Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: O53QY5RNaD62kCAxOxXyedDFtVu26q5id4pXdhLetjk=
Subject key identifier: 26:98:E0:CF:A3:ED:79:4A:F3:D4:83:29:37:AF:0A:FA:D2:81:CF:32
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 019FAA1A295530ADF85F74E13F0F213AC19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 10CA
Signing time: Tue 28 Jul 2026 19:01:08 +0000
Manifest this update: Tue 28 Jul 2026 19:01:08 +0000
Manifest next update: Wed 29 Jul 2026 19:01:08 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: XYfd++iN8pHKchySOLgPEDtjI1GWJj4v2p+zVkQyagU=)
2: LdaZSUyQ2J35WViDp7K4OleiJM0.roa (hash: 8ojGftdjF7z5hU3TazuQkKR65kz8aTFetHlaO3cL+Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:29:55:30:ad:f8:5f:74:e1:3f:0f:21:3a:c1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: Jul 28 19:01:08 2026 GMT
Not After : Jul 29 19:01:08 2026 GMT
Subject: CN=2698e0cfa3ed794af3d4832937af0afad281cf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:6b:f8:d1:be:74:c5:f7:0d:86:8c:13:cf:
57:8e:07:ee:70:4d:9f:e9:19:ef:a5:97:72:7e:b5:
20:5e:d3:14:bc:10:7e:e4:05:12:f8:24:e5:01:22:
5d:2c:66:5b:a5:c2:c9:f3:d0:3d:1e:57:1b:b2:8a:
f7:b8:d3:dc:33:a6:5c:63:4d:d2:d0:d2:91:05:0b:
72:1b:c6:28:6f:c2:cf:80:28:6a:65:89:ca:ba:3f:
fa:b6:83:0d:e5:0f:62:8c:8d:ef:f3:e5:cb:3d:c9:
85:cb:3a:08:5d:7c:71:a9:af:99:d0:3f:d5:b2:d6:
91:46:e0:14:49:d7:68:c1:96:9c:fa:5d:cb:38:36:
9f:3c:b8:c0:c9:c9:3e:50:87:71:2d:06:fa:0f:c3:
70:12:89:91:58:13:40:5a:f6:d4:70:ea:2a:5b:8e:
75:46:03:5b:f4:92:2d:8b:0b:03:d7:5d:d1:a5:be:
e8:ff:b2:ef:9b:0a:59:9b:7b:78:22:6b:27:7a:54:
96:65:4e:7e:dc:80:a9:29:d5:28:96:7b:56:45:0b:
0c:b0:f8:b9:80:99:aa:8d:b7:e8:6c:a7:3d:5d:22:
6a:3c:35:9b:45:05:b6:68:67:50:f7:ab:94:6c:99:
fd:2a:57:b0:97:51:6d:46:68:ef:0f:2a:09:e4:c0:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:E0:CF:A3:ED:79:4A:F3:D4:83:29:37:AF:0A:FA:D2:81:CF:32
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fe:53:ad:42:82:a4:3e:46:72:d9:9c:5f:14:43:f9:0b:28:
3b:2a:2a:43:57:3a:67:c0:f2:46:f9:72:97:fe:de:90:e8:36:
2b:cb:ec:89:98:11:fa:90:45:5c:6e:fe:84:1d:19:ce:38:a3:
79:26:64:eb:45:75:ae:4b:f6:05:10:c7:5a:53:f5:ee:f7:b0:
ac:c2:54:5d:4a:83:53:a7:f1:43:10:28:08:78:d9:0a:52:f8:
d1:3d:ed:b9:ff:54:b0:b6:da:82:eb:b1:0c:dd:14:e5:11:46:
2e:db:94:1c:ce:5d:0d:b8:74:da:a1:26:7d:a4:5a:ef:8d:d0:
ea:0a:7d:9c:0c:ab:e0:ac:17:5a:68:8a:0b:6f:c0:ef:2f:49:
52:ee:d5:1a:74:75:14:f8:87:3c:70:81:4f:b5:4b:6c:34:5e:
61:47:55:19:2a:b4:5a:eb:db:1e:ab:30:c3:7a:79:57:14:8b:
5f:41:8c:2e:13:08:06:12:07:f1:58:e9:b4:1f:d7:f9:db:97:
ad:f8:21:6b:bb:6f:1b:2d:62:5b:97:37:9b:82:5e:66:6c:d5:
dc:0a:fc:bd:0e:43:22:7c:0e:49:9d:f3:07:0f:1a:f1:7e:6f:
42:b3:c1:72:f7:f6:fe:83:4f:02:39:9e:dc:09:05:51:8b:c4:
af:5a:fa:dd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+qGilVMK34X3ThPw8hOsGbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMzY0NmZiYTY5MDQ1ZWRlNWVmOGU1YzM5YTJmYzE3Zjlm
MGQyZGMwHhcNMjYwNzI4MTkwMTA4WhcNMjYwNzI5MTkwMTA4WjAzMTEwLwYDVQQD
EygyNjk4ZTBjZmEzZWQ3OTRhZjNkNDgzMjkzN2FmMGFmYWQyODFjZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrtr+NG+dMX3DYaME89XjgfucE2f
6RnvpZdyfrUgXtMUvBB+5AUS+CTlASJdLGZbpcLJ89A9Hlcbsor3uNPcM6ZcY03S
0NKRBQtyG8Yob8LPgChqZYnKuj/6toMN5Q9ijI3v8+XLPcmFyzoIXXxxqa+Z0D/V
staRRuAUSddowZac+l3LODafPLjAyck+UIdxLQb6D8NwEomRWBNAWvbUcOoqW451
RgNb9JItiwsD113Rpb7o/7LvmwpZm3t4ImsnelSWZU5+3ICpKdUolntWRQsMsPi5
gJmqjbfobKc9XSJqPDWbRQW2aGdQ96uUbJn9Klewl1FtRmjvDyoJ5MB+9QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCaY4M+j7XlK89SDKTevCvrSgc8yMB8GA1UdIwQY
MBaAFPs2RvumkEXt5e+OXDmi/Bf58NLcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16WkctNmFRUmUzbDc0NWNPYUw4Rl9udzB0dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNzA2ZjU0LTg3YTUtNDVlNy1iZjIy
LThhNmI1NDc2NjZhYS8xLzEtelpHLTZhUVJlM2w3NDVjT2FMOEZfbncwdHcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzViLzcwNmY1NC04N2E1LTQ1ZTctYmYyMi04YTZiNTQ3NjY2
YWEvMS8xLXpaRy02YVFSZTNsNzQ1Y09hTDhGX253MHR3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOv5T
rUKCpD5GctmcXxRD+QsoOyoqQ1c6Z8DyRvlyl/7ekOg2K8vsiZgR+pBFXG7+hB0Z
zjijeSZk60V1rkv2BRDHWlP17vewrMJUXUqDU6fxQxAoCHjZClL40T3tuf9UsLba
guuxDN0U5RFGLtuUHM5dDbh02qEmfaRa743Q6gp9nAyr4KwXWmiKC2/A7y9JUu7V
GnR1FPiHPHCBT7VLbDReYUdVGSq0WuvbHqsww3p5VxSLX0GMLhMIBhIH8VjptB/X
+duXrfgha7tvGy1iW5c3m4JeZmzV3Ar8vQ5DInwOSZ3zBw8a8X5vQrPBcvf2/oNP
Ajme3AkFUYvEr1r63Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:34 2026 by rpki-client