Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: ogx3F1OSZ7F+hERo3dH514bIkPrqD/gZLnyUf5NSLDg=
Subject key identifier: AC:27:27:7A:32:B3:E1:6F:54:98:4C:53:CD:F0:C0:72:53:95:85:1D
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 01A0024A925593B5FF1F3F077AF576EB2F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 0390
Signing time: Fri 14 Aug 2026 22:00:36 +0000
Manifest this update: Fri 14 Aug 2026 22:00:36 +0000
Manifest next update: Sat 15 Aug 2026 22:00:36 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: r0sb2mBxH+BgUsxGkNIM6wmv2lbT/tYJmXet0y0Ha+c=)
2: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (hash: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0=)
3: toafHdccwaO4BPTp2xBSBnS_8c8.asa (hash: nyXXcj8Nt4VtjAWlE+GZ7d5hDa47Nf9jEIoe/rrF41o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:92:55:93:b5:ff:1f:3f:07:7a:f5:76:eb:2f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Aug 14 22:00:36 2026 GMT
Not After : Aug 15 22:00:36 2026 GMT
Subject: CN=ac27277a32b3e16f54984c53cdf0c0725395851d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:9b:62:fa:96:9c:a8:17:6d:f0:24:e2:a2:
bf:06:90:90:28:da:0f:58:df:39:81:31:0c:1a:60:
6b:80:7a:c8:35:9a:a0:7a:dc:8e:2a:37:ab:95:01:
64:17:e6:a5:21:2a:7c:65:d9:4a:37:9f:ec:e5:46:
5d:88:d2:2d:03:8d:83:18:07:4b:b7:c0:1e:e1:c4:
2e:d4:ad:9b:7e:a8:97:e5:9e:da:fb:ea:61:3e:5f:
29:7d:07:99:eb:a2:bb:26:6a:3f:e4:ac:76:6b:e6:
8c:d4:de:43:fd:ba:e5:6a:58:bb:db:88:4f:04:c0:
97:b0:b7:51:ef:39:8d:54:5d:96:ef:8a:88:50:47:
9c:10:74:df:35:31:7c:c9:96:ea:3d:73:25:e8:b1:
6b:08:79:98:31:de:aa:b3:00:01:0e:92:9d:0c:d4:
79:35:00:dc:d3:eb:e7:e3:28:ff:b0:a5:48:47:04:
9f:95:0a:b9:01:9a:04:a4:3d:e2:66:fc:71:81:89:
cc:f2:3d:b2:cd:f1:94:a3:2e:54:ad:b8:1c:a9:5d:
38:10:a6:e3:33:4b:25:f6:34:a5:91:4f:72:67:8a:
3c:76:53:29:23:c6:54:7e:91:a7:88:cc:5d:6b:33:
f3:8d:90:7d:dc:ec:73:98:38:1f:10:5a:fa:13:4e:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:27:27:7A:32:B3:E1:6F:54:98:4C:53:CD:F0:C0:72:53:95:85:1D
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7a:08:62:31:ef:39:ac:0b:5b:2e:5f:f0:1b:77:ed:d8:9b:
2d:0d:21:12:d5:51:57:88:ee:3d:48:60:7e:5d:9f:c7:01:ec:
a1:73:0d:df:e1:f3:61:e4:1a:65:0e:74:f2:33:d2:04:52:88:
f3:22:fb:47:79:4a:b2:1b:23:02:8e:88:e9:30:ff:e7:ea:0c:
c9:33:49:b2:ac:46:e4:97:e5:90:d7:1e:b5:30:32:74:35:ca:
2b:19:b3:75:f7:c3:d7:e8:cd:b4:09:cd:b6:34:09:78:89:1b:
65:03:b8:f2:38:bc:da:5e:7b:f3:c6:a4:0a:0f:f2:cf:62:f4:
03:2f:57:1a:2e:df:45:32:9d:3d:be:e8:da:15:29:43:20:14:
30:e1:07:af:43:52:1c:f5:00:c9:7a:7d:55:fd:5e:6b:bf:3d:
eb:11:50:6a:42:20:2d:20:9d:ea:e7:fa:cb:c0:95:26:a6:1d:
a0:f6:95:87:04:51:8f:a8:0b:4b:fc:bf:57:11:46:44:9d:a4:
4e:d1:d7:05:63:15:d6:3e:85:a1:cf:37:44:a1:12:2a:a4:49:
d8:e6:e9:f3:eb:37:dd:88:76:a2:31:6b:1c:5d:66:98:c3:e3:
89:be:30:04:c1:3c:a9:3a:ac:8d:b5:92:00:ab:a8:6e:68:9f:
2f:6a:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:06 2026 by rpki-client