Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: pTvddaNesV7TDrIZy2sFe4XysMrlRoZcWzXofgwAN5o=
Subject key identifier: F1:53:46:68:17:4E:B8:91:6F:A3:AC:A1:77:3C:CF:A6:41:B7:AE:1D
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 019D99D0615245A64D1D52BD0AF37655C2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 12E5
Signing time: Fri 17 Apr 2026 05:01:03 +0000
Manifest this update: Fri 17 Apr 2026 05:01:03 +0000
Manifest next update: Sat 18 Apr 2026 05:01:03 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: zptiBjPlqebE6RUPOxeDIcWPkXXpbICvoKyraOjwFwA=)
2: 1-sZNf9muu9U1hhvyCSyDMfB8YpI.roa (hash: ZTCQU0Xa904Op6SoRgBrlLkJy0zOrm95WiClUW4+PNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:61:52:45:a6:4d:1d:52:bd:0a:f3:76:55:c2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Apr 17 05:01:03 2026 GMT
Not After : Apr 18 05:01:03 2026 GMT
Subject: CN=f1534668174eb8916fa3aca1773ccfa641b7ae1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:df:a1:56:50:95:d7:28:44:87:95:e8:45:
81:8b:96:2c:27:aa:01:1e:c4:ae:92:0a:73:74:bf:
35:f3:46:b4:5e:d8:56:e0:95:c1:89:90:3c:80:97:
fb:84:b8:1f:38:4d:23:c8:8e:90:32:be:9a:0c:86:
d8:c5:5c:f1:0e:65:6c:48:7d:2c:1c:11:c9:0e:02:
c6:a9:26:b8:d6:2a:54:b7:64:5b:64:26:98:61:2d:
5b:7d:05:b7:db:f2:f1:a4:c3:04:d5:d6:39:be:8d:
4f:23:74:7e:22:c7:77:63:7d:78:33:c7:65:59:f3:
a7:a9:96:3f:6d:4f:21:12:0b:6f:2b:e8:30:66:5f:
f7:91:17:e6:91:f2:18:de:27:13:a7:40:92:4e:6d:
99:42:ce:20:82:b8:d5:96:c1:19:b6:70:cb:b4:8f:
6d:bc:bc:7e:c5:b4:3e:34:54:f0:4c:7a:ae:29:46:
82:1d:7e:97:13:7a:b2:1b:6c:6f:1e:32:42:93:87:
44:9c:fc:65:fd:5c:44:f8:16:0c:13:ef:d4:c3:4e:
c3:d2:d0:f0:24:f4:02:18:a2:a3:10:a8:a9:a3:1e:
49:05:9d:fc:6b:a0:d5:e8:97:d3:65:9a:65:59:6b:
d7:22:c7:6c:98:36:45:a2:e4:9e:ce:8b:36:bb:81:
57:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:53:46:68:17:4E:B8:91:6F:A3:AC:A1:77:3C:CF:A6:41:B7:AE:1D
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cf:72:cd:3d:59:4c:56:ef:3f:be:1b:f4:08:03:50:3a:71:
b7:65:24:c5:75:0a:1f:fa:0d:6b:5c:a0:e0:a9:5c:5c:e1:49:
53:13:69:03:20:8e:12:07:31:7e:f0:31:26:88:36:58:f4:45:
6f:a9:e5:14:d5:82:ae:73:d3:be:07:d4:45:b0:29:9a:c9:61:
39:0a:b4:1d:55:96:45:7d:58:fa:9d:46:1f:b7:0f:23:72:99:
04:53:04:ba:12:e1:72:89:c8:20:22:8d:fe:27:f9:91:d6:d3:
63:b3:09:46:fb:f7:02:50:3d:36:37:85:28:55:25:c4:8d:4d:
2c:73:11:f6:a0:1a:49:ce:db:43:37:c3:cd:0d:56:c3:a3:ef:
98:7d:55:23:49:eb:5e:b0:3e:2d:2a:d3:37:0a:46:0c:b2:a7:
95:77:da:66:9e:c0:3d:27:6f:a9:66:f8:37:82:93:90:fc:96:
0f:45:cc:be:3b:58:ce:d9:fe:4f:36:e2:d7:0b:46:9c:92:65:
29:e6:1d:2b:b8:02:99:8b:63:5b:b8:5b:84:7a:98:90:e4:c0:
17:21:13:22:5a:cb:5d:a6:37:81:19:39:22:70:20:88:9f:43:
48:e5:ff:e5:68:5c:a1:51:db:49:e1:df:ec:fb:88:d1:ab:e7:
ca:46:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:50 2026 by rpki-client