Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: NxJV9mgqQonYS90L2PNW30emXlEzPcYLFLf9S5rvbAc=
Subject key identifier: A7:51:07:CA:04:0B:E4:0F:FA:A1:66:01:08:95:53:A1:32:90:25:FD
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 01A0CB227A12EA31CE7354495F20091605FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 03F8
Signing time: Tue 22 Sep 2026 22:00:29 +0000
Manifest this update: Tue 22 Sep 2026 22:00:29 +0000
Manifest next update: Wed 23 Sep 2026 22:00:29 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: r63tTr6Q6grLV8qGyKqjF21caSvqTMqrUtJIh12Yt1s=)
2: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (hash: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0=)
3: toafHdccwaO4BPTp2xBSBnS_8c8.asa (hash: nyXXcj8Nt4VtjAWlE+GZ7d5hDa47Nf9jEIoe/rrF41o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:7a:12:ea:31:ce:73:54:49:5f:20:09:16:05:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Sep 22 22:00:29 2026 GMT
Not After : Sep 23 22:00:29 2026 GMT
Subject: CN=a75107ca040be40ffaa16601089553a1329025fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:b6:9a:36:18:74:49:0d:50:59:22:65:f7:
7f:5f:8b:bd:33:b3:ff:9c:a0:93:36:67:11:0a:7e:
22:56:f2:23:74:e7:a6:9b:ee:04:67:f3:c6:bf:24:
62:a0:e4:26:ee:0f:d9:c8:ec:3d:d9:b0:fe:b3:80:
80:a6:90:5a:96:a0:65:41:55:97:81:ab:e5:bc:d1:
0c:95:e3:af:cf:4e:4b:32:09:fe:d1:03:a1:3d:c5:
aa:76:5d:ab:4b:01:77:27:3c:59:58:e4:45:ef:c8:
db:2a:5f:ba:29:bb:76:0f:95:8b:0b:6c:0d:f9:99:
64:85:bf:6a:75:34:f1:ec:9e:0f:48:8b:45:be:2e:
8a:6b:84:5b:f0:85:0a:e9:cd:93:6e:4e:15:80:96:
51:1f:67:1d:d1:3e:9c:11:16:f4:83:2d:10:60:61:
ab:e1:20:6c:bf:a8:98:b7:6e:e0:7b:e4:2d:c9:bd:
28:6d:f8:35:13:c5:01:55:2a:d8:fd:19:a9:50:00:
6d:7d:09:88:d0:81:a3:d3:dc:83:53:62:6a:7e:16:
6c:cb:7d:71:aa:3e:f2:da:5c:dd:1d:ce:bc:6d:6b:
2b:d6:49:1e:79:5b:ed:49:be:a9:46:82:df:73:5b:
60:c6:02:9d:78:1d:e5:70:34:64:51:44:c9:e4:de:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:51:07:CA:04:0B:E4:0F:FA:A1:66:01:08:95:53:A1:32:90:25:FD
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9b:36:02:46:2d:12:d1:1f:53:44:8e:82:53:22:a9:0f:ca:
cd:94:00:1b:8b:53:7c:c1:00:a6:77:e1:f2:28:49:64:c6:3e:
e3:4d:31:46:0a:84:18:8b:c2:bb:70:d2:57:44:38:2f:ee:0d:
98:8a:99:bc:4a:24:de:4e:28:fb:11:41:64:4d:64:6a:47:1d:
fd:27:fc:b2:66:7f:32:ba:34:22:77:bd:a0:b7:8f:14:4f:d6:
42:2f:9d:67:a0:40:1b:d8:ed:1d:76:4d:b7:12:03:03:16:55:
17:e6:b4:67:2f:9b:a6:b0:a4:d4:e2:22:a9:1f:54:9e:10:32:
32:b9:23:63:f3:96:3b:21:d7:43:ad:68:00:d5:10:99:b1:07:
dc:56:ad:76:40:11:ea:74:da:b4:38:b4:65:85:3a:67:f2:65:
ff:d8:0e:e3:1d:28:21:6e:44:70:b5:d2:b3:4d:f7:f6:6f:4f:
c5:b5:92:c9:24:f1:5d:cb:a1:ab:98:a0:42:31:c3:69:b3:ca:
c9:8f:7f:20:e0:3b:21:f2:a0:eb:a7:a6:cc:20:30:cb:46:12:
91:2b:0e:21:fd:1f:b0:21:54:39:df:1a:ef:6b:12:b9:f7:41:
3a:a7:b9:aa:a5:68:75:cb:8d:d4:96:5f:90:5e:d2:29:26:6f:
8f:cb:5f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:28:32 2026 by rpki-client