Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
File: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft (raw, json)
Hash identifier: k+H46Ccdx3Z3fBrkp2t7L4sfYtuetswQOtUC+21tFuU=
Subject key identifier: FA:69:F8:61:93:C0:E9:7B:DA:B3:9E:45:3B:0A:05:5E:5B:D1:0C:10
Authority key identifier: D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
Certificate issuer: /CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Certificate serial: 019CAA5920D4E1373CBD9907192B30D259EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
Manifest number: 1397
Signing time: Sun 01 Mar 2026 17:01:33 +0000
Manifest this update: Sun 01 Mar 2026 17:01:33 +0000
Manifest next update: Mon 02 Mar 2026 17:01:33 +0000
Files and hashes: 1: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl (hash: oW57gkDYmHFl7eQ8SBD/LW8nhF2qQ53XYMkMB6pKtag=)
2: svPKQJREMYzzw4nrwOykMCA6_Ws.roa (hash: OO4K57XkP/w3/FtcBT7vUzOVhuobiN05zaoo8Wri7/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:20:d4:e1:37:3c:bd:99:07:19:2b:30:d2:59:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Validity
Not Before: Mar 1 17:01:33 2026 GMT
Not After : Mar 2 17:01:33 2026 GMT
Subject: CN=fa69f86193c0e97bdab39e453b0a055e5bd10c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:0c:d4:11:02:03:f4:21:bc:f7:ca:26:47:
70:b0:6a:4b:1e:7f:b3:08:ff:b2:42:ea:78:8a:93:
8c:99:99:ae:4d:29:a9:43:2c:19:87:c6:21:9e:5e:
29:f6:9b:c3:b1:4f:af:7f:4a:b6:31:84:8e:53:7b:
e8:19:b2:f8:f5:3c:e3:e4:f0:bd:8d:85:ee:8c:51:
2c:b5:49:83:31:6d:94:22:e4:c2:90:2e:20:38:d8:
70:f0:89:4d:1a:fe:a6:b5:4b:dc:6b:a8:de:dd:48:
54:c6:53:bd:77:d1:96:9a:23:e8:fa:2e:b6:a1:4a:
5b:f6:55:32:c5:6b:90:17:ac:d9:8e:34:52:74:f6:
c4:12:30:42:61:a7:e5:64:c3:75:f9:4b:07:8a:dc:
62:ae:de:96:bb:97:8e:f1:41:36:4a:ce:ba:3a:48:
c2:6a:9e:26:83:f4:66:72:44:ac:af:d2:70:d9:58:
90:42:26:31:99:ad:93:4b:4e:9e:72:ae:ab:ca:00:
be:73:6c:d2:1f:39:cb:06:6d:90:10:5c:bf:af:65:
63:55:9b:ca:9c:4f:75:92:ab:23:af:52:0b:fd:d9:
70:39:ae:88:40:3c:66:f0:a0:d0:67:41:fa:5a:d9:
93:81:e1:22:5f:09:56:cb:1f:d7:79:66:db:05:0c:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:69:F8:61:93:C0:E9:7B:DA:B3:9E:45:3B:0A:05:5E:5B:D1:0C:10
X509v3 Authority Key Identifier:
keyid:D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:13:0e:90:bf:43:7f:90:43:11:1d:7f:f4:01:a7:09:8a:e9:
cc:e8:b5:42:bd:e9:03:86:c7:8a:bd:d4:4c:79:fc:51:fb:f2:
57:de:48:e7:cb:d8:8c:f8:13:1a:65:cf:0a:c4:f7:0a:35:01:
75:a9:60:d9:c1:a2:d7:43:88:d3:67:cb:70:10:4d:4c:c8:e2:
ca:06:71:1b:b5:26:d5:e7:c2:06:bf:b2:7d:95:fc:ba:b4:f2:
6a:1d:ad:2a:0e:8f:3b:ba:d5:a3:a6:29:ce:2e:47:d3:6e:50:
93:f6:0f:19:f8:8e:0c:f3:65:86:7a:93:ae:ed:0b:0d:4c:9c:
8d:23:29:e8:d6:41:ee:9e:3f:93:0e:fa:ad:4d:21:67:2f:bf:
40:e4:87:a5:98:80:12:f8:4c:5f:41:9e:d5:f1:fb:2c:8b:5b:
89:03:9d:bf:c9:09:a1:0e:6d:b7:1e:6e:29:82:3f:81:81:40:
f3:5f:c1:33:59:0b:17:64:71:a1:a3:75:b1:45:93:0c:6c:86:
05:8c:12:d5:f8:c8:cb:ae:b8:87:0a:8d:83:2e:73:1b:af:4c:
b7:d2:8e:88:41:db:fc:02:c8:0e:74:7c:ca:ec:2c:6f:9c:77:
40:ec:ef:d2:73:da:4a:9b:93:da:c0:e4:c6:71:57:b0:1a:47:
5c:9b:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:19 2026 by rpki-client