Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: 0hA6JydjdnX6qw7HBfaHS2cKvbJ3ifZreVFP5GSM/JA=
Subject key identifier: 4E:71:BC:9F:A7:9A:CD:2A:75:DD:5F:8E:F6:A4:50:13:63:13:36:28
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 01A0005CDD891212029458F3A85C2E38AF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 18A7
Signing time: Fri 14 Aug 2026 13:01:21 +0000
Manifest this update: Fri 14 Aug 2026 13:01:21 +0000
Manifest next update: Sat 15 Aug 2026 13:01:21 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: IoAUIcenWt4GEonuafBRuBhcINmPWCHR8CdWGiQRi/Y=)
2: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (hash: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA=)
3: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (hash: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:dd:89:12:12:02:94:58:f3:a8:5c:2e:38:af:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Aug 14 13:01:21 2026 GMT
Not After : Aug 15 13:01:21 2026 GMT
Subject: CN=4e71bc9fa79acd2a75dd5f8ef6a4501363133628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:5d:68:f1:4f:4b:37:ff:2d:0b:40:3d:d0:
06:22:7d:ff:f9:02:d9:8a:6b:c2:6d:02:4f:e4:17:
96:e3:48:a1:cf:c8:58:24:19:44:14:6d:94:82:4d:
38:75:64:ec:ee:6b:bd:ca:2a:f2:cf:de:88:09:53:
85:fb:29:be:49:82:88:f4:a4:1e:d8:4b:15:68:25:
66:8a:6e:eb:8b:10:ba:3b:1e:77:6f:25:fe:11:5d:
47:71:1a:3d:d6:9f:84:5d:43:5f:9e:45:d5:20:0c:
5c:67:ab:b9:46:3a:66:a3:7e:c7:f5:b8:4c:16:57:
e5:12:3e:f6:89:59:c3:21:8c:bc:ac:37:a8:20:53:
0a:4d:ae:14:92:52:a1:51:23:16:51:f4:7f:cb:3e:
da:06:3f:6b:ad:a7:89:ae:ae:82:1b:30:11:76:9c:
bc:9d:5b:e2:a4:6c:30:52:a8:05:e6:b8:12:d2:a7:
34:0d:d2:22:9b:7d:f9:79:54:8f:e8:17:af:53:e4:
df:d0:71:77:4f:c7:f5:55:84:7b:8f:f8:19:3e:2c:
b8:57:cf:58:dc:54:67:a2:dc:77:89:1f:61:0e:03:
68:e9:12:30:9f:8f:1b:7b:18:fc:fd:7a:89:2f:fa:
63:2c:0e:21:2b:da:db:1f:99:5c:1e:0f:06:b2:b0:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:71:BC:9F:A7:9A:CD:2A:75:DD:5F:8E:F6:A4:50:13:63:13:36:28
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:99:18:7e:64:ac:b1:7d:1d:9e:c4:96:6f:8c:cf:33:6d:7e:
6f:e6:35:b0:b8:b4:29:94:21:6f:ed:5f:d7:f9:fa:ec:f6:3e:
e7:3a:68:ec:de:ff:ea:84:44:30:ed:c2:d8:19:a2:60:45:03:
d0:48:9a:f5:84:f6:d8:ff:7e:44:ad:31:9e:f4:22:69:83:0c:
51:63:d0:d7:47:bf:7d:03:2f:36:05:83:0d:59:2a:3b:0f:c4:
0a:a0:f5:5b:04:28:b8:2c:42:fe:47:42:23:40:b8:42:26:0d:
bf:74:38:8a:1c:ad:6c:b7:cf:9d:f3:59:c2:8b:62:4d:91:e7:
62:33:ca:6f:5d:f4:84:89:e8:35:98:28:1c:34:0c:a0:30:6e:
dd:8f:24:1f:4d:b3:28:51:35:d8:42:1a:d3:0f:75:32:9f:98:
4d:36:8a:37:1f:40:12:24:50:84:d5:5c:ed:57:5e:b5:0f:71:
78:b0:12:fd:59:6f:f4:18:a2:6c:07:5a:50:78:05:8f:0f:5f:
b9:a8:f8:bf:16:27:55:a3:27:73:01:05:d6:0d:32:81:6a:34:
63:c4:e7:57:21:c1:62:b9:50:4d:0b:aa:02:c6:cf:08:17:ed:
3c:bd:f8:3d:b1:e8:46:80:c3:c8:e4:bc:37:7a:51:ee:86:ed:
71:bf:bf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:15 2026 by rpki-client