Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: pU9ihabubPv1iUFPGLc1BotYE2+uIAN9H430e5QR6bY=
Subject key identifier: 06:88:A2:F4:F6:F0:59:6A:9F:3C:9B:27:3A:31:2D:05:6E:5A:40:47
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 019E300573FFBFC4AEE61996848C88450609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 0EBC
Signing time: Sat 16 May 2026 09:02:04 +0000
Manifest this update: Sat 16 May 2026 09:02:04 +0000
Manifest next update: Sun 17 May 2026 09:02:04 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: Bl57s5o0064GLLSgDVsozbFsMdw3lu1DM2UGGRtC5vY=)
2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:73:ff:bf:c4:ae:e6:19:96:84:8c:88:45:06:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: May 16 09:02:04 2026 GMT
Not After : May 17 09:02:04 2026 GMT
Subject: CN=0688a2f4f6f0596a9f3c9b273a312d056e5a4047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:1e:f8:86:e7:5a:43:23:8f:86:a9:5b:17:
56:13:ef:e6:14:c1:36:28:89:42:0a:9b:91:d2:28:
e6:5b:7d:26:16:23:b3:88:4f:b4:07:a7:e7:6d:0c:
42:e7:03:f9:eb:d5:97:24:a7:00:73:61:f6:f1:02:
f5:bc:ab:54:a4:f3:a4:4f:ab:14:01:d4:af:86:86:
d8:a4:21:5f:90:21:3f:0e:3d:33:1a:7a:98:49:cf:
c4:08:5e:27:3e:d0:9c:ce:b8:43:9e:a3:d7:cb:12:
df:da:75:12:0f:b1:86:81:69:6e:5c:c0:7c:e1:82:
68:e3:6e:c5:08:17:0a:52:37:cc:c4:ff:11:8d:d4:
e5:d5:e6:a5:2f:66:d0:c2:83:b0:05:75:52:4d:8e:
21:9f:f1:ba:0a:35:0d:90:9f:b5:3b:08:46:f7:c7:
b4:19:88:15:96:1a:a9:d3:2a:be:55:35:d9:67:6a:
35:c3:5b:0a:db:2a:c0:33:89:f5:bb:89:c1:48:62:
50:ba:4c:83:bd:55:df:7f:f4:f4:40:3e:15:8b:b4:
4d:cd:21:52:ad:30:29:13:02:fb:51:15:02:96:f6:
f6:f1:07:0f:bc:39:57:62:df:97:e0:c8:1d:94:51:
e8:d8:78:70:73:13:5c:6c:fd:36:14:f5:ab:63:f3:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:88:A2:F4:F6:F0:59:6A:9F:3C:9B:27:3A:31:2D:05:6E:5A:40:47
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:41:26:9e:d3:87:40:ae:88:65:d2:fc:d0:4c:d9:16:78:92:
95:e2:77:e8:ff:8c:92:77:ce:5c:b4:63:88:58:ea:a7:0a:6b:
41:b9:cf:ff:b3:e7:ef:6a:76:96:cf:41:9b:95:aa:31:00:f3:
3b:92:5a:a9:cb:1d:a6:f9:3e:3d:08:de:dd:0c:60:84:24:95:
22:0f:e4:b6:5e:0a:a9:04:6f:ec:8b:08:1e:d0:09:b3:42:fa:
c9:5b:ca:03:19:18:71:33:71:39:b9:8d:f4:39:76:06:62:b7:
8a:f7:d0:65:0d:18:fa:f5:04:b6:68:58:45:41:be:33:75:68:
41:cc:40:c9:49:d8:af:33:3e:c2:59:1f:a5:f6:ea:8b:2a:1d:
6e:f9:58:05:59:21:61:a7:68:c9:b8:ac:bd:59:aa:53:ff:1f:
8a:0b:62:a3:4f:05:ed:68:00:a4:9e:2c:ac:f4:5c:47:8c:ce:
55:77:6e:f9:7e:b1:08:d1:c9:1d:9e:01:69:4a:9b:7f:23:cd:
29:b0:d3:81:a4:1f:7e:2a:c0:30:33:9d:eb:0e:c8:4c:b6:e4:
7d:4f:f3:fe:1c:73:a6:0b:6f:4f:1e:3d:52:f0:17:04:6f:9c:
43:75:e6:91:44:4b:50:01:4e:76:a8:5b:c4:49:79:da:43:a3:
b9:4d:a4:64
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4wBXP/v8Su5hmWhIyIRQYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZWZmNzZlMTJkYzE0Yzc0NGFhNzI2ZTAxNzQxNzI3YzQ2
ZGMxNTkwHhcNMjYwNTE2MDkwMjA0WhcNMjYwNTE3MDkwMjA0WjAzMTEwLwYDVQQD
EygwNjg4YTJmNGY2ZjA1OTZhOWYzYzliMjczYTMxMmQwNTZlNWE0MDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSse+IbnWkMjj4apWxdWE+/mFME2
KIlCCpuR0ijmW30mFiOziE+0B6fnbQxC5wP569WXJKcAc2H28QL1vKtUpPOkT6sU
AdSvhobYpCFfkCE/Dj0zGnqYSc/ECF4nPtCczrhDnqPXyxLf2nUSD7GGgWluXMB8
4YJo427FCBcKUjfMxP8RjdTl1ealL2bQwoOwBXVSTY4hn/G6CjUNkJ+1OwhG98e0
GYgVlhqp0yq+VTXZZ2o1w1sK2yrAM4n1u4nBSGJQukyDvVXff/T0QD4Vi7RNzSFS
rTApEwL7URUClvb28QcPvDlXYt+X4MgdlFHo2HhwcxNcbP02FPWrY/MVfQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAaIovT28FlqnzybJzoxLQVuWkBHMB8GA1UdIwQY
MBaAFPvv924S3BTHRKpybgF0FyfEbcFZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0tXzNiaExjRk1kRXFuSnVBWFFYSjhSdHdWay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvZDgwMWY3LTI4MjQtNGVhOS1hZDhm
LTNiOGY1MDhhNzU0YS8xLzEtLV8zYmhMY0ZNZEVxbkp1QVhRWEo4UnR3VmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVmL2Q4MDFmNy0yODI0LTRlYTktYWQ4Zi0zYjhmNTA4YTc1
NGEvMS8xLS1fM2JoTGNGTWRFcW5KdUFYUVhKOFJ0d1ZrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkEm
ntOHQK6IZdL80EzZFniSleJ36P+MknfOXLRjiFjqpwprQbnP/7Pn72p2ls9Bm5Wq
MQDzO5Jaqcsdpvk+PQje3QxghCSVIg/ktl4KqQRv7IsIHtAJs0L6yVvKAxkYcTNx
ObmN9Dl2BmK3ivfQZQ0Y+vUEtmhYRUG+M3VoQcxAyUnYrzM+wlkfpfbqiyodbvlY
BVkhYadoybisvVmqU/8figtio08F7WgApJ4srPRcR4zOVXdu+X6xCNHJHZ4BaUqb
fyPNKbDTgaQffirAMDOd6w7ITLbkfU/z/hxzpgtvTx49UvAXBG+cQ3XmkURLUAFO
dqhbxEl52kOjuU2kZA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:53 2026 by rpki-client