Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: Sg0N1NdyOj6+oBkm6RUNZZidu5xJN8IJCFii6DcvEQA=
Subject key identifier: D3:C2:F0:E0:86:FD:B2:B3:3F:67:A4:6E:25:DD:43:9A:4C:C9:0E:DA
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 01A11E2D9E340AFDFB2DEB899BDC92158717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 0423
Signing time: Fri 09 Oct 2026 01:01:08 +0000
Manifest this update: Fri 09 Oct 2026 01:01:08 +0000
Manifest next update: Sat 10 Oct 2026 01:01:08 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: KqBNRB0ymKg7JYBtDfhRA9zUPg/g17NH2jMIFvb2ukA=)
2: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (hash: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0=)
3: toafHdccwaO4BPTp2xBSBnS_8c8.asa (hash: nyXXcj8Nt4VtjAWlE+GZ7d5hDa47Nf9jEIoe/rrF41o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:2d:9e:34:0a:fd:fb:2d:eb:89:9b:dc:92:15:87:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Oct 9 01:01:08 2026 GMT
Not After : Oct 10 01:01:08 2026 GMT
Subject: CN=d3c2f0e086fdb2b33f67a46e25dd439a4cc90eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:94:9a:a5:05:74:08:2f:38:8f:c6:c0:c4:
80:6c:f8:0f:d3:93:6f:d3:62:ba:73:ba:6c:39:9a:
fb:a3:c2:a3:cf:ae:00:10:68:7a:9d:13:85:41:ba:
ea:62:c4:ca:c2:49:fb:65:47:7e:80:e2:52:1a:45:
7d:23:ff:44:7e:31:5f:6b:80:7e:d6:d2:c2:5d:19:
db:03:fe:d9:d3:32:5a:cd:8e:cc:f0:5b:28:67:b5:
00:fc:66:33:b1:34:5b:ab:cc:e0:23:a7:4f:3d:c4:
67:51:26:0b:02:73:a5:ef:14:d9:1b:37:85:27:2d:
2d:a7:39:b7:a4:9a:f9:df:db:6c:99:89:da:7a:42:
e0:f6:94:26:a7:e1:05:1a:87:22:34:b3:aa:61:8b:
4d:33:19:f7:6e:c4:43:51:e6:5e:b5:d9:b2:af:a2:
bf:5c:b7:3d:c4:69:db:d3:d6:6b:4f:ec:13:16:da:
1c:5d:c6:6e:42:e9:05:6c:30:8f:d8:7d:e7:55:07:
6d:21:6c:1f:26:29:e1:4d:a4:ba:73:b6:d9:ac:82:
7c:1c:91:62:c8:1e:a6:c7:db:02:36:80:35:b3:55:
37:5f:13:c7:62:a1:e5:94:05:42:d8:09:5f:5e:0f:
8b:f8:27:6c:a8:03:17:d2:76:e3:d5:00:b3:cc:4e:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C2:F0:E0:86:FD:B2:B3:3F:67:A4:6E:25:DD:43:9A:4C:C9:0E:DA
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:10:19:3d:ba:43:45:96:86:e1:08:e3:4b:e6:e9:71:da:68:
cb:ee:4b:36:bc:74:c3:f2:2a:22:ee:b0:64:18:69:a3:81:a1:
61:ca:27:5d:03:96:11:32:38:3d:da:62:61:61:65:4b:a5:da:
f8:3d:4c:a1:c3:b7:8a:9f:4d:4e:e4:2c:0f:91:14:e2:87:5e:
16:c9:d9:6c:4d:dc:7e:ed:d8:23:5e:2b:e8:74:e5:78:7c:a6:
c5:d6:52:2f:f5:21:90:63:46:b2:8a:8f:d0:25:bf:2e:19:8b:
3a:46:67:5d:36:73:d7:bf:0b:ca:17:17:2f:a9:9f:9d:41:d8:
91:91:ef:6b:e9:86:18:80:c6:09:0e:8a:cc:00:c9:44:a9:8c:
13:bf:4a:da:c4:e3:41:c6:b5:24:36:71:53:5c:86:8f:24:84:
c2:ad:e1:27:8c:e5:65:5b:68:ee:bb:1e:32:58:3f:52:64:4a:
81:bf:3f:b7:3a:b2:a6:6a:00:ee:dc:fc:66:3f:4e:4c:1f:23:
17:24:6b:7e:26:ef:c0:45:b7:6c:0a:df:f1:01:7b:f7:b0:c5:
69:6c:df:11:59:b9:fe:6d:d8:58:be:f7:09:2a:f5:90:6c:5f:
d2:e3:b7:21:bb:19:01:21:a1:ee:67:67:c2:40:f2:0d:32:6d:
ff:89:4b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:40:03 2026 by rpki-client