Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: ktULPgCcnXY03MMWKhXyr4hSbL9CTzAw4xhuR5sQ2n0=
Subject key identifier: A2:F3:F7:63:38:2D:3F:7E:52:A5:FF:37:95:3F:52:CE:BD:43:DA:3A
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019E30E0C57F09645BE35A114B0A890A84C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 17B7
Signing time: Sat 16 May 2026 13:01:37 +0000
Manifest this update: Sat 16 May 2026 13:01:37 +0000
Manifest next update: Sun 17 May 2026 13:01:37 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: +GgrBnaqDqrtFneqPXw49Khv2EKEg6MhjAuCf0yxxd4=)
2: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (hash: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA=)
3: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (hash: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:c5:7f:09:64:5b:e3:5a:11:4b:0a:89:0a:84:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: May 16 13:01:37 2026 GMT
Not After : May 17 13:01:37 2026 GMT
Subject: CN=a2f3f763382d3f7e52a5ff37953f52cebd43da3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:91:f9:17:d4:2b:b2:4c:93:e4:5f:6b:13:
6f:b5:6d:10:d5:62:af:9a:46:bd:f5:9a:91:5f:34:
60:40:22:a2:44:ba:e2:a0:cf:50:8a:4a:34:8a:27:
b3:dd:9a:2a:13:94:92:76:b6:b5:5c:ec:23:f1:4b:
cf:d1:f4:c1:30:2d:c8:f5:47:58:e4:c9:47:d6:7b:
49:fd:18:6e:f8:fd:0a:80:89:a6:5f:fb:61:7d:6c:
1d:fa:ba:01:f2:57:f9:17:c1:27:4b:44:eb:16:e2:
ad:9d:ca:1a:01:b5:52:fb:fa:c7:6a:1b:84:ae:6d:
5d:09:b3:c7:ff:14:e3:7e:ef:fe:67:7e:2f:4b:e9:
91:6b:2e:63:7e:be:82:1c:0b:96:bf:2a:8c:4f:cd:
55:5f:a1:5e:58:3a:84:19:c1:00:3f:79:1c:49:cb:
05:1e:1a:b3:8a:30:b3:55:9a:f9:02:7f:cf:78:74:
cc:31:c3:55:8f:74:83:1b:6c:30:61:7f:eb:d1:4b:
2c:ae:dd:16:76:e9:f0:71:5d:bf:db:fa:2e:4f:cd:
ad:d0:8f:e3:84:8b:94:c4:16:5f:d4:f8:b1:3c:75:
d8:d5:63:c8:57:67:0d:d4:d8:db:76:4e:27:ef:c0:
74:55:4b:91:cd:39:01:f2:c2:33:46:ef:c2:e2:b9:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F3:F7:63:38:2D:3F:7E:52:A5:FF:37:95:3F:52:CE:BD:43:DA:3A
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e3:af:30:f3:a7:d7:6e:69:77:c1:27:18:75:6d:7f:8e:63:
2b:36:18:42:92:cf:24:3e:1c:42:c2:16:01:0b:3f:e7:80:0a:
b8:9c:97:f6:82:59:45:3d:8e:96:6f:62:74:8a:b4:e8:50:1f:
19:55:9d:50:43:ff:06:af:64:c3:51:d5:78:1a:8c:4b:92:43:
fe:88:03:59:b0:99:34:99:c0:65:43:a7:de:e4:b9:d6:9c:e3:
cb:77:a1:d0:67:d2:8a:88:de:62:e6:4c:fc:94:f7:c2:1a:41:
cf:a5:b5:0f:6a:a6:e8:bf:e5:59:95:3b:db:69:a1:19:1e:f8:
16:22:df:3d:c6:3d:39:17:b0:b0:64:b2:81:c2:56:e3:ab:8b:
0f:a8:68:56:70:97:d9:26:70:d6:a9:6b:b0:f4:b9:8f:19:b1:
1e:b9:e9:04:79:1e:cd:36:c5:d9:53:b6:dd:ed:9e:0a:92:03:
d5:11:57:5c:56:1c:62:ad:d8:f3:a3:c1:bb:db:0f:a1:8a:8b:
64:8b:a5:f6:03:2d:16:8b:01:7b:a1:c9:a3:90:a6:2e:0f:dd:
a8:a6:d3:1e:03:6e:07:0b:26:ce:a5:0e:68:d8:fc:54:d2:78:
6b:c1:b8:4f:b1:27:58:70:24:61:9f:d5:8a:e8:7e:29:45:5d:
a7:12:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:22 2026 by rpki-client