Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: TglrFE9vrknGWWo/p4DYx7iCjY1pLGZCoovLHanqhEM=
Subject key identifier: F7:6B:C9:9F:04:58:8F:E0:82:8D:22:40:D1:77:89:70:2A:6E:C5:32
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 01A1C09CAC961245B8F5F96EF8561D2CD1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 1AED
Signing time: Mon 09 Nov 2026 14:00:55 +0000
Manifest this update: Mon 09 Nov 2026 14:00:55 +0000
Manifest next update: Tue 10 Nov 2026 14:00:55 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: FyMMKS7Ope2cmaWb0vOpT1zZeE3f/zPjCG2MNNn7pAg=)
2: Q3WTPfUFUp4m0ZjtwYkyBFPpV7k.roa (hash: CT1JMwYSy6oJySNRis4zt8oqjE+2sdxgb342qVOSd2I=)
3: tGQQE0G6RfcW_KUvdgu-B7S24aQ.roa (hash: J6CPfiAsYUjj4qoIrccznkrh+KkQ7aAvjwp+6DFw9Lw=)
4: uUrqBhh3OXly7eOQWNASPejUHp8.asa (hash: RetXR2CIKbeJVmkMUmUQ4OnKEpmaGDtgHyAAr0pvXgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:9c:ac:96:12:45:b8:f5:f9:6e:f8:56:1d:2c:d1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Nov 9 14:00:55 2026 GMT
Not After : Nov 10 14:00:55 2026 GMT
Subject: CN=f76bc99f04588fe0828d2240d17789702a6ec532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:12:d9:6b:56:75:c9:65:77:30:f1:4b:fd:
e6:84:90:05:a5:50:d6:e7:3e:26:2a:f9:c5:3f:6b:
b0:b1:81:a2:b4:e9:c7:b3:6e:41:98:9c:4b:4f:87:
b4:b6:07:a5:90:c2:a7:33:42:49:ec:b5:be:26:5e:
b0:96:2c:57:2a:20:36:e1:9d:17:2f:04:05:fe:2f:
38:6f:99:69:a9:a5:2f:be:4e:8c:3c:df:9e:28:97:
5a:bf:f0:13:de:5c:94:27:be:6d:5c:2b:ea:eb:ee:
f4:6f:9d:ce:7f:78:25:8b:b1:1d:4a:7a:02:07:69:
57:a3:39:54:13:e6:df:8e:c7:01:85:af:e6:5c:9a:
5f:e5:1f:b4:14:61:c9:d0:24:cc:99:ff:48:27:a4:
42:72:84:d2:8f:f5:74:e3:6f:f8:35:6b:23:b9:a0:
d7:95:ca:b0:50:7d:97:9a:e3:41:41:cb:bb:55:bd:
d0:12:5f:08:4c:0f:34:23:e7:ce:ba:c3:c1:73:b2:
aa:61:22:c1:31:e6:f3:19:f0:9c:1c:21:72:99:0f:
17:ba:c3:15:ce:b4:2d:b2:a5:11:cf:58:05:d0:22:
50:06:f9:fe:23:07:55:aa:18:7b:fc:12:1a:8f:1a:
38:0d:65:8e:6a:e9:66:7f:35:60:d9:33:c6:b7:d1:
3a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6B:C9:9F:04:58:8F:E0:82:8D:22:40:D1:77:89:70:2A:6E:C5:32
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:54:7e:06:57:73:d6:56:80:0b:54:b1:18:d4:5d:75:f1:72:
88:68:98:40:f9:c6:71:de:a1:4e:74:88:a4:5e:50:91:d6:e6:
c4:ef:79:a0:35:44:54:2a:c3:6e:2a:1a:77:b0:de:d2:ea:d2:
fa:bd:92:22:8d:a7:8a:13:fe:b6:a0:b6:8c:02:01:71:d3:c1:
88:71:4b:c1:8d:b2:ea:d4:df:ee:7a:b4:b9:3c:c7:ee:9a:80:
84:9e:8b:f4:98:3b:15:bf:70:6d:99:35:bf:7e:3b:50:b9:2d:
a4:62:27:5a:02:34:9b:7e:b4:b6:71:aa:d3:0b:85:16:2b:5d:
f2:2a:f2:f0:1a:49:ee:e8:32:bc:07:f6:b8:da:9c:a7:20:29:
c7:6c:2f:f6:9f:38:8a:69:b5:6a:51:dd:37:83:c1:7b:ab:82:
b6:80:b6:94:94:4a:b7:1d:55:64:cf:2b:38:ae:85:ba:7c:09:
ee:f5:1f:95:c2:be:c2:e5:a3:57:fb:bb:53:75:65:0c:ba:61:
fe:c4:a6:34:14:d9:60:93:ab:dd:77:ff:66:3c:d4:70:63:69:
31:b8:50:bf:19:55:aa:34:05:ec:81:95:48:1a:91:cf:72:7e:
c4:7c:ac:f0:87:32:d0:1a:bf:77:6f:ab:93:07:0e:1b:dc:04:
ec:60:63:8b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHAnKyWEkW49flu+FYdLNHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OWFiZTQ1ZjIxZjEyZTRiODAyZjMwOTQ0NGMyNDc1OTAw
MGViY2YwHhcNMjYxMTA5MTQwMDU1WhcNMjYxMTEwMTQwMDU1WjAzMTEwLwYDVQQD
EyhmNzZiYzk5ZjA0NTg4ZmUwODI4ZDIyNDBkMTc3ODk3MDJhNmVjNTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfcS2WtWdclldzDxS/3mhJAFpVDW
5z4mKvnFP2uwsYGitOnHs25BmJxLT4e0tgelkMKnM0JJ7LW+Jl6wlixXKiA24Z0X
LwQF/i84b5lpqaUvvk6MPN+eKJdav/AT3lyUJ75tXCvq6+70b53Of3gli7EdSnoC
B2lXozlUE+bfjscBha/mXJpf5R+0FGHJ0CTMmf9IJ6RCcoTSj/V042/4NWsjuaDX
lcqwUH2XmuNBQcu7Vb3QEl8ITA80I+fOusPBc7KqYSLBMebzGfCcHCFymQ8XusMV
zrQtsqURz1gF0CJQBvn+IwdVqhh7/BIajxo4DWWOaulmfzVg2TPGt9E61QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPdryZ8EWI/ggo0iQNF3iXAqbsUyMB8GA1UdIwQY
MBaAFPmavkXyHxLkuALzCURMJHWQAOvPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1acS1SZklmRXVTNEF2TUpSRXdrZFpBQTY4OC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZDNlM2Q3LTAzNTctNDg3ZS05ZmVk
LWE4ZThiODkzMTU1Mi8xLzEtWnEtUmZJZkV1UzRBdk1KUkV3a2RaQUE2ODgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y3L2QzZTNkNy0wMzU3LTQ4N2UtOWZlZC1hOGU4Yjg5MzE1
NTIvMS8xLVpxLVJmSWZFdVM0QXZNSlJFd2tkWkFBNjg4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVR+
Bldz1laAC1SxGNRddfFyiGiYQPnGcd6hTnSIpF5QkdbmxO95oDVEVCrDbioad7De
0urS+r2SIo2nihP+tqC2jAIBcdPBiHFLwY2y6tTf7nq0uTzH7pqAhJ6L9Jg7Fb9w
bZk1v347ULktpGInWgI0m360tnGq0wuFFitd8iry8BpJ7ugyvAf2uNqcpyApx2wv
9p84imm1alHdN4PBe6uCtoC2lJRKtx1VZM8rOK6FunwJ7vUflcK+wuWjV/u7U3Vl
DLph/sSmNBTZYJOr3Xf/ZjzUcGNpMbhQvxlVqjQF7IGVSBqRz3J+xHys8Icy0Bq/
d2+rkwcOG9wE7GBjiw==
-----END CERTIFICATE-----
Generated at Mon Nov 9 20:13:17 2026 by rpki-client