Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: 69IN3y0jCH/AEDZtoXq9BtQhkYclI4PtKAmG7WDGqug=
Subject key identifier: 39:E8:C2:E4:7D:E3:60:9A:8E:55:61:51:6D:6C:5E:26:0C:E7:D3:F3
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 019D3789D7D6196099D9B84B4E091EFD8F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0DC7
Signing time: Sun 29 Mar 2026 03:01:13 +0000
Manifest this update: Sun 29 Mar 2026 03:01:13 +0000
Manifest next update: Mon 30 Mar 2026 03:01:13 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: sH5mD5AUhkjvll6TvfSXS2E1UXdYGf73iWQNqt0ovt4=)
2: y2Yw6-Xzss6T6oXyrYGmZ001q9U.roa (hash: d8IrU4kU0qWnxL1m5NsiZ0ByNC3CpvcAWEyIv/Y47HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:d7:d6:19:60:99:d9:b8:4b:4e:09:1e:fd:8f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Mar 29 03:01:13 2026 GMT
Not After : Mar 30 03:01:13 2026 GMT
Subject: CN=39e8c2e47de3609a8e5561516d6c5e260ce7d3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:be:f6:31:c9:61:ca:80:85:86:90:f7:22:
5f:ac:b3:76:8c:57:f8:af:fe:27:3f:de:3e:ff:a5:
e9:31:c1:ea:ff:e7:4b:82:a0:8b:69:bc:f5:47:b3:
dd:99:b5:11:55:3c:3f:92:7f:a3:4a:71:e4:16:09:
5b:b3:85:42:04:16:9a:06:7e:88:94:97:f9:5b:a5:
4f:74:40:16:2d:0d:f5:3e:01:f4:60:cb:17:3e:ea:
3c:73:41:3c:d7:a1:13:39:5d:a3:8c:b2:b1:73:d3:
10:90:3c:6d:f1:55:6e:bc:62:c6:30:3d:16:36:d5:
a3:9b:f8:94:26:6d:03:99:0b:0c:8a:69:14:1f:8c:
43:35:4b:5b:b8:af:43:0a:db:22:bb:1d:65:9a:bd:
1a:fc:25:f9:24:22:f8:ef:ac:56:e0:3e:24:d1:7b:
b2:1e:a1:67:66:64:7f:39:2d:77:67:d6:60:99:83:
a9:d7:4f:22:b8:93:2d:d8:5d:20:94:de:8a:5e:6f:
a6:fa:3e:dc:94:fb:7c:52:f4:0d:de:c1:ac:12:d0:
40:55:b0:7a:4a:c5:bf:2c:90:d9:8d:db:3e:eb:45:
79:86:d8:ca:80:91:95:95:2c:1e:36:e7:1c:f9:45:
b0:56:77:8b:1b:63:5b:36:2d:b5:a7:a5:86:2a:1b:
0a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:C2:E4:7D:E3:60:9A:8E:55:61:51:6D:6C:5E:26:0C:E7:D3:F3
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fe:b1:74:2f:08:39:66:e1:30:aa:d7:7b:b6:1b:14:dd:d1:
94:62:03:35:90:7f:41:ad:29:fb:af:1b:2f:09:ab:b9:e7:24:
35:15:36:cf:b6:79:a9:c3:bb:51:76:35:25:84:52:25:d5:e5:
33:e5:65:4b:39:57:9d:e2:0a:c0:49:10:8c:0a:64:17:fc:14:
f7:92:ca:28:5a:9c:97:e2:ea:d9:bf:46:17:fe:b9:a1:04:e7:
4c:2c:f6:fc:4b:e8:a6:6b:c4:00:54:41:1e:bd:9c:fe:ff:ba:
5d:70:1f:e8:7a:c0:ce:3d:73:75:41:93:4e:e2:b0:31:a8:15:
6c:e1:74:ab:da:2e:ed:a8:1c:51:ae:c4:b4:cf:34:08:56:d4:
8e:3e:3e:be:61:c4:a8:23:99:50:a4:1c:be:98:4e:f9:06:91:
f2:21:c7:25:8f:1f:1f:07:b2:32:86:ac:24:b4:75:c8:0e:4e:
7b:e2:73:dc:19:d0:2c:f6:d7:26:14:15:9c:4e:31:c5:cd:a8:
80:3a:57:1d:20:f1:6f:b1:7b:38:c6:76:20:00:25:66:17:0e:
1d:0d:57:70:f0:d7:16:6c:cf:53:fe:e9:7e:1e:b3:aa:48:26:
60:fa:78:52:7a:13:97:56:6e:58:fa:b9:92:8b:fe:2f:d2:46:
68:3b:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:29 2026 by rpki-client