Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: uJXDU2IntU9HGVD9gyIgneNSxH8CDh83Bib4nXchuOI=
Subject key identifier: B0:72:20:C3:16:49:5D:B6:D9:A1:2C:95:7A:CC:E8:3A:16:75:DE:A1
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 019E30A9299BBE2F0C118989733BE387AAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0E48
Signing time: Sat 16 May 2026 12:00:52 +0000
Manifest this update: Sat 16 May 2026 12:00:52 +0000
Manifest next update: Sun 17 May 2026 12:00:52 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: ltmIo54AoLHOKoe5NLmrZ29gmz3v8vUZjIfY5YspvSU=)
2: y2Yw6-Xzss6T6oXyrYGmZ001q9U.roa (hash: d8IrU4kU0qWnxL1m5NsiZ0ByNC3CpvcAWEyIv/Y47HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:29:9b:be:2f:0c:11:89:89:73:3b:e3:87:aa:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: May 16 12:00:52 2026 GMT
Not After : May 17 12:00:52 2026 GMT
Subject: CN=b07220c316495db6d9a12c957acce83a1675dea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:41:0a:5b:2d:0a:f8:2b:fb:54:40:dc:5b:
2b:a8:09:1c:09:da:b8:4d:77:5a:81:7d:b0:63:01:
87:81:e4:e0:04:c1:b7:59:45:d9:33:31:4f:7f:f5:
f9:21:6f:35:8b:97:db:93:49:45:e5:61:42:f1:77:
f1:5f:0a:5c:22:2f:66:7c:01:fa:ec:3f:dc:11:2c:
f2:da:08:2a:1f:ca:df:3e:34:35:77:e1:52:e7:25:
d2:c6:0a:38:b0:bf:8f:28:69:51:52:a3:4e:e0:bb:
fa:e4:83:c7:0f:f7:e9:8d:fa:ff:d7:4f:05:ab:2f:
10:21:68:e8:a6:c9:43:cf:69:8a:2c:34:ea:2a:7e:
89:79:bd:e5:ba:28:b2:76:d5:75:d7:2f:0b:bb:64:
0e:f3:7e:51:9e:ce:62:39:67:53:e7:d1:0e:6a:4a:
01:b6:2f:46:02:f9:16:6f:20:7c:66:1c:e1:f6:b9:
ea:d0:c7:23:87:fd:f8:e0:9e:92:df:c5:45:3a:21:
df:d7:f0:35:71:da:b2:fc:94:ab:5d:99:56:c4:c5:
05:a8:ca:11:c8:6e:54:c6:de:77:3d:bd:43:1b:b5:
ca:0a:ca:27:9d:2a:c5:86:3a:f7:9c:98:dc:c2:3c:
00:af:00:d5:dd:59:e4:10:30:58:79:41:1d:ee:5b:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:72:20:C3:16:49:5D:B6:D9:A1:2C:95:7A:CC:E8:3A:16:75:DE:A1
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0e:37:f2:3e:ca:bc:54:58:bc:19:91:91:2d:80:b1:05:f3:
e2:75:c4:8e:b0:fa:81:e9:84:2e:61:90:1e:cd:4c:87:3d:3c:
58:00:6b:98:c5:4b:87:34:b0:3d:57:1f:60:3c:ac:70:85:08:
d6:ea:79:9d:df:aa:9b:f8:22:4e:39:d5:d3:f3:d0:0b:82:6c:
2f:1b:e6:91:78:97:b4:bf:cd:c6:b5:82:92:34:04:16:f7:f3:
48:4a:43:2c:ce:08:d6:36:08:a1:6e:bb:79:c3:10:3d:e0:11:
0b:5e:5a:ad:d2:3f:6b:d6:dd:57:7a:15:d9:ea:9d:cc:9d:ff:
77:b4:89:06:cf:67:79:68:e7:b9:d0:24:ba:65:b9:44:b0:2d:
24:18:09:53:29:63:27:71:aa:15:a3:ea:35:d3:2b:b0:00:2a:
4b:61:5e:3b:fe:22:1b:fe:58:fe:1f:1f:2d:96:77:1b:b2:b8:
27:a7:e2:0c:c2:d5:d5:b0:89:59:f2:69:ec:f2:77:6b:dc:83:
e1:0e:bc:1d:38:57:36:25:f0:dc:bf:3b:1d:8d:3e:08:c3:90:
5b:26:e1:e6:ff:42:17:59:ec:b4:af:32:55:79:2d:ef:16:dc:
ee:c4:91:1a:e9:57:f1:dd:b9:60:f8:fb:18:eb:4e:a0:7e:82:
70:06:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:06 2026 by rpki-client