Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
File: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft (raw, json)
Hash identifier: 3aAo58ow83kJ560qBgUre9TRIozNb/NoZE5bLP6pV4o=
Subject key identifier: AB:70:8D:C1:7B:7B:20:B7:F0:EF:0D:67:D7:C0:A4:2F:51:DE:87:61
Authority key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
Certificate issuer: /CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Certificate serial: 019F122E701C2AD91B297A1A3A9B539E8EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
Manifest number: 022A
Signing time: Mon 29 Jun 2026 07:01:00 +0000
Manifest this update: Mon 29 Jun 2026 07:01:00 +0000
Manifest next update: Tue 30 Jun 2026 07:01:00 +0000
Files and hashes: 1: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl (hash: JSuTOZoVLmaISWNaZ2LPjV/lkwkyimiSe8Qhu8D42Hk=)
2: WpzJEd65jg1k9FCh0sQW8umMMfA.roa (hash: PuNyfpISewPH4mNqXsD+xLFU8GYwjzfSIZCXja26VFo=)
3: ccdFrTh3VHUoyOT1nnX0rj2puX8.roa (hash: pTRpbV+9+EAGdM0aQTffw7AYRR2qz6vM+MiP328gvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:70:1c:2a:d9:1b:29:7a:1a:3a:9b:53:9e:8e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Validity
Not Before: Jun 29 07:01:00 2026 GMT
Not After : Jun 30 07:01:00 2026 GMT
Subject: CN=ab708dc17b7b20b7f0ef0d67d7c0a42f51de8761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:cd:9a:fb:eb:87:02:e4:98:a4:6d:85:61:
30:5c:36:d8:70:27:a4:54:77:3e:df:3f:61:c5:62:
39:cd:c0:b4:a6:62:11:97:d1:46:f6:f5:6d:de:50:
ba:93:45:29:24:63:a7:53:13:1b:66:96:c2:66:4a:
6f:67:b3:d1:38:51:e6:8f:bf:be:7e:b9:43:ff:27:
61:c2:c5:26:4e:ec:d6:b8:9f:25:a6:bb:27:4e:dd:
9f:1d:31:55:ba:e8:16:97:1f:b1:69:37:bd:c9:26:
27:4a:7c:0a:17:fb:59:af:fd:51:0a:ad:9b:3f:3d:
b8:32:86:4e:83:7c:ce:33:9a:15:1f:e7:4d:55:52:
5c:c1:c8:b1:d3:1b:a0:2f:ca:c2:a6:e9:4a:e5:cd:
dc:43:72:21:07:d5:e8:34:a9:cd:5b:62:bf:fb:68:
05:af:9a:c9:9d:e1:93:fa:87:9b:bf:72:da:5f:24:
2a:9a:0f:ad:af:26:b3:12:22:49:35:d7:b6:0a:cc:
c2:28:cc:7b:7f:5d:a0:9a:c7:64:a7:53:10:00:1b:
1c:fa:81:0e:15:4d:7e:02:c6:d6:a4:cc:09:9e:47:
d7:51:76:96:68:23:a6:a5:b4:f3:9b:0d:54:6a:99:
8e:97:bf:84:5e:2e:bb:56:b6:2c:94:21:c1:da:08:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:70:8D:C1:7B:7B:20:B7:F0:EF:0D:67:D7:C0:A4:2F:51:DE:87:61
X509v3 Authority Key Identifier:
keyid:FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:18:96:a4:4a:8b:71:b3:38:a2:3e:a5:9b:1a:08:54:e2:dd:
78:54:c6:2f:87:9e:96:d1:88:c3:95:96:bf:00:21:c1:3f:ef:
27:5f:00:21:4d:e1:01:b7:86:d8:32:33:c6:30:74:92:75:10:
14:27:62:ba:08:d7:76:99:3c:27:61:a9:cc:b6:0a:22:a9:27:
cd:13:64:16:98:60:f7:e4:98:37:6d:fc:0a:9a:ca:88:76:f0:
11:62:4b:e4:1f:a7:3e:d9:6d:9b:a0:0d:e4:2b:14:07:a0:de:
35:48:33:99:be:7f:3f:71:4f:29:f5:72:f7:9f:24:10:65:ec:
7b:79:13:a1:4c:e3:30:d9:91:a6:93:d1:83:30:1f:8b:a6:48:
b3:3c:b4:29:ab:ea:a7:80:4f:14:2f:ec:04:24:8b:f8:71:28:
4c:97:7d:6e:61:a9:89:59:a8:2c:cc:27:30:40:10:71:15:a1:
d2:97:b9:ab:8a:ed:91:fe:fd:6d:d1:17:d4:64:82:98:c0:34:
fc:9f:2d:b5:bf:62:e1:cb:ee:68:e1:4a:5f:cf:57:cf:6b:83:
8c:89:47:00:70:4d:c2:52:a0:f9:9f:af:c9:35:65:56:f9:94:
04:4e:f3:1f:87:71:c1:58:4f:e2:ba:91:6a:fb:a5:af:7a:04:
46:9c:85:d0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8SLnAcKtkbKXoaOptTno7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiN2I5YmEyYTdmNDc1MmQ4MjhiODM0YWJlNTE3NTJiMjE5
MDY5MTAwHhcNMjYwNjI5MDcwMTAwWhcNMjYwNjMwMDcwMTAwWjAzMTEwLwYDVQQD
EyhhYjcwOGRjMTdiN2IyMGI3ZjBlZjBkNjdkN2MwYTQyZjUxZGU4NzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1vNmvvrhwLkmKRthWEwXDbYcCek
VHc+3z9hxWI5zcC0pmIRl9FG9vVt3lC6k0UpJGOnUxMbZpbCZkpvZ7PROFHmj7++
frlD/ydhwsUmTuzWuJ8lprsnTt2fHTFVuugWlx+xaTe9ySYnSnwKF/tZr/1RCq2b
Pz24MoZOg3zOM5oVH+dNVVJcwcix0xugL8rCpulK5c3cQ3IhB9XoNKnNW2K/+2gF
r5rJneGT+oebv3LaXyQqmg+tryazEiJJNde2CszCKMx7f12gmsdkp1MQABsc+oEO
FU1+AsbWpMwJnkfXUXaWaCOmpbTzmw1UapmOl7+EXi67VrYslCHB2giYIQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKtwjcF7eyC38O8NZ9fApC9R3odhMB8GA1UdIwQY
MBaAFPt7m6Kn9HUtgouDSr5RdSshkGkQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zdWJvcWYwZFMyQ2k0Tkt2bEYxS3lHUWFSQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvZjY2ZDU3LWEwNzUtNGQ4Ny05YWI5
LWJjZDEyMjA2ZmZhYS8xLzEtM3Vib3FmMGRTMkNpNE5LdmxGMUt5R1FhUkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IxL2Y2NmQ1Ny1hMDc1LTRkODctOWFiOS1iY2QxMjIwNmZm
YWEvMS8xLTN1Ym9xZjBkUzJDaTROS3ZsRjFLeUdRYVJBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsRiW
pEqLcbM4oj6lmxoIVOLdeFTGL4eeltGIw5WWvwAhwT/vJ18AIU3hAbeG2DIzxjB0
knUQFCdiugjXdpk8J2GpzLYKIqknzRNkFphg9+SYN238CprKiHbwEWJL5B+nPtlt
m6AN5CsUB6DeNUgzmb5/P3FPKfVy958kEGXse3kToUzjMNmRppPRgzAfi6ZIszy0
Kavqp4BPFC/sBCSL+HEoTJd9bmGpiVmoLMwnMEAQcRWh0pe5q4rtkf79bdEX1GSC
mMA0/J8ttb9i4cvuaOFKX89Xz2uDjIlHAHBNwlKg+Z+vyTVlVvmUBE7zH4dxwVhP
4rqRavulr3oERpyF0A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:11:22 2026 by rpki-client