91:07:
10:ce:9b:f9:a4:a2:2d:49:ac:d9:42:7f:27:46:5a:9e:e2:a9:
e3:52:59:ad:97:30:6a:35:a1:f4:3c:97:78:88:83:60:25:35:
d1:5e:74:98:8f:4f:b2:3c:dd:36:61:88:74:28:ec:47:a7:0e:
22:27:27:d8:bc:31:7b:c6:77:69:08:b0:ca:86:24:46:1c:8c:
d0:5f:b2:60:52:76:41:fe:dc:a5:cc:9d:8b:21:4e:06:32:59:
2b:6d:b3:c9:c4:96:ae:ef:29:5a:ad:a1:32:da:d1:24:dc:a0:
4c:35:7b:cf:a5:f6:d4:aa:57:76:a1:92:b4:dd:a6:af:a3:69:
c2:25:80:e5:27:9b:39:56:bb:e8:6c:0a:e5:99:47:e1:95:98:
f2:84:40:cd:04:a1:80:00:3b:77:ac:2a:2f:75:df:72:4d:c9:
47:88:5d:44:e1:d9:67:e3:b3:25:f6:26:3c:df:a8:50:f2:fd:
ee:f6:bf:47:4b:52:1a:95:0e:76:d5:61:81:49:38:ec:a3:76:
47:e1:3b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:11 2026 by rpki-client