Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: d6BeLajk/9ZibAuGtNef3meqDEEMZF25sli3r7wxEYA=
Subject key identifier: 85:13:93:23:7A:E1:BE:C0:B8:8F:5A:2B:2E:B8:70:95:72:6B:BB:00
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 019CAB6ACBD77B87002907089D509D601A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 0F3D
Signing time: Sun 01 Mar 2026 22:00:28 +0000
Manifest this update: Sun 01 Mar 2026 22:00:28 +0000
Manifest next update: Mon 02 Mar 2026 22:00:28 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: g8ce5VcYajDX2510V/ABnhWnlMRHOfs98SgpoVeJjVg=)
2: LdaZSUyQ2J35WViDp7K4OleiJM0.roa (hash: 8ojGftdjF7z5hU3TazuQkKR65kz8aTFetHlaO3cL+Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:cb:d7:7b:87:00:29:07:08:9d:50:9d:60:1a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: Mar 1 22:00:28 2026 GMT
Not After : Mar 2 22:00:28 2026 GMT
Subject: CN=851393237ae1bec0b88f5a2b2eb87095726bbb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:37:9b:a1:80:de:a8:86:5f:d4:60:0c:db:
c5:ee:88:fa:08:2d:a5:c8:39:1c:23:be:a4:52:42:
96:34:26:04:02:8b:ca:35:ee:c2:20:8d:8f:a6:b9:
7f:48:4c:0c:03:a5:53:57:a1:72:25:2f:26:ec:d6:
41:ca:2f:9c:d0:31:4a:c6:20:b7:78:a0:ec:1b:0e:
08:27:e3:23:8f:d0:a2:a9:e4:8d:9b:e5:6b:44:da:
e5:04:fb:e6:d9:f3:4d:fb:3e:42:1b:9e:a3:d8:fd:
ea:53:0d:6c:33:ed:eb:52:16:b7:c7:f4:bc:d7:34:
c1:88:b9:c7:05:06:66:9a:37:23:17:04:aa:3e:35:
f0:a6:3a:ce:52:15:ae:7e:82:d6:b3:8b:6d:d2:aa:
05:a1:b4:10:0f:48:ca:04:a1:dc:c4:03:26:65:17:
cb:c7:9e:08:f2:8e:70:8c:c8:4f:9a:36:5d:bc:05:
1f:10:63:71:f8:a6:e3:1d:24:7f:e7:c2:24:76:c5:
8d:77:b5:5e:e1:ee:82:68:85:72:5f:77:8b:2b:df:
54:23:8c:29:27:c1:82:36:e3:32:64:14:fc:20:c3:
ae:35:c4:47:a5:fd:d3:e9:aa:2c:ae:79:eb:fc:92:
86:1b:6d:5d:38:94:34:33:12:79:c5:63:f4:f1:2c:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:13:93:23:7A:E1:BE:C0:B8:8F:5A:2B:2E:B8:70:95:72:6B:BB:00
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6c:94:7f:66:c4:eb:44:7f:19:70:41:ce:47:53:f2:6b:45:
0c:5e:83:8e:33:8e:93:37:7b:54:fc:76:38:88:97:0d:06:2c:
92:bd:50:46:55:6a:20:ae:13:bc:75:10:c0:d7:eb:09:fb:fc:
60:9f:70:d8:17:3b:f6:54:2a:be:7a:40:dc:2d:3f:c4:e4:59:
75:70:a8:49:cf:29:ef:79:cc:c7:64:26:d7:21:4a:03:61:eb:
7b:5f:09:92:a0:a0:a4:0f:3a:ed:e3:08:14:71:5d:3b:1b:03:
2f:96:25:9e:dc:44:fc:aa:84:24:c3:2a:5e:6a:58:ca:76:ea:
3d:c4:79:ac:9b:a2:c6:95:35:7b:5e:ec:d4:0e:9b:ef:2f:9d:
b5:9f:42:1d:d7:39:15:29:62:51:60:be:f1:d7:b6:f4:09:2b:
3e:20:8a:7d:7c:e7:c2:d7:48:f3:9a:e1:f9:9d:c9:42:43:43:
92:3c:4d:fd:bd:b7:c5:c1:14:fb:a6:bd:4a:b2:7c:b0:a6:26:
b8:45:65:78:ab:3b:4b:59:58:cf:7b:93:1c:75:fd:26:4e:be:
06:75:a8:69:c4:03:26:84:5a:63:ba:62:54:80:bb:61:e4:d2:
4e:1f:1d:35:9a:d8:f6:10:40:d9:40:d0:ca:87:1b:cb:2e:25:
77:f7:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:32 2026 by rpki-client