Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: GLBrkClmU7mcevsKCf2x4Put08qRB4nbUBf5B9c+/Mg=
Subject key identifier: 3B:DF:D1:84:F9:61:BB:B1:15:3E:67:6E:8B:6C:2A:80:80:07:50:6D
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 01A13FA7C856DD48DE154E6610FE245B7E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 0766
Signing time: Thu 15 Oct 2026 13:02:02 +0000
Manifest this update: Thu 15 Oct 2026 13:02:02 +0000
Manifest next update: Fri 16 Oct 2026 13:02:02 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: 9BmoK8hk1aOh8KDULKJpkSqaWjbV2aPNaQC1APSNtCY=)
2: hX56E-sl6aHlAsJVpCUmggT-itQ.roa (hash: zGrp5qWxfaDDtjYhp74VIMRhcorx1N2/XDFt+aUjFhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:c8:56:dd:48:de:15:4e:66:10:fe:24:5b:7e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Oct 15 13:02:02 2026 GMT
Not After : Oct 16 13:02:02 2026 GMT
Subject: CN=3bdfd184f961bbb1153e676e8b6c2a808007506d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:bb:4d:cb:1d:b0:5c:65:71:db:c2:d7:aa:
92:56:04:39:e2:f1:8a:30:25:f0:4c:08:19:ea:81:
c7:0c:a5:f9:6f:b2:23:00:c4:92:39:e4:fc:4c:1c:
02:57:56:5e:a0:de:e7:83:76:c7:10:fc:30:f8:a5:
45:83:31:c5:5f:12:4b:b9:8a:64:ba:32:4a:fb:a3:
e0:a4:9e:91:17:67:91:58:df:2f:b6:89:56:17:37:
b3:cb:80:23:31:79:f7:2d:7e:f4:72:5e:66:1e:fe:
34:81:e5:73:19:e7:5a:24:55:33:6f:fb:49:26:c0:
24:ed:61:ba:ed:5d:01:ef:1b:33:e2:4a:dc:c3:a4:
d0:07:f4:b2:b5:59:c4:c3:e1:35:8a:16:f7:95:ec:
9c:be:2d:9a:4d:fe:93:bd:94:47:1f:90:e9:3a:08:
29:07:4a:b0:ae:88:f9:b5:ea:e6:97:2c:ef:07:df:
18:15:46:a3:5b:96:e4:e4:f9:e2:b0:0d:78:ac:4d:
b2:07:e6:20:c8:ae:c5:b9:b7:d7:a6:90:5a:4a:90:
8f:93:44:17:de:f8:83:b9:b1:5b:10:58:10:67:01:
40:8a:1e:8b:96:bc:53:74:15:e9:4c:dc:d1:b6:98:
fb:71:bf:56:02:e9:f7:6c:19:01:45:a3:10:ae:02:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DF:D1:84:F9:61:BB:B1:15:3E:67:6E:8B:6C:2A:80:80:07:50:6D
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:55:e4:18:5c:56:11:58:08:21:c0:2b:20:37:08:39:2f:84:
3d:8d:d6:07:a6:f8:8a:e3:a2:09:17:bf:13:f0:44:7f:40:16:
50:c2:09:9a:94:33:1b:e8:66:17:e9:fe:d1:94:4a:67:32:c9:
53:36:59:2f:3e:b4:69:0c:26:02:cd:6f:e9:65:7e:a6:2c:44:
85:98:ae:54:bf:06:4d:ca:9a:10:ab:a9:d5:2a:2d:f1:a4:52:
db:27:6b:ee:23:29:b0:a6:fd:d3:48:9d:0b:35:2a:45:33:81:
99:ad:27:13:6b:fb:a0:66:86:4a:4e:83:fc:25:96:4e:b3:94:
a3:db:95:67:1d:0b:78:49:93:b5:3f:49:f9:fe:62:d0:07:ce:
cd:c0:3c:a8:d2:12:25:a2:7e:75:73:63:13:57:82:6a:65:4c:
79:28:5e:06:06:05:eb:d3:9b:f5:eb:36:71:d1:41:57:b1:99:
a7:cf:d9:67:c7:5d:20:b3:63:1c:d1:a0:21:13:53:b0:3a:23:
b8:a5:72:77:56:2d:5b:03:bb:3b:49:b2:82:16:f9:40:54:90:
db:be:4e:40:2b:20:00:a4:c4:6d:3e:dc:6d:ad:56:2a:79:20:
b5:c7:d8:8c:59:7e:75:58:b6:77:ba:d2:05:87:48:cf:75:5d:
5a:31:2d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:39 2026 by rpki-client