Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: Mn5xth+K16yFZ6FnY0yNt6aAXwaEHkgazPppRFzfhK0=
Subject key identifier: D4:89:9F:CB:E5:CE:AA:94:E9:65:02:05:FB:D2:8A:48:C6:11:E0:DA
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 01A10700C6E0C1EE78A76F204CCAF7F6EFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 192F
Signing time: Sun 04 Oct 2026 13:00:53 +0000
Manifest this update: Sun 04 Oct 2026 13:00:53 +0000
Manifest next update: Mon 05 Oct 2026 13:00:53 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: 6aWHR9yvS9xR88fNV6XClB73BsuEnUeByUsoYaD/Vjo=)
2: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (hash: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA=)
3: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (hash: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:00:c6:e0:c1:ee:78:a7:6f:20:4c:ca:f7:f6:ef:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Oct 4 13:00:53 2026 GMT
Not After : Oct 5 13:00:53 2026 GMT
Subject: CN=d4899fcbe5ceaa94e9650205fbd28a48c611e0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:dd:d4:8d:82:7d:e1:3e:74:47:e8:b7:8d:
f8:7f:74:be:c2:c9:fb:32:1d:61:ba:6a:34:08:18:
41:61:93:de:cf:ff:e5:d6:02:18:36:2e:f1:67:4c:
23:25:f3:f0:13:26:2a:40:78:7d:5e:4b:03:e4:61:
f9:80:39:07:33:ad:4d:92:20:ba:8b:29:c2:56:81:
35:17:36:93:db:b9:24:50:d0:d4:0e:49:3f:67:de:
f8:ec:ca:b3:6d:5b:e8:0a:7c:00:da:eb:d7:72:65:
55:0a:79:63:15:b2:6b:59:54:b2:cb:5b:6c:1a:2f:
fd:e7:f1:40:19:8b:fc:6b:6f:8d:e5:c2:5d:a7:22:
98:54:ae:4b:2c:31:56:0b:ac:1a:e6:80:17:0c:ce:
99:a3:f5:71:0f:69:47:e9:7f:1e:55:44:d8:d5:32:
2b:0c:7e:8b:bc:66:40:6e:0c:ef:19:88:5c:08:dd:
f3:68:dc:02:a9:07:ef:4f:9b:63:64:ae:20:91:f9:
66:28:d0:28:26:5a:28:10:34:8b:4f:33:57:18:62:
c9:9b:8a:ae:f6:41:02:46:38:fb:08:66:e6:f4:fa:
c2:bb:9f:23:81:71:08:43:b0:c7:78:4b:b5:9c:5c:
a0:ba:8d:e4:60:33:3c:f4:f2:43:73:1c:6e:70:0c:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:89:9F:CB:E5:CE:AA:94:E9:65:02:05:FB:D2:8A:48:C6:11:E0:DA
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c7:23:c2:bd:54:46:8e:27:b2:29:69:77:a6:93:df:b6:59:
13:2f:06:fb:fb:af:82:4b:41:78:69:b1:87:b5:7f:3a:0a:6a:
76:31:af:1c:7b:43:61:d0:b6:e5:07:ee:fb:f4:cc:cf:1f:7c:
5d:3a:a7:a4:fb:4a:aa:8a:7d:25:d4:09:8c:d9:2f:cc:88:6f:
34:2a:4d:7d:b7:ef:2d:cb:3d:27:ef:07:3a:c3:1c:cd:d7:97:
ef:4e:a0:a2:ed:a5:8f:38:2f:94:68:cb:e5:6a:8a:72:10:07:
6b:c7:36:65:28:b0:e6:51:8c:50:79:12:72:ff:b3:ef:e9:cd:
3c:e0:cf:9d:1f:36:0f:c0:8a:75:98:20:45:97:bc:64:af:47:
a7:0c:17:2b:45:34:ab:43:2b:47:0f:f3:f9:c2:0c:c2:38:df:
c0:d3:8c:25:57:b8:93:46:3b:0b:87:1d:28:fa:3d:1a:cb:8b:
00:64:a1:a0:45:6f:2d:6e:de:11:8b:46:99:04:59:5c:d5:65:
b8:79:58:5c:38:5d:d8:4c:87:70:a3:14:fb:4c:1a:79:8a:4e:
17:b2:ec:14:b9:83:a0:4b:09:37:21:4f:b1:4d:75:0b:eb:d2:
1c:cc:a2:fa:4b:a3:79:34:c4:b7:3e:59:1e:48:5f:72:4b:2d:
3c:16:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:40:00 2026 by rpki-client