Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: tP2tDMQsKIhl5rMbWEg5EZ+e0Z9v3i7p8qa/V64Sbbw=
Subject key identifier: D4:5C:52:E6:CB:DF:D6:8D:68:2D:07:95:89:A6:21:18:76:EC:35:B7
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 01A00170318B506D7E87F6E342067BC91944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 0FAD
Signing time: Fri 14 Aug 2026 18:02:04 +0000
Manifest this update: Fri 14 Aug 2026 18:02:04 +0000
Manifest next update: Sat 15 Aug 2026 18:02:04 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: bGiZZvQWX0fXGtoSMGAqOocMZlhE27GYCRwPUcXITNw=)
2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:31:8b:50:6d:7e:87:f6:e3:42:06:7b:c9:19:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Aug 14 18:02:04 2026 GMT
Not After : Aug 15 18:02:04 2026 GMT
Subject: CN=d45c52e6cbdfd68d682d079589a6211876ec35b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:bb:11:bd:b2:42:c3:7c:7a:05:72:4f:c5:
46:33:58:0d:2c:68:6b:4c:fd:87:72:fd:a8:a0:09:
d1:6e:0d:7c:28:8d:9d:b3:89:f3:9f:f7:dd:b1:52:
93:02:c9:de:e8:1b:7d:bc:dd:b8:e0:49:54:8a:d2:
1e:2e:04:01:4a:a6:ff:cc:a9:2c:d4:4f:c9:c9:f6:
80:da:3a:8c:23:cc:8a:1e:cd:1c:05:74:99:f8:b9:
6e:f9:a2:3f:6a:68:3c:12:dd:69:a0:d0:90:82:6a:
78:77:65:dd:d3:74:ac:7e:91:1f:15:4c:75:7e:1a:
55:c6:39:d7:85:93:57:24:c8:c7:56:76:34:76:27:
e2:72:11:aa:c7:92:27:ef:f6:00:a8:dd:85:f5:80:
24:07:07:0b:db:c2:26:74:86:f3:a9:21:41:36:fb:
a5:0b:5c:9f:fb:86:83:e4:b2:9a:76:32:82:d2:98:
ec:6d:46:c1:1e:9a:9b:85:7c:43:f7:f9:20:af:8b:
3c:09:d6:a8:1b:d3:4b:9b:e4:e2:b1:e7:1b:c4:61:
6d:ff:46:a0:a6:99:1c:5d:73:80:48:44:53:0a:bc:
46:80:c1:1a:25:f6:00:c5:ef:09:f6:da:59:a0:62:
1e:90:e2:08:56:9d:4e:bb:3c:38:e0:8b:2c:34:ce:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5C:52:E6:CB:DF:D6:8D:68:2D:07:95:89:A6:21:18:76:EC:35:B7
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b1:43:87:c4:26:bc:9b:ad:4a:a0:e7:64:cb:7a:db:b2:7d:
a4:ed:9d:67:aa:0f:59:3f:61:96:a7:f0:6f:a4:94:49:9f:59:
b9:90:e2:cf:ca:a5:82:dd:f2:3d:73:24:66:8f:fd:e4:a7:68:
e7:29:bc:60:66:32:5c:d1:c9:a5:ad:b7:2c:a5:16:1f:d0:8d:
02:e3:26:f6:56:8e:62:ee:9a:77:b4:9d:a4:5b:6e:6a:65:48:
ac:9d:30:b6:09:36:a9:e0:0a:5e:74:e3:13:18:6c:45:9e:df:
7e:de:f6:ad:14:45:aa:0f:05:7b:36:47:2b:41:30:b3:0c:58:
a6:3a:e2:7e:07:73:28:75:31:3d:a2:fd:72:41:61:0a:d8:7e:
78:2a:b5:a7:7c:8a:80:51:6a:a5:1e:4a:d9:a6:06:23:fa:15:
91:cf:db:60:5f:1a:3c:d9:d1:55:6b:bc:43:bc:5c:8a:b6:7a:
42:91:8a:3c:1f:9b:c9:e0:ad:60:0c:ae:ff:ef:8e:40:3a:d2:
56:20:2f:75:3e:d9:ee:9d:2e:fa:44:52:76:c1:40:cd:ca:78:
65:1f:fa:03:ad:db:28:2d:3f:ae:35:86:33:a5:37:55:f9:8c:
c8:3c:60:f9:59:a4:be:e3:df:d2:d8:67:99:8f:96:81:74:46:
c2:69:09:67
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaABcDGLUG1+h/bjQgZ7yRlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZWZmNzZlMTJkYzE0Yzc0NGFhNzI2ZTAxNzQxNzI3YzQ2
ZGMxNTkwHhcNMjYwODE0MTgwMjA0WhcNMjYwODE1MTgwMjA0WjAzMTEwLwYDVQQD
EyhkNDVjNTJlNmNiZGZkNjhkNjgyZDA3OTU4OWE2MjExODc2ZWMzNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhG7Eb2yQsN8egVyT8VGM1gNLGhr
TP2Hcv2ooAnRbg18KI2ds4nzn/fdsVKTAsne6Bt9vN244ElUitIeLgQBSqb/zKks
1E/JyfaA2jqMI8yKHs0cBXSZ+Llu+aI/amg8Et1poNCQgmp4d2Xd03SsfpEfFUx1
fhpVxjnXhZNXJMjHVnY0difichGqx5In7/YAqN2F9YAkBwcL28ImdIbzqSFBNvul
C1yf+4aD5LKadjKC0pjsbUbBHpqbhXxD9/kgr4s8CdaoG9NLm+TisecbxGFt/0ag
ppkcXXOASERTCrxGgMEaJfYAxe8J9tpZoGIekOIIVp1Ouzw44IssNM76BQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNRcUubL39aNaC0HlYmmIRh27DW3MB8GA1UdIwQY
MBaAFPvv924S3BTHRKpybgF0FyfEbcFZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0tXzNiaExjRk1kRXFuSnVBWFFYSjhSdHdWay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvZDgwMWY3LTI4MjQtNGVhOS1hZDhm
LTNiOGY1MDhhNzU0YS8xLzEtLV8zYmhMY0ZNZEVxbkp1QVhRWEo4UnR3VmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVmL2Q4MDFmNy0yODI0LTRlYTktYWQ4Zi0zYjhmNTA4YTc1
NGEvMS8xLS1fM2JoTGNGTWRFcW5KdUFYUVhKOFJ0d1ZrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbFD
h8QmvJutSqDnZMt627J9pO2dZ6oPWT9hlqfwb6SUSZ9ZuZDiz8qlgt3yPXMkZo/9
5Kdo5ym8YGYyXNHJpa23LKUWH9CNAuMm9laOYu6ad7SdpFtuamVIrJ0wtgk2qeAK
XnTjExhsRZ7fft72rRRFqg8FezZHK0EwswxYpjrifgdzKHUxPaL9ckFhCth+eCq1
p3yKgFFqpR5K2aYGI/oVkc/bYF8aPNnRVWu8Q7xcirZ6QpGKPB+byeCtYAyu/++O
QDrSViAvdT7Z7p0u+kRSdsFAzcp4ZR/6A63bKC0/rjWGM6U3VfmMyDxg+VmkvuPf
0thnmY+WgXRGwmkJZw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:33 2026 by rpki-client