Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier: EsnNyuxNYeqhcKc7IAPwz1dyaf2iEc/0YiHq3PBfnCU=
Subject key identifier: 12:40:0C:FC:E0:AF:D8:C7:D2:95:18:EB:6D:67:47:7E:D8:4E:51:82
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer: /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial: 019CAC46AD74C4C55DA4DDEF599AB8390313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number: 1067
Signing time: Mon 02 Mar 2026 02:00:38 +0000
Manifest this update: Mon 02 Mar 2026 02:00:38 +0000
Manifest next update: Tue 03 Mar 2026 02:00:38 +0000
Files and hashes: 1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: 1QIStu/FRu3Nv9itiiLPsKtzv+tSZ87P9leFQQbqovI=)
2: 3KARvcQJLBK_AN72q-v-VXBedTc.roa (hash: QFK7Ue4or8LMr7VexDK6GWjCaMT28dD7LoXQN+qlc8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ad:74:c4:c5:5d:a4:dd:ef:59:9a:b8:39:03:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
Validity
Not Before: Mar 2 02:00:38 2026 GMT
Not After : Mar 3 02:00:38 2026 GMT
Subject: CN=12400cfce0afd8c7d29518eb6d67477ed84e5182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:9f:42:cb:e2:5d:ab:a5:c5:19:b1:34:3b:
8c:77:97:89:9d:65:2a:23:80:3e:8a:42:7b:81:90:
4a:5d:06:2d:99:75:e2:71:28:7e:f4:e8:22:05:0b:
4d:63:d0:51:96:1e:60:a0:ac:60:0b:7c:74:f4:77:
59:a8:a8:ac:15:73:f6:2e:1b:a5:ed:f2:25:31:87:
f9:c9:a6:2f:12:8f:1b:6e:35:51:b9:0a:86:58:59:
60:62:10:70:e4:d9:2c:28:16:c5:f6:72:bb:83:db:
16:b0:29:28:f7:27:a3:5d:b7:87:4c:50:9d:e3:02:
3d:0b:65:fd:50:f9:94:24:e1:eb:53:6d:57:cb:8f:
c5:39:5a:03:7e:14:e0:ec:5c:c6:66:af:62:14:db:
72:e5:0f:54:c7:d8:77:65:91:d6:e7:29:a5:af:51:
9c:68:ee:55:60:8c:e0:12:b8:68:aa:d9:5d:45:af:
17:bd:c9:f0:82:1d:39:9d:fe:25:2e:c3:5f:06:82:
82:37:fc:ad:4b:4b:88:d1:ab:35:36:00:18:fa:8f:
0b:04:04:9c:39:c1:e5:60:3a:09:63:fa:0b:e2:a9:
63:52:33:dd:e3:35:a2:5a:26:25:1a:73:da:5d:27:
bc:48:0f:99:b3:59:16:49:67:74:d4:5a:5f:73:59:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:40:0C:FC:E0:AF:D8:C7:D2:95:18:EB:6D:67:47:7E:D8:4E:51:82
X509v3 Authority Key Identifier:
keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:40:c6:33:6a:ff:7e:dc:3b:fc:f0:b1:66:8f:a4:b1:13:23:
a3:cf:35:5c:aa:47:05:ee:30:d2:88:63:8b:6b:43:f6:e0:af:
8b:b9:b5:a3:d9:e5:f6:c0:3d:d8:b0:d9:96:41:9d:df:c1:4f:
06:ed:f1:2b:83:4e:45:ca:d2:ac:cd:cf:0b:d5:5f:f9:a2:77:
00:6e:30:9f:52:94:8f:97:f8:cc:6e:fd:54:ac:f3:37:5d:11:
71:ba:b6:37:88:05:b6:02:25:09:9a:8d:c3:52:f4:7f:02:cb:
53:7b:02:fd:d1:2c:e8:13:96:d3:17:7f:dd:19:ed:74:fc:11:
78:36:97:44:5c:4b:5b:7e:ff:3d:d5:47:26:9f:e8:28:5e:3d:
ac:21:20:64:a6:9f:20:6a:21:ff:02:5d:55:b2:f8:81:74:65:
a8:36:70:e8:86:ac:1a:9c:1f:a8:c7:06:cd:da:a9:fb:4b:59:
ee:a6:48:93:75:ef:13:60:fc:bd:62:77:a0:0a:98:f6:9c:9a:
e9:16:45:33:6a:97:82:c7:ad:12:d4:07:ae:1d:ba:81:28:31:
dd:27:15:aa:08:b2:66:aa:bc:d2:dc:77:7a:6f:e6:4e:0e:fc:
62:a5:1e:8a:d0:96:43:6d:b4:e4:76:3d:6c:d8:5a:43:1e:8a:
4f:f4:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:24 2026 by rpki-client