Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: nEZfWhtlp9YqSQOfUIARX5ajifgmnhArR12xPq0JyIc=
Subject key identifier: 8D:B3:47:C3:CD:CC:CB:D4:C6:45:AC:F2:33:D2:38:E6:1B:48:5B:62
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 01A148730EF4FED7D20DD702473C3D8244BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0FE2
Signing time: Sat 17 Oct 2026 06:01:02 +0000
Manifest this update: Sat 17 Oct 2026 06:01:02 +0000
Manifest next update: Sun 18 Oct 2026 06:01:02 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: CiQTsAG0OEiF5XSG9/FnbEhg1T/WfEH7zLujIYP3QfY=)
2: y2Yw6-Xzss6T6oXyrYGmZ001q9U.roa (hash: d8IrU4kU0qWnxL1m5NsiZ0ByNC3CpvcAWEyIv/Y47HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:73:0e:f4:fe:d7:d2:0d:d7:02:47:3c:3d:82:44:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Oct 17 06:01:02 2026 GMT
Not After : Oct 18 06:01:02 2026 GMT
Subject: CN=8db347c3cdcccbd4c645acf233d238e61b485b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:7b:06:93:ea:16:c6:82:ce:54:bc:ef:52:
89:d6:a3:40:47:ed:27:d7:d9:9b:9d:56:b1:5b:d2:
04:96:a9:70:72:65:d2:7a:10:c3:d8:f4:a6:b3:2b:
c2:4a:ef:7b:9c:1c:24:2c:27:3a:fc:22:44:a6:56:
66:50:cb:d1:a3:8e:b1:e4:60:ca:63:57:f7:fc:16:
19:cb:d0:70:de:3c:8f:04:fb:5a:4d:2d:74:f0:70:
79:79:d4:ff:11:47:45:fa:87:f3:0e:1c:03:75:26:
5a:3f:f2:b8:81:0a:33:be:4a:fa:cd:5a:c6:84:39:
0b:17:36:38:3c:6f:33:17:a7:9e:45:c4:a2:6b:a6:
dc:7d:bf:1a:61:c9:94:e7:e8:c1:ae:91:a2:00:df:
73:40:bc:e0:8f:37:c2:32:18:c1:d1:40:0c:5a:d4:
f7:7b:8d:c4:5f:a2:f8:53:93:9d:3f:f6:1c:4e:d3:
d8:0a:ba:64:df:e4:57:59:d5:5a:19:3e:aa:7d:88:
f5:ac:5b:eb:31:72:30:18:73:ff:0c:5b:e5:fc:ba:
d0:84:ae:7a:04:40:13:79:96:93:4f:9a:fd:70:aa:
a5:77:bd:04:3b:22:a8:42:73:92:76:61:00:b1:1f:
2c:36:51:b3:33:f4:be:ae:99:be:10:73:a3:5d:a7:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B3:47:C3:CD:CC:CB:D4:C6:45:AC:F2:33:D2:38:E6:1B:48:5B:62
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9e:3b:80:e1:22:54:07:24:5f:9c:b8:bb:e6:0d:0a:92:a8:
db:83:f0:68:09:53:85:d4:13:64:0a:bc:88:60:4f:cc:01:7b:
5c:84:e8:59:2e:15:b5:42:22:71:7f:4d:45:bb:d6:b5:32:19:
bb:d0:3a:fc:1b:b8:c6:f4:b7:00:da:82:20:f1:7d:80:b8:50:
04:a2:c3:35:04:c3:d3:bc:84:94:f7:f9:27:b6:21:93:94:7a:
51:d6:83:d8:11:d7:55:18:48:f6:34:e7:3a:a0:cd:48:76:3d:
a9:29:d6:31:ed:50:3d:cd:2c:a7:02:1f:a1:02:d1:82:3a:f8:
0f:e5:09:0c:40:47:a3:12:1d:37:83:20:15:d1:36:10:5f:6f:
df:4b:28:ea:dc:49:b2:84:51:19:5c:73:d1:1c:3f:fc:16:2f:
b6:3c:d7:44:60:0e:56:86:d2:f2:83:d6:f2:c0:81:48:ac:5c:
84:23:7a:60:94:b2:87:ad:57:91:3f:15:98:e1:47:8e:35:b4:
1e:48:6b:f9:ec:ba:40:9b:7a:b1:b6:dc:29:ff:25:8c:77:9b:
0d:62:69:0c:f6:9d:3b:68:02:6e:5b:fc:bb:7f:50:ed:5f:ef:
43:ab:5a:c4:e7:ab:4c:7b:7c:2f:53:09:e2:9d:f4:7b:5a:2a:
da:01:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:28:13 2026 by rpki-client