Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
File: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json)
Hash identifier: 9n/jIgL20HUFJgFoL6W0b2hnxBM5qT5YdEDXLV5oxIg=
Subject key identifier: 98:44:44:E3:A8:95:D9:00:AC:06:BA:46:6D:5A:F6:31:4B:E9:BF:00
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial: 019CAA21CB245AA8B37983CFDF45D8FCA9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
Manifest number: 15DD
Signing time: Sun 01 Mar 2026 16:01:07 +0000
Manifest this update: Sun 01 Mar 2026 16:01:07 +0000
Manifest next update: Mon 02 Mar 2026 16:01:07 +0000
Files and hashes: 1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: A9uMHHBqsYEYNSDtaCQd/UD0lCaZG4R2babS6OuqfG0=)
2: RSe6J6StOicXEQf8j22iaZH1Wqw.roa (hash: yq7M1favZHDaKZGtuLamDm7eKgNK2HtsjIbAmOI1HpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:cb:24:5a:a8:b3:79:83:cf:df:45:d8:fc:a9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Validity
Not Before: Mar 1 16:01:07 2026 GMT
Not After : Mar 2 16:01:07 2026 GMT
Subject: CN=984444e3a895d900ac06ba466d5af6314be9bf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:57:66:c2:d8:e6:ec:8d:92:e6:81:c1:55:dc:
88:87:85:7b:f5:cf:6b:9c:9c:ec:bb:0f:74:21:ea:
ff:eb:4c:a4:30:88:ae:dd:4e:0a:2f:03:2d:f6:53:
a9:75:9e:8d:9a:86:67:59:46:b5:1c:5c:02:3d:52:
51:e8:e5:e7:de:c5:1a:b3:50:80:bd:32:b1:39:ba:
54:57:e3:9c:6a:8b:64:58:d7:03:79:38:be:2d:0c:
b8:35:a7:3e:d1:fe:b0:db:63:84:42:bf:56:06:05:
27:00:cf:4e:1b:7c:af:c4:2a:25:58:73:90:a5:99:
b9:fa:60:6f:50:68:6a:b0:01:6a:c3:a8:9b:8b:7f:
56:8a:eb:58:1a:c9:ba:ae:b2:68:12:86:af:1a:f6:
1c:b3:65:cf:d0:85:37:9d:76:bd:41:13:1c:93:69:
3d:66:7d:fa:69:c7:1e:f6:d8:b5:d3:cf:4d:b8:02:
8e:5c:51:73:6f:f9:1a:35:fe:e7:ef:a1:31:8a:d2:
ee:5b:45:b3:68:4b:21:34:0e:13:f0:1a:38:c7:02:
b8:40:ca:49:2c:da:33:1e:7b:e0:f7:68:d9:19:f6:
2e:57:f0:43:19:31:b9:54:35:d4:54:81:3c:90:08:
1c:fd:32:14:67:60:54:1b:36:bc:0a:f3:3e:a0:d8:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:44:44:E3:A8:95:D9:00:AC:06:BA:46:6D:5A:F6:31:4B:E9:BF:00
X509v3 Authority Key Identifier:
keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ec:a6:e6:a0:92:30:31:cc:86:af:fa:74:ff:1b:79:1d:2f:
55:44:f2:88:1f:ba:bd:69:e2:02:79:d0:ed:a3:ec:52:39:82:
69:e0:cd:21:b5:be:d9:b8:a0:99:78:d4:24:79:95:61:70:12:
f1:9e:f1:31:bd:91:57:da:a3:19:5d:ee:1f:5f:fc:6a:24:73:
b3:c8:13:0c:a9:a6:eb:d9:5c:41:f8:a9:cd:4b:b7:8f:71:48:
a4:b9:e4:63:6d:d2:d2:f1:4f:87:04:04:bb:df:b4:c3:03:0c:
9a:e9:05:d4:c4:bd:e6:bc:ce:36:93:c2:b2:ec:8b:b4:28:d6:
01:86:63:dd:c5:69:35:70:b5:22:1e:b3:02:b9:b0:45:74:26:
db:79:eb:7e:31:79:91:26:3f:44:1a:a8:a5:fe:ec:d2:06:4d:
80:7c:03:34:30:57:d4:32:a5:92:6e:c0:48:30:85:43:d1:4e:
e5:90:ff:b8:49:dc:49:c3:ce:33:10:15:72:b9:cc:a6:33:6f:
a4:0e:28:8c:b6:d5:14:a3:6e:29:51:d5:82:25:f0:61:05:c3:
c3:3f:55:48:24:2f:51:83:91:51:cc:74:27:36:00:fa:8d:be:
6c:33:21:b7:04:6f:42:06:c1:68:b5:9c:84:ef:3c:b3:77:58:
59:79:3a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:22 2026 by rpki-client