Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: XGnDbpJE5f+wXR7ueS7UKUPvp1Zw+BcwTD1zzXedJnk=
Subject key identifier: 53:6A:36:81:87:96:7B:F9:6F:17:4C:5B:49:DD:AE:61:C5:77:B3:6A
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019D37C0A410C00E89CB3BA632E0C4FEF418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 1736
Signing time: Sun 29 Mar 2026 04:01:04 +0000
Manifest this update: Sun 29 Mar 2026 04:01:04 +0000
Manifest next update: Mon 30 Mar 2026 04:01:04 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: e9IZIP2DgPp0TQrAGy0tIqIj7ffpUhWH+7yedIv/tqY=)
2: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (hash: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA=)
3: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (hash: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a4:10:c0:0e:89:cb:3b:a6:32:e0:c4:fe:f4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Mar 29 04:01:04 2026 GMT
Not After : Mar 30 04:01:04 2026 GMT
Subject: CN=536a368187967bf96f174c5b49ddae61c577b36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:0d:bf:76:36:7f:09:d4:6a:77:4a:b1:d4:
17:74:94:68:cf:74:08:ed:68:77:17:09:ad:bf:49:
7f:3d:38:c1:eb:a0:34:0a:23:64:b2:17:63:35:89:
29:54:c9:83:22:20:05:ff:73:18:8a:57:f9:83:34:
65:21:3f:8b:00:06:c8:52:92:88:5f:78:c7:6f:df:
c6:bf:d7:df:b0:0c:1c:88:b3:ef:7f:f7:46:b5:81:
bb:0d:37:16:ed:3b:d3:75:c4:c8:cb:b5:25:5c:e4:
1a:19:f4:9f:1a:fc:59:98:56:88:0d:75:33:ae:c1:
4f:93:3c:40:39:59:c7:39:6b:fb:33:21:97:e0:12:
d9:c9:4d:b2:25:05:aa:6e:77:0e:87:ef:fa:51:66:
d4:5a:06:9e:ef:2a:ca:13:fa:ea:4c:8b:c2:d5:58:
58:03:4b:89:4b:2a:85:40:d2:e1:5a:2a:18:62:d2:
d6:29:ec:4f:1a:80:32:a1:72:8c:3b:0b:e1:e7:6d:
26:92:64:6c:ad:92:f0:37:52:1d:43:f8:4d:73:53:
16:aa:7d:47:19:3d:91:9c:cf:61:c3:f6:d4:c1:8a:
11:0e:57:90:b2:a9:d8:ad:00:2a:de:32:42:9d:15:
04:02:a6:0b:10:79:87:80:ee:86:83:b6:58:f7:79:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6A:36:81:87:96:7B:F9:6F:17:4C:5B:49:DD:AE:61:C5:77:B3:6A
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fa:07:b1:66:f5:31:eb:49:a4:f3:e9:24:4e:a1:ee:df:30:
e8:be:41:68:2e:6c:fd:a3:f4:b2:3e:2a:e0:37:7f:5e:b7:ee:
a3:3e:dd:29:cf:da:04:b4:17:b9:38:ce:9a:34:7f:05:b7:1a:
ce:f5:d6:4e:88:6a:13:ea:d9:bc:b5:70:59:64:be:77:d7:49:
3f:ed:35:68:69:4f:8d:7e:7d:03:69:da:fc:1e:c6:47:39:40:
c2:6b:ab:8a:00:7b:c1:f4:f6:d6:79:f9:6f:f6:9a:79:c3:97:
9f:3f:45:3e:8e:60:a7:06:3e:e5:6c:5c:85:eb:bd:5e:68:d9:
03:e5:68:85:7d:b1:89:d8:a5:64:3d:66:42:2a:88:3a:db:7d:
5a:3a:c9:f7:f9:f1:e4:f6:35:dc:88:5f:96:2b:7d:a5:12:bc:
7f:1b:0b:aa:17:82:2c:78:5d:ce:07:63:ec:3d:7d:84:4e:b7:
f0:c3:2e:aa:b2:24:7b:55:22:5a:2f:f6:32:e6:ea:12:c6:17:
28:be:af:d1:ce:0f:0d:34:e3:dc:d1:6d:20:77:34:06:29:2e:
a7:ac:e7:40:2e:92:fe:d6:11:53:2a:cd:b4:61:30:a0:90:ea:
4f:82:8c:85:41:11:61:3f:1c:af:03:8e:cc:9a:b1:06:de:09:
b8:ae:67:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:24 2026 by rpki-client