Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
File: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft (raw, json)
Hash identifier: K6WNz9jBaQXhrUfOBm/05bd74ITuOsa1k6RWgQv7fVE=
Subject key identifier: BC:1B:8C:7D:15:C6:62:8F:01:BF:94:A8:6B:E1:6D:E6:D2:A4:45:D0
Authority key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
Certificate issuer: /CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Certificate serial: 019E22B6FD64E0D507C331CA7FFEC2A01831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
Manifest number: 01AE
Signing time: Wed 13 May 2026 19:01:18 +0000
Manifest this update: Wed 13 May 2026 19:01:18 +0000
Manifest next update: Thu 14 May 2026 19:01:18 +0000
Files and hashes: 1: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl (hash: 60OipOhOGOUjrcs+B2gaXlnnBe7E1wNPNmTPcQoUxv8=)
2: WpzJEd65jg1k9FCh0sQW8umMMfA.roa (hash: PuNyfpISewPH4mNqXsD+xLFU8GYwjzfSIZCXja26VFo=)
3: ccdFrTh3VHUoyOT1nnX0rj2puX8.roa (hash: pTRpbV+9+EAGdM0aQTffw7AYRR2qz6vM+MiP328gvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:b6:fd:64:e0:d5:07:c3:31:ca:7f:fe:c2:a0:18:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Validity
Not Before: May 13 19:01:18 2026 GMT
Not After : May 14 19:01:18 2026 GMT
Subject: CN=bc1b8c7d15c6628f01bf94a86be16de6d2a445d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:41:70:fc:bf:2e:08:4c:90:b5:43:45:fc:
96:e1:c0:08:70:a5:43:84:3a:50:01:9d:cd:4c:22:
fd:92:66:bb:bb:83:c2:63:56:6d:a5:62:48:3c:a7:
fb:35:df:76:e2:29:09:ab:b0:8d:b8:41:73:d3:be:
ad:02:9b:27:d6:32:e0:7f:37:98:8a:d2:59:73:bc:
d2:fa:8a:27:9b:2d:5c:85:db:41:b0:1c:48:85:47:
05:69:d5:b1:ce:2e:68:af:d1:16:43:7e:71:cc:bb:
ca:bc:eb:35:30:9f:60:73:0a:da:2e:cb:1f:f3:8d:
4a:0c:09:75:08:d2:57:fd:20:a0:f6:54:5e:eb:34:
4d:19:0d:95:27:be:41:70:75:d9:5f:0f:89:d1:94:
80:56:6a:15:2d:6c:d1:ad:96:c9:cd:20:fa:28:a9:
e7:a6:dc:62:5d:0f:03:d9:9e:6d:f4:67:b1:cc:ac:
e2:95:38:ec:31:43:27:5a:3f:86:e0:60:cf:7e:40:
a5:43:d0:70:79:f1:44:4d:e6:13:ef:70:68:df:24:
19:b1:32:cd:4e:b8:4e:91:e4:48:48:1c:f6:11:b9:
3e:04:66:68:ef:da:8e:e7:76:2d:24:9b:10:a7:28:
63:3a:72:a7:2d:d4:4b:a4:d3:09:d5:09:13:cf:3b:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1B:8C:7D:15:C6:62:8F:01:BF:94:A8:6B:E1:6D:E6:D2:A4:45:D0
X509v3 Authority Key Identifier:
keyid:FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:14:13:28:3b:39:c5:52:3c:4e:b3:ca:f4:c8:23:bc:4a:f7:
7b:c2:ba:bb:31:b8:cd:87:36:1e:19:6b:ca:7d:d8:36:7f:49:
7f:2c:93:c8:5f:85:c7:17:6c:87:8c:f3:52:1b:7f:dc:25:13:
a9:98:0d:3c:9c:97:25:5a:4f:8f:f6:7a:1c:d4:f5:ab:0c:3b:
8e:c8:b7:4e:b5:9f:ed:01:ff:38:03:60:e5:89:b7:39:43:e9:
8c:3b:e3:5c:51:bf:eb:6e:13:e4:fa:24:8e:33:75:a5:fa:b0:
51:29:f4:14:6e:d7:fc:28:8e:bc:68:d1:ad:9d:7d:0e:76:fc:
db:56:88:a9:8f:2d:73:ee:9c:32:da:cd:34:69:c0:67:f7:b4:
26:36:aa:43:1e:a2:c1:c3:e6:8e:08:83:96:ef:8e:71:c1:4b:
7d:d7:5a:35:b2:0a:52:42:5a:ae:f7:d7:3a:e5:18:4f:40:0f:
d5:f8:8f:df:c6:ec:97:82:3e:95:c1:c3:04:3c:9e:26:c3:4a:
35:e1:6e:8f:97:23:77:8e:d0:77:0f:ac:e3:0a:d6:95:01:80:
56:8b:ad:3d:d6:02:80:4f:7f:97:26:35:78:89:ef:c2:1e:06:
0b:f9:59:75:af:49:14:bd:09:02:af:d2:46:da:45:13:1d:67:
ae:1e:e3:6a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4itv1k4NUHwzHKf/7CoBgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiN2I5YmEyYTdmNDc1MmQ4MjhiODM0YWJlNTE3NTJiMjE5
MDY5MTAwHhcNMjYwNTEzMTkwMTE4WhcNMjYwNTE0MTkwMTE4WjAzMTEwLwYDVQQD
EyhiYzFiOGM3ZDE1YzY2MjhmMDFiZjk0YTg2YmUxNmRlNmQyYTQ0NWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVZBcPy/LghMkLVDRfyW4cAIcKVD
hDpQAZ3NTCL9kma7u4PCY1ZtpWJIPKf7Nd924ikJq7CNuEFz076tApsn1jLgfzeY
itJZc7zS+oonmy1chdtBsBxIhUcFadWxzi5or9EWQ35xzLvKvOs1MJ9gcwraLssf
841KDAl1CNJX/SCg9lRe6zRNGQ2VJ75BcHXZXw+J0ZSAVmoVLWzRrZbJzSD6KKnn
ptxiXQ8D2Z5t9GexzKzilTjsMUMnWj+G4GDPfkClQ9BwefFETeYT73Bo3yQZsTLN
TrhOkeRISBz2Ebk+BGZo79qO53YtJJsQpyhjOnKnLdRLpNMJ1QkTzzuSwQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLwbjH0VxmKPAb+UqGvhbebSpEXQMB8GA1UdIwQY
MBaAFPt7m6Kn9HUtgouDSr5RdSshkGkQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zdWJvcWYwZFMyQ2k0Tkt2bEYxS3lHUWFSQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvZjY2ZDU3LWEwNzUtNGQ4Ny05YWI5
LWJjZDEyMjA2ZmZhYS8xLzEtM3Vib3FmMGRTMkNpNE5LdmxGMUt5R1FhUkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IxL2Y2NmQ1Ny1hMDc1LTRkODctOWFiOS1iY2QxMjIwNmZm
YWEvMS8xLTN1Ym9xZjBkUzJDaTROS3ZsRjFLeUdRYVJBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRQT
KDs5xVI8TrPK9MgjvEr3e8K6uzG4zYc2Hhlryn3YNn9JfyyTyF+Fxxdsh4zzUht/
3CUTqZgNPJyXJVpPj/Z6HNT1qww7jsi3TrWf7QH/OANg5Ym3OUPpjDvjXFG/624T
5PokjjN1pfqwUSn0FG7X/CiOvGjRrZ19Dnb821aIqY8tc+6cMtrNNGnAZ/e0Jjaq
Qx6iwcPmjgiDlu+OccFLfddaNbIKUkJarvfXOuUYT0AP1fiP38bsl4I+lcHDBDye
JsNKNeFuj5cjd47Qdw+s4wrWlQGAVoutPdYCgE9/lyY1eInvwh4GC/lZda9JFL0J
Aq/SRtpFEx1nrh7jag==
-----END CERTIFICATE-----
Generated at Thu May 14 03:46:01 2026 by rpki-client