Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: ynm5jelyqFM5oinwHnA/PsYqGB7vwqTxz1Qi0Ict/I8=
Subject key identifier: B1:D3:9C:B4:00:8E:EA:FE:D4:51:D1:BC:53:EF:0F:3D:5C:8B:EC:E5
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 019CAC7E0F8025675D428DA6A9E3571285C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0D7F
Signing time: Mon 02 Mar 2026 03:01:08 +0000
Manifest this update: Mon 02 Mar 2026 03:01:08 +0000
Manifest next update: Tue 03 Mar 2026 03:01:08 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: BMTxkPJSOsgqlRqlVpRKrAsAolWI8K9kYYj5YVQIlec=)
2: y2Yw6-Xzss6T6oXyrYGmZ001q9U.roa (hash: d8IrU4kU0qWnxL1m5NsiZ0ByNC3CpvcAWEyIv/Y47HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0f:80:25:67:5d:42:8d:a6:a9:e3:57:12:85:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Mar 2 03:01:08 2026 GMT
Not After : Mar 3 03:01:08 2026 GMT
Subject: CN=b1d39cb4008eeafed451d1bc53ef0f3d5c8bece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:0c:ea:37:3d:f1:8f:9d:7e:9a:5e:c0:66:
ac:41:e5:69:6b:89:4d:15:10:69:5c:bc:6c:67:50:
20:48:62:86:87:72:63:b9:6d:e0:42:7e:93:fe:68:
7e:5e:d0:fa:73:b3:33:b0:1d:b2:51:71:67:e8:68:
dc:38:61:5d:ce:81:b0:36:dc:1b:c9:e8:e6:20:2e:
a7:11:28:6c:56:10:7b:77:c3:9d:eb:6e:bb:af:9f:
32:02:2e:21:dc:ba:07:9a:0c:44:66:f7:76:de:b8:
13:6f:d1:0a:25:32:20:6d:26:fd:56:84:63:1b:93:
80:07:6d:06:8d:b9:3c:e6:e8:d9:6c:d4:bd:1f:71:
29:71:cf:a7:4b:02:70:62:94:25:e4:de:de:8a:66:
db:fc:15:48:ae:7a:54:82:3f:c3:b8:c8:c9:55:0e:
16:76:0e:b9:fc:98:85:cc:74:cb:f7:de:57:94:a1:
9b:f7:a7:fc:0c:6c:f6:9d:ec:03:8d:fa:e4:3d:45:
33:39:f7:60:85:b4:5d:53:7d:e9:07:5c:32:ee:14:
24:9a:76:2e:7c:17:8d:fb:90:c8:e4:f7:c8:b9:7e:
7c:90:bf:d7:c4:19:5e:45:ad:31:d9:b3:2a:9c:85:
68:15:90:fc:ca:08:42:ae:b0:cc:1d:42:34:f7:8d:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D3:9C:B4:00:8E:EA:FE:D4:51:D1:BC:53:EF:0F:3D:5C:8B:EC:E5
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:57:c8:0d:bd:5d:b4:f1:a8:01:ce:20:f7:9e:d1:f6:1c:3a:
43:e7:ce:89:48:b7:a8:78:72:31:a6:be:a4:b6:1b:a6:aa:ce:
0d:e4:d5:a8:28:96:49:e7:1a:f0:07:6f:ae:6e:7e:8b:94:7a:
1b:91:32:d5:31:d4:0b:4c:77:db:85:dd:42:f5:de:29:9e:c8:
73:27:a4:8c:32:28:f2:7e:2e:ee:18:7e:ce:e8:5a:d6:57:5b:
2d:50:db:fb:6c:62:48:8a:d1:ea:c6:8c:16:79:1d:61:2e:de:
2f:64:bf:04:3f:cd:c6:8a:77:05:db:0c:ab:30:04:db:dc:8b:
63:02:ba:0a:21:1f:19:80:ac:ea:7b:36:4c:e7:34:a8:b2:7f:
59:9c:bd:0b:2e:12:16:86:36:a9:ca:67:2b:d9:bf:29:1a:00:
7c:62:eb:b6:aa:33:19:9f:90:bb:15:5d:df:82:d8:5d:7c:99:
94:5a:e5:48:57:97:69:2d:85:f5:37:8a:be:12:a6:21:79:99:
d2:44:5f:fa:c3:34:00:61:e4:83:16:c8:6a:02:98:cd:6a:7d:
a3:4f:52:69:82:ee:3c:97:f1:44:7c:2c:34:76:30:7f:85:2e:
82:e5:72:19:6a:cc:fc:d5:a4:88:be:89:96:81:9d:13:b2:b1:
a1:ef:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:37 2026 by rpki-client