Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
File: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft (raw, json)
Hash identifier: IsdOg1baFvIucFjaQohlSU4gppLs+4tnpkj7d4Pr9Uo=
Subject key identifier: D4:61:1C:59:33:B0:6F:1D:AB:DA:27:E3:31:89:DD:C1:77:AD:84:C2
Authority key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
Certificate issuer: /CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Certificate serial: 019D2F621B8FE507B5606E46216F6B0919E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
Manifest number: 0130
Signing time: Fri 27 Mar 2026 13:00:51 +0000
Manifest this update: Fri 27 Mar 2026 13:00:51 +0000
Manifest next update: Sat 28 Mar 2026 13:00:51 +0000
Files and hashes: 1: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl (hash: CZsDtQOEvQr0VAM9prY8omgdwYqzhE5dH42Apy3rgus=)
2: WpzJEd65jg1k9FCh0sQW8umMMfA.roa (hash: PuNyfpISewPH4mNqXsD+xLFU8GYwjzfSIZCXja26VFo=)
3: ccdFrTh3VHUoyOT1nnX0rj2puX8.roa (hash: pTRpbV+9+EAGdM0aQTffw7AYRR2qz6vM+MiP328gvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:62:1b:8f:e5:07:b5:60:6e:46:21:6f:6b:09:19:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Validity
Not Before: Mar 27 13:00:51 2026 GMT
Not After : Mar 28 13:00:51 2026 GMT
Subject: CN=d4611c5933b06f1dabda27e33189ddc177ad84c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:52:ba:3a:c6:ac:ec:e5:ed:fe:a4:12:24:
ac:5a:eb:5b:4d:4a:be:e4:14:4d:1d:23:70:ed:03:
9c:a3:c5:04:23:0d:c9:97:b3:18:65:34:d5:88:06:
2f:c6:39:d9:11:c2:a8:9d:53:da:99:28:65:1e:b0:
a3:78:54:ce:b5:fc:9e:88:cd:75:eb:a4:a3:f5:8f:
5b:04:dc:2d:79:07:64:1c:c4:91:08:f9:eb:72:21:
3d:a6:21:9b:d7:7e:f8:9f:4e:df:48:77:1e:cc:5a:
40:1d:fd:6e:62:8c:bf:d3:6f:6c:24:76:5c:78:b0:
c1:e4:ce:ae:34:63:9d:1e:bc:21:97:ec:01:08:0b:
2e:6b:8a:4a:fe:dc:c3:f0:c3:74:1c:18:f5:f5:e9:
b1:3d:d8:6c:fa:87:60:1b:60:b4:e8:9f:ef:f1:4a:
aa:c3:d4:15:61:8a:9b:6a:b2:af:f6:b1:2b:8c:0d:
41:84:2c:e3:aa:f1:7f:77:d6:ba:06:0e:3e:da:83:
01:c9:d9:34:30:74:22:13:f3:5b:83:08:2e:85:24:
60:a2:b0:9c:a3:1b:f5:80:c6:d6:37:36:1f:8a:70:
dc:c8:d7:db:24:b5:e1:75:ee:26:c7:89:df:3c:88:
1f:86:60:fe:83:24:e2:92:ba:1e:ce:52:80:2a:c3:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:61:1C:59:33:B0:6F:1D:AB:DA:27:E3:31:89:DD:C1:77:AD:84:C2
X509v3 Authority Key Identifier:
keyid:FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:40:34:98:17:12:98:aa:bb:cf:2b:58:31:5f:e9:07:78:ae:
15:bb:75:5b:6e:ad:66:2b:ba:07:66:2a:04:10:4e:b6:69:f8:
ce:0a:2e:8e:51:3b:b8:0a:f8:fe:41:2c:04:d7:8b:99:af:c6:
7f:b4:00:ec:af:ca:a4:bf:0d:06:79:27:7a:b9:60:b5:e6:0a:
6e:95:d7:df:fa:cd:51:70:f3:4f:e2:16:5f:51:4c:ba:3a:e7:
a4:e9:31:7d:96:6b:f8:f1:0f:cd:3d:da:f7:de:c6:35:49:0d:
ba:59:e3:37:1f:8b:68:59:1d:48:92:1e:16:dd:00:c6:23:96:
96:2b:15:c1:8b:e6:61:89:75:10:5b:2a:60:e9:bd:3b:93:16:
e8:be:0d:3d:58:4e:8e:de:43:f1:f5:ea:96:24:b1:0c:57:34:
42:fb:b1:a4:b8:1d:11:f3:8c:f7:b7:b4:d0:99:2b:42:98:a0:
41:89:18:cd:45:d0:9f:20:84:82:0f:5f:1e:a1:8c:27:52:ba:
de:ff:68:2c:30:6c:ae:a6:83:66:4b:d7:c8:f6:8b:46:49:93:
87:33:e7:be:21:05:3a:29:62:7f:75:2d:29:76:52:9c:b3:12:
49:fe:c1:6f:13:9f:5c:6c:47:2e:a2:7d:a6:f2:4a:26:1a:39:
cf:4e:17:26
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0vYhuP5Qe1YG5GIW9rCRnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiN2I5YmEyYTdmNDc1MmQ4MjhiODM0YWJlNTE3NTJiMjE5
MDY5MTAwHhcNMjYwMzI3MTMwMDUxWhcNMjYwMzI4MTMwMDUxWjAzMTEwLwYDVQQD
EyhkNDYxMWM1OTMzYjA2ZjFkYWJkYTI3ZTMzMTg5ZGRjMTc3YWQ4NGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk5SujrGrOzl7f6kEiSsWutbTUq+
5BRNHSNw7QOco8UEIw3Jl7MYZTTViAYvxjnZEcKonVPamShlHrCjeFTOtfyeiM11
66Sj9Y9bBNwteQdkHMSRCPnrciE9piGb1374n07fSHcezFpAHf1uYoy/029sJHZc
eLDB5M6uNGOdHrwhl+wBCAsua4pK/tzD8MN0HBj19emxPdhs+odgG2C06J/v8Uqq
w9QVYYqbarKv9rErjA1BhCzjqvF/d9a6Bg4+2oMBydk0MHQiE/NbgwguhSRgorCc
oxv1gMbWNzYfinDcyNfbJLXhde4mx4nfPIgfhmD+gyTikroezlKAKsPYjwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNRhHFkzsG8dq9on4zGJ3cF3rYTCMB8GA1UdIwQY
MBaAFPt7m6Kn9HUtgouDSr5RdSshkGkQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zdWJvcWYwZFMyQ2k0Tkt2bEYxS3lHUWFSQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvZjY2ZDU3LWEwNzUtNGQ4Ny05YWI5
LWJjZDEyMjA2ZmZhYS8xLzEtM3Vib3FmMGRTMkNpNE5LdmxGMUt5R1FhUkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IxL2Y2NmQ1Ny1hMDc1LTRkODctOWFiOS1iY2QxMjIwNmZm
YWEvMS8xLTN1Ym9xZjBkUzJDaTROS3ZsRjFLeUdRYVJBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0A0
mBcSmKq7zytYMV/pB3iuFbt1W26tZiu6B2YqBBBOtmn4zgoujlE7uAr4/kEsBNeL
ma/Gf7QA7K/KpL8NBnknerlgteYKbpXX3/rNUXDzT+IWX1FMujrnpOkxfZZr+PEP
zT3a997GNUkNulnjNx+LaFkdSJIeFt0AxiOWlisVwYvmYYl1EFsqYOm9O5MW6L4N
PVhOjt5D8fXqliSxDFc0QvuxpLgdEfOM97e00JkrQpigQYkYzUXQnyCEgg9fHqGM
J1K63v9oLDBsrqaDZkvXyPaLRkmThzPnviEFOilif3UtKXZSnLMSSf7BbxOfXGxH
LqJ9pvJKJho5z04XJg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 16:11:37 2026 by rpki-client