Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: HDXDtH2m1pXdnJoN7ukNOLyieeawZjWia1XFjh5Dx7o=
Subject key identifier: 80:00:98:81:7C:3F:CD:8F:69:4F:9D:13:91:3E:37:F8:5E:45:DB:FD
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 01A1DF4C550F2D55661FF55FD4B5EB1B4B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 0487
Signing time: Sun 15 Nov 2026 13:01:24 +0000
Manifest this update: Sun 15 Nov 2026 13:01:24 +0000
Manifest next update: Mon 16 Nov 2026 13:01:24 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: Z24kQoMiM8HbfLWWRVqkLsMAtJTNcoyd4G3pLMA9hNI=)
2: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (hash: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0=)
3: toafHdccwaO4BPTp2xBSBnS_8c8.asa (hash: nyXXcj8Nt4VtjAWlE+GZ7d5hDa47Nf9jEIoe/rrF41o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:55:0f:2d:55:66:1f:f5:5f:d4:b5:eb:1b:4b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Nov 15 13:01:24 2026 GMT
Not After : Nov 16 13:01:24 2026 GMT
Subject: CN=800098817c3fcd8f694f9d13913e37f85e45dbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:fb:b0:ce:8f:ad:0a:08:b3:cf:1d:18:87:
26:28:c5:62:84:22:07:10:33:0a:1a:d8:ac:77:54:
a1:3d:d0:ad:e6:99:d7:52:20:b6:4c:4e:d6:87:c2:
7d:83:91:6a:5e:99:02:f2:90:d2:29:18:f8:e4:b3:
4b:e5:d8:bc:df:22:ca:02:9f:11:9f:45:03:6c:69:
25:b9:1a:57:4c:f7:e7:3c:e6:e9:24:be:b1:3d:0b:
20:ce:39:2f:d7:06:c0:aa:72:d7:50:78:91:ed:7c:
a0:ee:14:3d:73:52:39:13:72:c4:19:62:8f:3c:7e:
d6:bb:4a:d2:26:17:23:f3:2d:1a:30:a1:16:1f:ac:
0a:cb:b1:64:5e:68:fa:df:5c:3d:89:c3:ad:02:e0:
9a:5f:4e:3a:ac:13:63:bc:f4:fd:01:89:e9:58:19:
69:de:fd:01:6f:27:eb:ca:f9:e4:fa:f2:c6:67:69:
96:a1:e0:1f:88:12:63:3a:70:e3:bb:c6:2e:59:c3:
cd:2d:8d:33:23:ed:ad:f6:c5:bd:8a:73:ae:eb:84:
9c:52:28:67:5e:02:a9:24:34:8f:dd:b1:95:c7:7c:
ca:fb:f6:08:79:71:86:d4:8f:67:e1:ca:a7:1d:5b:
3f:39:c4:11:e8:cf:de:33:78:23:43:0e:76:29:63:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:00:98:81:7C:3F:CD:8F:69:4F:9D:13:91:3E:37:F8:5E:45:DB:FD
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a1:c3:6a:c0:3d:e4:2d:5c:99:f1:ae:ae:61:08:5a:55:91:
a1:bb:48:c7:84:19:1d:0f:d8:d4:b1:39:bf:35:59:eb:a3:0b:
05:f7:52:b8:32:43:e0:ab:1d:1d:93:07:68:25:30:91:a6:31:
d7:53:cf:39:92:53:8d:0e:8a:33:cf:34:26:6d:a0:55:c6:3f:
b7:f7:64:ec:4b:72:d6:65:13:70:e1:6e:fb:57:42:fb:ab:96:
d0:fa:2b:23:7a:98:25:e9:12:b2:68:28:28:87:56:a4:04:7f:
50:1e:df:fa:d9:29:55:9c:d8:6b:5e:71:6f:66:1b:a8:58:2a:
53:9a:bd:a7:f4:c3:03:d2:a0:62:bc:75:33:cd:42:6c:cd:55:
0b:32:aa:1e:96:36:a2:b7:9f:0d:a2:4a:b3:d4:f3:4b:c9:33:
16:1c:e4:93:e5:cd:4f:e1:13:c0:e6:ad:02:cf:b7:b0:f1:58:
5b:c4:84:83:94:9e:a9:85:98:b9:9d:c8:56:2e:7f:ed:af:fe:
ad:82:ff:aa:b6:54:a4:07:65:4e:78:d6:50:34:7b:ad:54:6a:
68:57:46:be:ba:ca:c0:bd:32:1f:a9:26:8d:71:ba:21:ac:c2:
ca:95:87:5e:31:d2:21:57:9e:d7:97:94:de:6a:c1:31:b0:f0:
32:2b:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:21:26 2026 by rpki-client