
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier: +mxxza8D9512XVCu1n576ZEQlpmV2njdTZhUFNGN4aU=
Subject key identifier: E3:B5:00:F1:C3:FD:C3:98:B0:F8:DB:DF:26:99:93:9C:C6:7F:D0:DB
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 019E4F8F13E66F102E8B11BB85EDE3658277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number: 1920
Signing time: Fri 22 May 2026 12:00:37 +0000
Manifest this update: Fri 22 May 2026 12:00:37 +0000
Manifest next update: Sat 23 May 2026 12:00:37 +0000
Files and hashes: 1: 3BxhZ35N8Qx2oPV8uifmlMo5dOs.roa (hash: bD1bjEPm+DLe/WM+85t8bSN4Tr3PbaJNuazlrJ3Q/3o=)
2: SoyEFopk-R4dS6W4GId_dIzG6Fo.roa (hash: 8Qh9O/rztM/wDJzj5wDIv0KZPNCBmgUCZ7Xbj18mMsE=)
3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: rsQKEnBA6yec0Cy13yffcgD+q2X3K9odnGou1s9dFnc=)
4: zfvsegXog0j8iHhgS6fpZB-7wA0.roa (hash: bFu3gDNhMpBoThiANf0cCs15MmxVpxeF1StwYMxxHlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:8f:13:e6:6f:10:2e:8b:11:bb:85:ed:e3:65:82:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: May 22 12:00:37 2026 GMT
Not After : May 23 12:00:37 2026 GMT
Subject: CN=e3b500f1c3fdc398b0f8dbdf2699939cc67fd0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:b5:a2:ae:64:65:a8:87:a6:aa:fa:b5:ae:
af:31:21:43:32:30:70:b7:cb:55:e9:1e:cb:4c:9a:
6b:3c:4d:b0:57:e8:5b:f6:43:d3:78:d8:38:ab:8b:
38:c1:2a:f9:6b:eb:94:65:87:3a:70:48:42:31:32:
58:8b:5f:99:24:e2:e5:1d:d9:a2:63:81:fa:80:02:
cd:ca:0e:75:d6:5e:2b:77:3e:72:7a:aa:a2:17:2e:
e2:04:7e:b0:4a:e1:cb:48:3d:ec:00:35:36:69:67:
37:73:14:68:46:1c:c4:80:fb:dd:e1:b6:0e:e8:b8:
0d:5b:f6:c2:f0:19:3c:3f:3f:b5:0d:ec:8e:d8:10:
89:6c:aa:0e:62:3d:f6:4a:3d:93:43:98:91:c9:47:
4a:31:f6:20:fd:1f:c3:59:a8:3f:c8:68:43:18:c1:
72:88:a2:a7:c7:a6:df:2b:8a:4a:63:26:dd:bc:c3:
0f:17:82:30:59:37:55:59:d3:dc:be:84:43:b9:45:
7d:a1:45:c9:9a:57:f4:1c:39:d9:cc:46:39:9f:53:
45:4f:64:0a:8d:2b:bc:73:12:21:64:cc:f6:7b:e6:
17:2b:0f:81:45:c5:cc:9f:15:bf:e9:b4:bd:1b:00:
9a:36:4b:36:22:dc:76:ee:c6:a6:74:ab:f8:d4:75:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B5:00:F1:C3:FD:C3:98:B0:F8:DB:DF:26:99:93:9C:C6:7F:D0:DB
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:29:ea:dc:6f:3e:ff:41:04:75:6a:68:56:6b:fd:f3:98:53:
52:66:1c:1f:7c:ad:b7:1d:21:92:7b:b4:c6:18:48:45:f7:2d:
9e:2d:6f:94:38:5d:ca:ec:68:49:1e:2e:a2:5a:07:2d:d5:eb:
d7:90:c8:b5:62:1d:d8:30:2d:bc:27:b3:88:ca:6d:8e:2f:53:
38:33:02:3c:08:0b:fa:1e:da:cf:35:7f:3c:a3:1b:96:57:99:
de:31:4d:db:66:4c:f8:64:ce:73:94:6d:67:b3:5a:43:c4:e3:
a9:d8:9c:a2:4b:a9:0c:b6:17:9d:5c:af:bb:76:75:f3:19:e3:
80:9a:f7:64:d7:16:d7:95:4b:e2:d7:91:c1:07:67:25:cb:50:
3a:83:32:4a:b6:64:86:44:d0:49:19:96:4a:10:8a:f3:9f:20:
aa:9f:e8:8a:78:20:39:74:95:a9:f8:7c:1a:73:c3:7b:93:ac:
19:db:fd:96:e4:87:1a:90:35:eb:bb:de:b4:c6:ef:92:96:d4:
1d:b6:9b:9a:bc:f1:c4:fd:7a:9d:a9:ae:7e:81:00:a8:ae:c5:
f1:b3:64:56:32:ba:aa:e8:1a:2b:5a:16:44:99:7b:11:8c:e7:
ae:07:2a:7f:1e:91:2f:b1:24:0d:95:9b:63:2d:c3:be:70:e4:
bb:56:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:09:46 2026 by rpki-client