Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: 3VRxWtFOQgy4fgNYnqIy9Lql8iVnTqSUfKac1DAqaas=
Subject key identifier: 5C:FB:87:61:26:8E:2F:B8:96:18:D0:C7:77:F8:C7:6B:05:68:AC:22
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 019FA82BC97904E5939FF4D27BEF26C3F1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 0361
Signing time: Tue 28 Jul 2026 10:01:09 +0000
Manifest this update: Tue 28 Jul 2026 10:01:09 +0000
Manifest next update: Wed 29 Jul 2026 10:01:09 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: FoiH+wPd1YLih85cbhFoN5IeF3OeOlCgmlkr35T07JA=)
2: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (hash: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0=)
3: hy7RusIjQH3rR8WgetncxaNV-TU.asa (hash: bhJXUcT+3ZOCVeeC8XzBVDF8FSK6zRK0UuX+SfxSKNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:c9:79:04:e5:93:9f:f4:d2:7b:ef:26:c3:f1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Jul 28 10:01:09 2026 GMT
Not After : Jul 29 10:01:09 2026 GMT
Subject: CN=5cfb8761268e2fb89618d0c777f8c76b0568ac22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:af:f3:57:74:cd:d6:9d:33:58:54:14:e5:
7c:a6:96:53:a4:6a:d4:2e:ba:86:3b:cd:60:3e:96:
9d:52:95:9d:f3:d4:4d:0f:65:aa:5d:1f:af:d1:af:
43:35:d3:77:44:ca:de:9a:be:35:8f:f5:23:82:c8:
a9:11:45:9d:b2:7c:d5:6d:bf:08:57:12:86:85:8b:
9c:79:e5:c0:8a:09:bf:70:bb:59:12:d3:79:30:3a:
ad:e8:40:4c:e8:0e:91:a9:e7:d0:ef:f7:96:b6:43:
a5:e6:56:83:c0:17:53:e1:d4:d9:cc:9c:aa:06:80:
20:27:74:54:ee:b3:32:dd:3c:81:52:38:bb:e8:ae:
e2:7c:d9:73:4e:fd:51:27:ec:f8:de:a1:a5:8f:60:
04:50:f3:a5:9c:ca:8b:21:73:d1:2a:3e:b1:fc:ee:
9c:43:71:92:68:e2:27:21:ee:03:ab:40:a2:e0:e8:
dd:3f:72:2e:df:c7:2f:3a:eb:54:1e:9f:09:d3:f9:
61:6a:e6:73:8f:1a:ba:97:73:78:cb:1b:ae:d1:5d:
54:ef:1d:20:a8:e5:5f:90:6c:16:97:64:3b:54:67:
76:c0:8a:4a:0a:9c:59:2e:cb:91:05:37:00:d9:cc:
7d:44:ee:90:58:08:0d:ac:ee:22:6a:d4:e2:39:44:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FB:87:61:26:8E:2F:B8:96:18:D0:C7:77:F8:C7:6B:05:68:AC:22
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:73:f0:ce:38:23:b7:00:4e:9f:82:12:8f:2b:6d:8a:25:02:
02:a3:96:b5:bd:d8:39:3d:e8:59:1c:25:3d:98:dd:1a:b7:ca:
23:7a:56:f7:70:57:5b:8e:fa:9c:c6:29:89:ed:7c:5e:41:3f:
1a:81:d0:ea:35:94:3e:b9:c3:08:08:cd:31:d3:8a:52:c7:2a:
e0:5e:41:7b:f5:75:27:c3:f7:f5:26:a3:1d:34:7f:d5:05:f3:
65:08:db:5f:f1:f1:63:71:78:c8:56:75:aa:68:af:a6:e9:2a:
67:7b:57:78:ce:47:27:52:bc:35:b3:5f:de:0f:a7:50:3d:03:
2a:7e:3a:23:af:90:ea:a6:b8:b0:2d:b0:77:08:31:d5:6c:c4:
ff:18:70:35:69:48:ec:a9:bf:41:e4:77:33:fa:96:80:b1:a1:
3d:14:7c:75:70:13:d4:c5:b0:8b:7c:d6:d0:86:64:ce:14:a4:
ff:b3:bf:19:a0:c4:46:21:09:c0:c6:c2:9e:70:65:1b:f8:c6:
28:11:a7:50:5e:9e:95:9f:17:d5:75:07:9c:dc:34:c2:03:17:
36:96:e8:4b:a1:44:43:d8:84:90:d6:cf:8f:ea:78:49:d7:4e:
ed:1d:b1:4b:0d:71:6e:6d:78:29:8a:e1:dd:a4:b2:fe:22:b7:
69:09:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:02:57 2026 by rpki-client