Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: KKgzBxlpXe9765q9cMnLswEUwrKActNSAwXFNpzGv7w=
Subject key identifier: D9:35:3B:EF:C0:B8:9A:29:6C:74:22:EC:F0:31:AA:23:1A:C7:48:0E
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 01A14015F24AFC97B96E40C2D62795F16597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 1052
Signing time: Thu 15 Oct 2026 15:02:22 +0000
Manifest this update: Thu 15 Oct 2026 15:02:22 +0000
Manifest next update: Fri 16 Oct 2026 15:02:22 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: EGyZESQpbAhPkPZwBqH9ibm28Q1p7d1S6nQiaot6vss=)
2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:f2:4a:fc:97:b9:6e:40:c2:d6:27:95:f1:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Oct 15 15:02:22 2026 GMT
Not After : Oct 16 15:02:22 2026 GMT
Subject: CN=d9353befc0b89a296c7422ecf031aa231ac7480e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:ab:ce:37:78:48:9b:fa:c1:8b:68:5b:11:
35:e9:47:ac:f1:62:ae:78:f6:c4:42:d2:25:ee:fe:
21:0e:e7:2f:94:45:f2:4c:e9:77:46:a1:c7:ed:41:
29:63:a8:fc:fe:9c:54:e9:e9:8d:fa:c5:bf:89:e8:
89:d8:29:7e:fa:c3:16:55:f5:eb:51:f0:2d:47:e7:
d3:a0:7f:d4:c3:11:56:42:0f:f8:ac:b2:01:cc:e0:
f8:0b:75:cd:b0:a0:5a:77:16:0d:c8:9a:f0:09:0f:
40:27:fb:98:1f:b7:51:18:83:9a:a4:33:e0:d1:d0:
65:43:f8:27:bc:04:e4:40:9a:7d:ef:cf:e8:32:35:
03:55:6b:b8:30:31:98:be:a4:4d:30:30:4a:0b:2b:
02:ce:45:b4:f6:e6:7d:a2:c0:b0:55:95:94:17:66:
1a:05:60:27:26:2e:35:f8:fc:63:9f:16:6e:d0:eb:
52:43:c9:ba:03:4f:bb:ea:97:4f:e8:e4:77:b6:6e:
db:97:76:7a:74:7b:56:d7:7f:0e:f7:6a:ac:2c:48:
e1:0a:f9:93:ae:1f:c0:38:f1:0f:18:15:46:15:fd:
e1:67:e2:e8:e5:da:0c:9b:9d:bc:2b:8a:b1:9d:3b:
3f:dd:b8:94:01:3d:a4:b4:d5:4a:58:70:8a:12:27:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:35:3B:EF:C0:B8:9A:29:6C:74:22:EC:F0:31:AA:23:1A:C7:48:0E
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4d:90:fb:b2:cb:18:26:87:98:b7:44:81:d9:bb:a5:1d:e1:
56:5f:1a:51:c1:d0:8b:67:68:c6:38:fa:47:dd:bc:5e:8a:b7:
cc:ef:05:cd:05:5b:96:eb:4d:42:f5:69:44:17:b3:7b:c8:af:
c1:bd:f2:ae:9e:f6:fd:0c:d4:a9:fa:2c:ad:4f:a4:11:e9:56:
e9:50:b1:82:01:25:c0:0d:b9:21:8c:7a:e6:38:4c:16:f4:71:
41:6f:0e:ab:3f:4c:a8:52:62:50:38:78:bb:d5:9b:91:d6:6b:
7d:7e:e0:98:67:75:b0:e3:2b:00:89:60:4f:4c:7f:db:5b:17:
f1:87:38:81:1f:c2:cb:74:83:68:0e:ca:1d:09:0b:0f:76:ad:
24:cb:71:52:26:b0:fb:d2:6a:5e:87:4a:04:5a:4e:ef:be:dc:
c6:cc:6d:12:0e:5f:b4:9e:22:0f:5d:f4:2d:c5:5a:e3:0f:ec:
72:98:51:7c:1b:d2:23:09:3c:3c:57:2a:8f:ef:cb:07:6f:05:
d6:a8:a2:a9:30:df:e3:ca:43:cb:a0:43:e7:70:47:73:6e:ee:
c2:6f:3d:fa:5c:33:7f:ed:58:ae:f2:39:58:8e:5c:11:41:14:
96:8f:7a:65:aa:d1:c4:54:68:da:d8:a9:ec:26:6a:f6:9a:85:
15:52:89:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:55:55 2026 by rpki-client