Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: 7eVb1pGQ3VT8yabox/OtV9nhmO2UyVD5Ml3Ib5Je8bE=
Subject key identifier: 7B:89:58:40:C1:BA:60:FD:DA:93:85:38:0F:51:8B:BF:C8:01:41:C2
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 01A0C6D788E7AD5EA2C7433A9F8BDBE46E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 148A
Signing time: Tue 22 Sep 2026 02:00:09 +0000
Manifest this update: Tue 22 Sep 2026 02:00:09 +0000
Manifest next update: Wed 23 Sep 2026 02:00:09 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: Y6yCUzwa4+AK66GACPTS4J8M+rYOfPib4lnJoPYODG0=)
2: 1-sZNf9muu9U1hhvyCSyDMfB8YpI.roa (hash: ZTCQU0Xa904Op6SoRgBrlLkJy0zOrm95WiClUW4+PNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:88:e7:ad:5e:a2:c7:43:3a:9f:8b:db:e4:6e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Sep 22 02:00:09 2026 GMT
Not After : Sep 23 02:00:09 2026 GMT
Subject: CN=7b895840c1ba60fdda9385380f518bbfc80141c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:27:ba:7b:8d:f7:8d:c1:5f:4e:ff:94:52:
1c:a1:c8:4d:7f:60:26:25:f6:32:75:48:40:f2:04:
cc:7b:c1:b6:e6:d3:5d:92:ba:62:cd:11:3f:39:d1:
b4:f1:ef:77:c5:5b:c0:05:85:c4:90:17:1c:88:fd:
2e:7e:11:6a:2f:c9:2d:fd:bc:b5:3f:95:c8:d7:04:
b9:04:0f:c1:09:73:b8:90:d5:02:52:c1:46:8f:b8:
0a:d3:80:8c:f0:79:3a:48:33:95:00:64:e3:93:53:
0d:3b:66:90:58:c8:7d:82:eb:f4:47:c3:df:8d:86:
b9:5d:5a:91:47:54:11:27:9c:8a:66:c3:ed:89:81:
f0:9b:98:79:cc:34:be:bb:5f:b0:5a:ad:12:15:c0:
5c:cf:f4:d5:8b:ea:cc:48:5e:fa:68:16:b5:00:57:
ca:6f:d9:40:ee:b7:e2:28:5b:04:8d:ec:23:fe:ff:
84:9c:84:ee:d5:1c:3b:aa:ed:48:2b:91:5b:47:89:
d4:3f:79:e6:a1:e9:8f:b3:28:6d:ee:99:a8:db:3b:
3c:1a:d2:dd:9f:a3:c5:e4:dd:32:2c:46:f0:ae:37:
f9:4b:12:b7:0d:58:be:a5:f9:6d:a5:03:ca:e9:6e:
fe:e0:ea:12:10:34:a3:89:15:ff:b5:75:f2:6d:0c:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:89:58:40:C1:BA:60:FD:DA:93:85:38:0F:51:8B:BF:C8:01:41:C2
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d4:67:3f:06:9b:12:5b:cd:28:14:f5:fd:81:f6:dc:8b:1b:
b9:bd:c3:68:b6:c1:00:14:85:b5:a7:f4:57:c3:e4:06:16:1b:
b2:b4:18:92:0e:67:39:e0:e8:96:bd:67:84:0f:3f:46:98:ea:
5b:d0:0e:60:f9:4d:da:c9:e3:7a:94:12:3c:7f:36:1e:79:b9:
f8:35:d7:d0:1d:12:25:0e:4e:6d:68:5d:37:f9:22:64:fd:f8:
8b:d7:e0:74:63:0e:34:b3:58:b6:30:0b:a6:f7:fd:81:02:1b:
3b:a0:5a:6f:75:67:3b:ee:fa:1d:ef:69:0b:1b:35:bf:09:02:
c2:97:d7:69:4a:b2:56:83:74:6c:12:3d:da:95:a1:eb:b7:d9:
c7:07:b2:3d:63:56:6f:db:61:35:05:e1:59:e6:60:5e:5b:8f:
15:f8:6a:ef:17:a5:68:7d:8e:5e:06:ff:12:0c:6a:ea:1a:40:
5b:86:0d:cc:e1:1c:c9:f2:c7:0b:c6:d5:bb:12:98:de:8a:e7:
ec:12:af:92:72:97:bf:30:d5:66:fe:a2:2e:6d:b2:58:b4:7e:
d2:0f:c1:e2:cf:b8:be:87:c1:06:a2:83:88:b9:72:77:ad:76:
6a:9d:a4:11:20:cf:84:d6:64:be:4f:7f:5d:97:41:d3:6b:cc:
25:27:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:11:59 2026 by rpki-client