Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: kUyS0l1yYzU379oSa4JrK8TyhxBboTAO8uCPl5Qa1Qc=
Subject key identifier: 9F:F9:06:9B:62:56:47:23:01:62:7D:97:BC:62:10:65:3C:4D:5B:5B
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 01A0C17AFE4447A0ABE7B5F99755E33DB7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 03F3
Signing time: Mon 21 Sep 2026 01:00:58 +0000
Manifest this update: Mon 21 Sep 2026 01:00:58 +0000
Manifest next update: Tue 22 Sep 2026 01:00:58 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: gVhgRGeUsMyIKxElyYnvNa9YWk7vH193TcalyevBG90=)
2: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (hash: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0=)
3: toafHdccwaO4BPTp2xBSBnS_8c8.asa (hash: nyXXcj8Nt4VtjAWlE+GZ7d5hDa47Nf9jEIoe/rrF41o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:fe:44:47:a0:ab:e7:b5:f9:97:55:e3:3d:b7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Sep 21 01:00:58 2026 GMT
Not After : Sep 22 01:00:58 2026 GMT
Subject: CN=9ff9069b6256472301627d97bc6210653c4d5b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:30:6d:bd:6c:59:82:11:19:08:89:52:e8:95:
ed:be:a6:f0:e5:1b:1c:22:d8:6b:27:27:a4:40:dd:
a4:62:72:8d:e3:3d:7b:f7:5b:a3:03:78:42:e0:32:
b8:0c:a5:a5:1d:8f:91:81:3f:b4:0b:c2:43:18:d1:
ae:b1:9a:7b:16:0a:dc:66:e8:44:7b:e9:6f:90:26:
97:47:f4:b1:3b:5d:1a:fc:c2:37:61:d3:e4:41:14:
c8:d8:02:1e:51:e3:3e:f3:f8:86:55:18:34:c8:30:
d8:79:01:a7:d0:45:6d:11:a7:0a:82:a4:62:5b:bb:
97:11:81:c6:31:f1:23:f7:55:1f:19:7a:3c:5f:12:
16:93:bc:2a:44:8f:ec:ee:bc:f3:9f:32:cf:6d:b6:
17:ac:02:e8:3c:c1:29:8e:9c:6f:62:24:8e:6b:f5:
c1:17:8a:e6:72:21:ab:fb:f7:ee:03:ef:6e:b1:84:
8e:17:6d:2e:5d:44:f6:ff:2b:7d:45:aa:12:da:75:
63:bb:0e:6e:20:1a:03:c5:5e:2a:b2:a9:1f:ba:4f:
69:09:a9:c9:f3:12:09:ed:19:e8:06:ee:9a:a3:10:
5e:3d:fc:ec:cd:e6:d5:95:02:e7:00:42:60:48:4d:
d6:2c:8f:43:87:04:0c:55:1b:34:10:31:01:ca:b8:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:06:9B:62:56:47:23:01:62:7D:97:BC:62:10:65:3C:4D:5B:5B
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6c:8f:a3:de:28:25:81:60:0a:08:04:8d:79:fa:98:6b:cb:
f2:bf:a9:5a:14:d2:19:55:ba:bd:d4:95:f7:aa:60:31:06:d3:
20:50:8f:27:c3:34:58:88:a3:a1:eb:f2:66:60:40:cf:77:1c:
0d:93:ef:2f:38:ad:2a:1f:ba:82:84:d9:50:fc:c4:b5:54:97:
57:f2:30:0a:74:7b:3c:bc:06:5f:e0:25:7c:23:b5:f0:da:99:
d3:b9:4c:fb:1c:f8:92:2e:c8:e6:78:b0:15:72:9b:68:6d:db:
31:0a:87:dc:60:57:31:bd:16:3a:c4:a3:b9:2f:05:88:34:86:
0f:26:33:a0:29:18:19:7f:c5:b1:e0:f3:b7:71:9a:58:6a:3e:
16:f3:23:3d:9f:bb:1c:f5:7e:c4:dc:1a:d4:1e:40:9b:be:c3:
2c:0f:48:42:a9:2a:d3:33:a7:23:2c:b9:0b:ef:cc:e6:5e:41:
ef:38:0a:5c:f0:bd:81:f7:ee:f9:30:85:86:19:2b:63:19:f2:
e1:4d:a4:c0:e4:20:1b:c0:07:c7:82:de:74:59:0c:ef:10:a9:
1f:b4:7b:05:ea:72:ec:77:9d:3e:11:59:65:a4:be:b2:da:8b:
ab:86:e8:8a:52:78:87:03:73:7a:23:41:26:04:99:77:40:cf:
48:cd:a4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:06:00 2026 by rpki-client