Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: tQiArIlRvm4XWPN2gDWMyomQjLfxt+PFtUQzhQt6K14=
Subject key identifier: 11:44:C2:F4:2C:06:53:25:F4:03:91:93:20:4C:94:D7:9A:B1:46:98
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 019CAC4723D70675613F471B8531BB81AABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 126A
Signing time: Mon 02 Mar 2026 02:01:09 +0000
Manifest this update: Mon 02 Mar 2026 02:01:09 +0000
Manifest next update: Tue 03 Mar 2026 02:01:09 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: BGJeRJzUF4RVclCxcnBxbk2e7SeO9iBELJRk+H9W8ps=)
2: 1-sZNf9muu9U1hhvyCSyDMfB8YpI.roa (hash: ZTCQU0Xa904Op6SoRgBrlLkJy0zOrm95WiClUW4+PNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:23:d7:06:75:61:3f:47:1b:85:31:bb:81:aa:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Mar 2 02:01:09 2026 GMT
Not After : Mar 3 02:01:09 2026 GMT
Subject: CN=1144c2f42c065325f4039193204c94d79ab14698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:68:52:d6:1a:d1:be:3e:74:d0:c0:a2:b5:
1c:af:76:c9:9b:98:59:96:f0:fc:ee:21:7b:fc:28:
ec:30:77:41:44:8b:3d:89:2f:1b:fe:03:4d:40:69:
4c:c6:ca:9f:33:2e:cc:c6:ae:c6:b9:f8:70:38:b4:
2f:04:73:46:49:77:07:41:a7:f2:20:43:9b:15:37:
45:d4:07:51:bc:41:93:10:48:ab:3d:1d:3d:d0:a8:
e4:89:7a:c2:0c:40:cf:2a:01:92:1e:fd:44:c7:d4:
97:a5:3a:27:6f:db:69:e3:2b:71:8e:d9:d2:d5:d1:
4b:c9:65:f0:cf:7e:b9:84:f1:e2:4c:ce:dd:d0:93:
b7:3f:8d:78:e0:ca:3c:0b:47:68:b3:95:7e:bd:19:
af:b2:9c:f8:57:4e:2b:16:00:13:dc:4d:92:66:57:
e0:84:9b:e2:ef:e1:11:ef:27:52:c0:cb:c4:ae:f0:
f7:34:3a:75:ad:44:c8:22:40:8e:d6:10:37:c4:91:
e2:f8:81:d6:58:1a:5b:cb:8b:5f:01:1f:d1:e1:c5:
bf:2c:2c:6b:cc:e2:ef:49:3d:19:5e:f0:84:31:3b:
cf:0f:e1:19:54:26:a3:34:dc:dd:67:79:4d:75:94:
5c:76:03:e8:ad:d8:73:e3:1b:db:ef:cc:a9:8e:70:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:44:C2:F4:2C:06:53:25:F4:03:91:93:20:4C:94:D7:9A:B1:46:98
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f5:d1:61:97:81:8e:76:4e:fc:86:8d:34:36:46:9a:b8:35:
f6:68:2f:a0:8f:ce:3d:d0:c4:e9:c6:a4:38:71:e6:13:79:03:
e7:8c:bc:78:58:07:c5:2f:8e:3a:dc:cf:30:c1:f6:ac:fe:6c:
41:70:9c:31:32:a5:92:be:af:a2:53:03:81:cb:f5:86:1e:83:
97:fa:3e:02:a6:c7:68:d3:ed:eb:59:72:72:e8:5a:22:57:ad:
ec:d7:98:2e:7c:2c:3c:a1:d1:2f:6a:a7:e2:48:17:54:a2:3b:
51:11:58:dd:74:a1:17:9d:d5:9b:a8:5a:c6:4c:52:cf:0f:c4:
ae:d4:d2:3e:86:75:d3:62:cd:6d:5c:d2:32:18:46:23:de:ca:
52:b9:9a:22:56:ac:23:49:1c:7d:ba:1e:67:d5:6b:7e:f8:10:
de:52:f2:8c:de:e9:24:66:53:c6:97:d5:04:c2:9d:cf:02:a2:
3e:2a:6d:51:2a:83:36:ff:42:43:24:37:74:c8:59:00:29:12:
d7:e6:e1:5a:91:11:49:17:cb:ea:6c:66:86:8c:7c:cc:dc:0d:
54:f8:17:31:f0:ad:eb:35:77:38:b0:b1:e4:90:b1:00:7c:be:
88:a5:d2:18:fa:4a:8b:d2:02:a0:40:fa:b7:4c:48:89:6a:7f:
41:ae:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:54 2026 by rpki-client