Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: CDRnhGRSmR9TZQu5dXlhOeIgBwCiBn9na+frMNQW2N4=
Subject key identifier: DA:6B:60:90:04:BA:E0:14:21:DB:C7:C7:B9:26:FD:3D:62:65:59:A1
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 01A0CE5AB3AB9574A3CB100852504532026B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 13:00:45 +0000
Manifest this update: Wed 23 Sep 2026 13:00:45 +0000
Manifest next update: Thu 24 Sep 2026 13:00:45 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: gNIMW4lSDgb/6t2oAYE51Bdswi1Kzx1W8kCzcIsQa7g=)
2: Co-UgfR-RZ88nquGNkhgBiRlfWA.roa (hash: y8OicGcIeO8vwo/68H9AisrPu6OLxG9bR2N39A+AxS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:b3:ab:95:74:a3:cb:10:08:52:50:45:32:02:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Sep 23 13:00:45 2026 GMT
Not After : Sep 24 13:00:45 2026 GMT
Subject: CN=da6b609004bae01421dbc7c7b926fd3d626559a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:4f:38:bb:e2:ac:5d:ae:a6:7b:49:43:f0:
82:91:40:7e:ec:f3:f9:2b:e8:43:f1:eb:5d:32:6b:
ac:c0:50:84:85:0d:9a:39:88:4b:85:f1:34:41:ac:
c5:56:f8:8c:de:bf:93:9d:7a:b9:0f:84:4b:6c:01:
93:01:58:eb:24:c8:15:65:ee:71:fa:f9:3a:67:a7:
c5:f7:38:ae:2f:b6:ce:7e:8e:55:c0:ad:75:fb:24:
f8:fd:bf:4a:65:1f:4a:44:1c:f1:63:8e:23:ac:62:
f0:a8:3c:d3:40:58:bf:ff:af:3f:2d:71:af:c8:32:
99:d6:36:8c:ed:89:1b:2d:59:86:97:0b:ba:dd:b6:
ec:93:18:21:af:a0:de:37:1b:60:3b:f8:6f:65:59:
bc:5e:05:2e:60:e2:5b:20:30:42:53:92:46:cd:f0:
c6:e3:bd:bc:9d:6e:37:29:5f:ef:5d:d1:ac:05:f6:
12:61:29:2b:d9:23:4e:35:08:0b:e8:47:5f:35:24:
a6:75:f6:44:48:f2:48:18:5b:2b:17:8a:db:18:a8:
f4:e2:0b:de:d6:54:28:cd:73:e0:3b:82:2b:bc:16:
f5:6a:61:fe:78:0d:af:5d:48:8e:f8:f3:81:4b:6e:
22:e3:c9:cc:e6:b3:98:39:a3:5c:e4:04:d0:39:44:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6B:60:90:04:BA:E0:14:21:DB:C7:C7:B9:26:FD:3D:62:65:59:A1
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cb:16:62:18:0a:75:e4:c6:04:96:8b:97:fc:93:d2:f5:40:
e6:4b:ba:60:24:42:ed:b8:cb:c9:61:b8:e1:3b:2d:66:21:e1:
de:6b:ce:67:34:6d:e5:0f:24:e8:9d:39:b8:89:20:80:1a:c2:
a3:89:f4:5b:23:6e:84:1a:06:dc:d3:e4:de:df:cb:4f:53:68:
7d:b8:32:3c:5e:2e:dd:13:3f:c0:62:78:e9:b2:17:80:e4:65:
e2:07:55:8d:d3:2f:3d:b8:53:47:86:9a:55:48:08:10:8b:fc:
9c:56:2b:2f:67:30:59:a3:12:8a:bb:83:b1:fa:72:19:47:b6:
4d:a6:9d:09:a7:a5:da:d2:e8:f6:a9:b9:28:21:c6:6c:3b:bb:
9a:74:fe:b8:73:b0:b6:33:58:f2:a3:da:2c:65:02:a3:22:b9:
06:77:cd:dc:b6:50:e0:be:c4:45:94:77:91:7c:32:20:83:6f:
aa:41:3d:7a:ee:e9:f0:b3:29:93:f9:28:c3:54:35:bf:60:83:
00:3d:32:b4:c5:c3:41:ae:1e:3f:e2:28:04:28:8f:57:0a:e1:
27:18:37:d2:54:13:a7:0f:b6:12:55:e0:3f:79:a7:a1:7f:88:
bd:2d:02:2b:ca:d1:3a:bc:2b:cd:2b:e0:7c:5b:29:de:3f:ea:
1a:ef:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:52:07 2026 by rpki-client