Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: MwcCoMt2eDXs77NBgL7R9lG2boUXvh2AUrKyb75wLQg=
Subject key identifier: 42:D2:71:F7:AA:50:06:74:5F:47:BD:38:C5:51:59:E5:0D:1E:DE:9D
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 019F17C2CD92F2F54CA602B258A85C188FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 0F34
Signing time: Tue 30 Jun 2026 09:01:10 +0000
Manifest this update: Tue 30 Jun 2026 09:01:10 +0000
Manifest next update: Wed 01 Jul 2026 09:01:10 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: yGy/g2rZSFU9nOk0j7a4XjOm4iNIcqx/1zfkAyQyrg8=)
2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:cd:92:f2:f5:4c:a6:02:b2:58:a8:5c:18:8f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Jun 30 09:01:10 2026 GMT
Not After : Jul 1 09:01:10 2026 GMT
Subject: CN=42d271f7aa5006745f47bd38c55159e50d1ede9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:0a:17:3b:d5:9c:bd:f2:a1:76:36:25:15:
f6:84:45:29:6a:82:cf:5e:68:8b:1a:bd:c1:86:e9:
7a:67:7e:38:f3:6e:7d:c8:71:e2:99:63:e1:9d:79:
52:ac:14:39:fc:21:4a:bc:04:cb:26:b8:da:e2:67:
7c:98:38:19:76:4a:c5:a4:8e:c1:b7:cc:e2:2c:d9:
a5:1e:db:6c:2d:af:ab:2e:78:75:c2:45:6c:21:10:
62:c1:06:f6:7f:e7:9c:af:78:8b:34:b9:dd:1d:90:
21:d7:e3:e2:32:31:f1:42:03:79:a8:15:1c:2e:fd:
cd:29:d8:b4:61:35:4e:29:04:60:71:dd:d9:69:16:
c9:7b:69:2e:c8:28:91:ae:6f:26:88:e1:3a:1f:e6:
2f:6a:58:8c:aa:d6:cf:b0:8a:62:cf:d8:67:ad:fb:
c5:e3:78:99:e0:61:22:de:d9:51:04:8f:33:b3:4c:
4b:32:55:36:a9:66:03:71:95:28:52:ae:7d:e8:d8:
38:47:a4:db:27:c2:4a:9d:8f:83:c6:46:f5:41:3d:
cd:0d:0a:e5:3d:52:27:2f:dd:8a:45:09:5f:27:08:
3c:80:4c:0d:97:50:36:25:a2:04:43:1e:ef:e7:f1:
d9:c7:d7:ff:60:6d:27:68:bd:ff:d6:a1:0b:ea:b0:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D2:71:F7:AA:50:06:74:5F:47:BD:38:C5:51:59:E5:0D:1E:DE:9D
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d0:cc:08:e0:69:b3:be:38:e1:2d:5f:e9:b0:32:6f:62:48:
53:16:04:c8:81:11:e8:9c:73:b1:f2:93:f1:f5:65:0d:25:e5:
5a:99:b2:55:a8:21:24:ca:36:c3:bf:08:d0:7b:63:d3:eb:92:
c9:09:b1:a7:1f:f5:96:f7:e6:dd:d7:7b:27:57:8a:81:de:c9:
41:88:0b:67:7d:2e:3f:b4:58:8b:24:d9:62:f9:44:30:9d:d7:
18:43:b1:82:00:27:5d:19:86:c8:d1:9b:1b:e5:3b:a3:a0:3c:
12:eb:14:07:74:55:53:e9:e4:12:c3:24:31:41:4b:39:41:cc:
d5:1f:8c:c6:f7:7d:41:c3:06:2b:6a:15:e9:4e:87:0e:1c:86:
3f:41:05:6b:b0:14:d7:13:f3:b6:15:1e:fd:8d:88:15:18:71:
c3:7f:dc:95:cb:a0:11:3b:83:da:ba:4f:e1:92:32:82:dc:50:
e0:2c:89:3b:6a:c3:ac:a6:20:34:89:53:1b:ac:7e:7c:1c:f4:
d3:18:4e:5e:94:66:5b:e1:5e:9f:27:d6:ea:b4:47:b1:64:13:
11:23:f4:5d:2f:53:12:c4:8a:8d:be:91:db:0d:a5:22:a4:74:
39:aa:ae:ea:22:94:c0:9f:53:69:55:0d:dc:02:00:67:e6:35:
16:1c:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:55 2026 by rpki-client