Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: PrkMvalCN7+5p/yr35kUCEKwti/NgpRAO+mIq9tcGcQ=
Subject key identifier: BC:D1:6E:B3:C2:C7:48:41:DF:D2:98:79:1F:76:BF:FF:50:33:69:27
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 019EBEED11C69581AE06098117E8128E4BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 02E7
Signing time: Sat 13 Jun 2026 03:01:08 +0000
Manifest this update: Sat 13 Jun 2026 03:01:08 +0000
Manifest next update: Sun 14 Jun 2026 03:01:08 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: AfP63n8m8ZggIjW+0DUa35AyI3AX8a4gRLuZjVx5ZKw=)
2: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (hash: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0=)
3: nWXoRZmWNlw5XSq5ebWhj_X56zE.asa (hash: 7eQkwTTuaAzcE//pM0DwCrOiqqU+mBsD9DTjC8AqIRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:11:c6:95:81:ae:06:09:81:17:e8:12:8e:4b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Jun 13 03:01:08 2026 GMT
Not After : Jun 14 03:01:08 2026 GMT
Subject: CN=bcd16eb3c2c74841dfd298791f76bfff50336927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:75:b8:b4:7d:0c:86:a1:81:41:6a:24:c6:
65:fb:15:d9:f3:a4:31:4e:64:97:3f:93:2a:c3:d6:
12:db:34:34:87:5f:1d:d4:53:ce:46:63:4b:7a:b3:
9b:d9:a3:77:45:11:f8:43:da:11:79:35:90:85:17:
61:20:85:74:7c:56:56:c3:93:eb:d4:06:4c:d3:3f:
25:1d:5b:11:cf:7b:b3:54:14:75:b0:23:a8:0f:fa:
b7:48:fe:01:9a:fb:1c:2d:ef:12:4e:2c:24:a4:df:
d1:26:01:0c:8e:0f:4c:24:c5:f1:55:c3:d1:ab:5e:
4a:5a:c2:68:e1:2b:c4:58:63:7e:3c:14:6a:f4:33:
93:8e:6c:f2:9a:54:b6:d6:e9:a0:1c:71:f0:35:15:
66:2a:48:fb:c9:73:48:2f:c3:79:70:66:03:30:d8:
8c:d8:f8:14:91:48:a1:f6:9c:96:65:d0:28:ad:94:
06:81:e9:89:4b:1f:fe:99:7b:bd:f6:81:08:73:68:
54:3d:e2:94:78:b2:9a:b2:1d:15:fd:22:1d:ca:76:
1a:a6:bf:e1:7a:0e:89:fe:4f:cb:ca:ab:0b:54:3e:
bf:0c:ab:67:45:60:65:f6:40:b7:a5:0b:3f:55:c7:
47:5c:69:db:14:f4:7d:46:1d:66:8f:d4:07:28:ca:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D1:6E:B3:C2:C7:48:41:DF:D2:98:79:1F:76:BF:FF:50:33:69:27
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:48:1d:f7:dd:11:53:64:ea:6f:7f:5c:37:60:04:f8:d2:70:
f5:f7:93:4b:be:a8:2d:77:1b:45:9c:b7:aa:58:06:ea:8a:bb:
aa:28:9d:fc:db:c6:33:b5:d3:78:f1:f9:4d:96:b5:88:c9:3c:
3d:68:70:3f:7c:7a:f1:ca:3b:bd:a1:40:86:bc:b0:cf:89:1e:
4c:8c:6a:f5:3e:5c:c7:b3:5c:70:2b:58:67:c2:05:bf:72:21:
cd:2a:03:9a:45:65:ee:e7:1d:9f:91:43:dc:ad:85:30:6b:8e:
2e:37:23:e8:db:97:cc:0e:23:91:a1:99:fa:e9:53:a5:05:a8:
13:98:1e:69:26:f2:11:3c:1a:08:de:cb:c1:d8:06:d7:b8:77:
e1:16:df:48:b0:95:31:7f:68:1f:2e:90:57:80:12:d2:5d:b7:
d2:73:1b:7e:ce:d6:a1:d5:db:d0:a2:c2:3d:c9:56:f9:1f:57:
1a:04:9b:9f:84:5c:c5:3d:59:ed:3a:00:c9:67:2d:e2:7e:20:
16:e4:93:81:c2:a2:cc:b5:1d:bc:8c:29:77:a4:2a:a9:8f:1d:
a3:ef:9a:18:6b:a3:7a:01:8a:8f:a9:5d:59:f2:6d:28:6e:e5:
be:8c:8c:a0:d3:fe:50:7d:f4:4f:0c:99:a0:03:53:c5:11:c5:
9c:78:6b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:06 2026 by rpki-client