Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: KPAPN5tcZWEgOfpm+3OkkcfNahfBaJU+gni/yN54n6A=
Subject key identifier: 5E:53:24:08:44:73:11:A0:52:AA:09:4D:9D:19:A8:A0:C6:18:A6:CA
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 019D98F516E4F11099D46E9A852F5AF31AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 0FB8
Signing time: Fri 17 Apr 2026 01:01:32 +0000
Manifest this update: Fri 17 Apr 2026 01:01:32 +0000
Manifest next update: Sat 18 Apr 2026 01:01:32 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: a/C1PZFuLQhqbmjIgZB0q8G224K3FJYE8ox7SimJohs=)
2: LdaZSUyQ2J35WViDp7K4OleiJM0.roa (hash: 8ojGftdjF7z5hU3TazuQkKR65kz8aTFetHlaO3cL+Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:16:e4:f1:10:99:d4:6e:9a:85:2f:5a:f3:1a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: Apr 17 01:01:32 2026 GMT
Not After : Apr 18 01:01:32 2026 GMT
Subject: CN=5e532408447311a052aa094d9d19a8a0c618a6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:4f:32:c5:06:8f:c5:fa:1e:2b:2d:ea:a2:
22:5f:69:23:13:6a:98:0d:58:3f:a9:49:e4:f0:5c:
24:6b:92:05:a8:05:44:c7:01:99:67:b5:94:0e:cd:
2b:b5:22:f6:13:63:9d:36:ce:15:fa:3d:e1:0e:a1:
ed:8b:c2:2d:a6:58:a0:9f:14:0d:3f:29:99:63:7e:
f0:cd:db:6b:8d:8a:17:c3:43:53:c8:40:46:ae:f4:
7e:38:56:3c:1b:00:ae:aa:1e:ce:aa:f9:8b:19:cf:
4b:90:96:ba:42:d7:1c:54:2a:b8:21:66:b0:f2:31:
34:55:0d:ed:39:4c:d9:71:56:9e:54:5d:98:ab:dc:
bd:b0:2b:5d:6e:65:24:41:1d:56:89:50:95:11:8d:
cd:2b:4b:df:85:83:a2:9d:c2:d5:1a:52:04:25:24:
14:ef:6a:66:d7:61:d7:01:ad:c9:78:e4:06:9d:73:
39:18:49:cf:e7:5b:3d:7b:c6:9b:4e:3f:76:ce:ba:
1b:02:57:05:e6:57:7d:8b:f0:fe:56:c6:e0:f3:74:
42:52:b0:b4:85:0e:61:21:46:ac:d7:13:1a:25:69:
0a:37:7f:1b:80:30:4c:a9:46:cb:bb:a4:61:8f:29:
10:80:5d:3e:18:68:31:ab:e6:8f:e6:96:95:52:43:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:53:24:08:44:73:11:A0:52:AA:09:4D:9D:19:A8:A0:C6:18:A6:CA
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b6:cd:fc:be:51:20:10:8e:77:d9:2a:93:ff:a1:49:02:9f:
e0:28:5b:de:62:a5:6c:25:55:84:28:21:cb:56:58:bb:9c:09:
e3:93:5d:dc:d9:f9:a6:cb:10:bf:a1:86:ea:66:f8:93:79:48:
bd:b1:a0:5d:31:2d:e3:10:b8:bc:e1:cc:47:2e:47:8f:86:7c:
e5:b1:8d:c5:f8:a0:b5:f1:b9:56:b5:d2:b3:7d:54:35:23:94:
8f:55:29:60:84:11:61:44:f2:82:8e:f8:57:be:f9:4a:77:d6:
a6:eb:04:c7:06:9c:1a:e9:3c:d8:f6:32:50:54:97:54:a0:bb:
9e:6d:bf:c8:96:c3:d0:ed:58:7e:2d:f6:12:6f:4f:e6:91:b7:
0f:22:ae:7c:c3:e9:f5:a9:d1:29:45:dc:4a:ec:92:2e:fd:f4:
8b:99:82:98:b4:a2:d2:8c:11:8a:7e:3a:8e:4f:26:93:87:1a:
7e:8d:c3:df:3d:62:cf:48:d7:5d:53:8a:23:07:6c:8e:96:97:
b0:79:04:ce:6b:24:26:e2:58:77:c8:88:4d:58:33:ba:53:c6:
fc:63:e6:d9:1e:04:44:2c:f8:15:f0:72:70:d4:b9:cd:eb:d7:
46:39:1d:ae:2e:82:14:b5:f6:61:86:5f:29:86:94:ca:7c:dd:
45:3d:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:53 2026 by rpki-client