Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: yQdbGltaOYPPEqmMz4F+hWKNthUFugkgaE0FVSR7SUo=
Subject key identifier: 79:CF:0B:A7:F5:D7:41:05:70:F6:3E:3C:66:5E:F1:3F:0F:5B:E1:72
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 01A10C946F45D45B0A386871F0C751331CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0FC3
Signing time: Mon 05 Oct 2026 15:00:16 +0000
Manifest this update: Mon 05 Oct 2026 15:00:16 +0000
Manifest next update: Tue 06 Oct 2026 15:00:16 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: 5m8sSKuMrk9oLfukuDscUq8oYgSqg9LJbk4L1lM3UUg=)
2: y2Yw6-Xzss6T6oXyrYGmZ001q9U.roa (hash: d8IrU4kU0qWnxL1m5NsiZ0ByNC3CpvcAWEyIv/Y47HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:94:6f:45:d4:5b:0a:38:68:71:f0:c7:51:33:1c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Oct 5 15:00:16 2026 GMT
Not After : Oct 6 15:00:16 2026 GMT
Subject: CN=79cf0ba7f5d7410570f63e3c665ef13f0f5be172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:17:b1:0a:12:38:ef:27:ac:fe:74:24:c3:9e:
78:51:52:ae:92:bb:b1:27:8d:93:b9:45:38:09:63:
9b:74:ec:98:d0:c7:5a:0c:dd:d5:29:a2:c1:bb:ef:
ff:6d:92:35:19:e3:42:0f:a0:53:2d:cf:49:56:44:
41:c6:49:71:1d:fb:83:f3:77:ee:b1:cb:11:09:9e:
2c:e9:b3:5b:e1:11:76:0e:1d:27:e4:96:83:9a:12:
a1:43:6c:59:95:d8:4c:e0:b3:d0:64:97:7b:47:fb:
1f:43:7a:06:76:02:5b:49:05:09:bc:36:ba:f5:eb:
30:12:12:72:eb:4b:22:d5:75:2b:e8:12:d4:a9:fb:
5d:5a:fb:a9:06:1c:6f:6d:12:ea:2a:02:aa:7a:9d:
92:28:ae:ce:fe:70:8a:88:de:95:91:31:95:6f:b5:
b6:10:bc:13:6b:cd:58:1f:8c:2f:68:8c:57:b0:a1:
10:3d:07:74:1d:7d:6c:8a:76:ba:81:3e:b4:9c:53:
8d:69:b9:d2:1e:20:e4:57:72:5f:b1:d7:28:4b:e2:
73:5b:32:32:29:94:72:1f:8a:0a:50:57:4f:9d:86:
bb:6e:e9:01:fb:46:cd:32:75:8c:2b:a9:83:ce:da:
bd:e4:51:cb:be:1e:30:36:f8:b2:21:21:23:51:ca:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CF:0B:A7:F5:D7:41:05:70:F6:3E:3C:66:5E:F1:3F:0F:5B:E1:72
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5a:b8:a9:73:5b:b3:73:f2:a8:d1:4c:d9:3a:5a:96:65:db:
0f:4e:72:c9:77:a1:e1:8d:07:55:a8:9b:f0:1f:5a:69:92:26:
94:92:94:77:51:e1:e7:2d:79:1a:cd:99:ac:14:d7:85:1c:e7:
d0:67:0a:70:97:20:63:d4:68:f9:5d:2e:af:d2:ff:f0:c0:af:
5b:1b:d7:ac:da:82:00:7f:77:2c:f5:60:28:d5:5a:bb:92:69:
11:76:b5:ef:80:35:83:fd:e0:22:49:66:cf:5d:30:aa:90:7c:
80:66:ed:a4:d4:b5:6b:20:ec:b2:3f:81:cb:da:b8:eb:06:4e:
6e:5e:b4:c1:ed:f4:68:97:d4:09:9e:99:13:1f:1f:96:72:dc:
eb:a4:32:b1:da:b4:20:83:eb:4a:d7:9a:86:0c:b7:ad:12:b2:
e9:f0:29:c9:21:7a:07:6e:fb:fa:55:f3:ea:6a:c7:a3:a5:e3:
ec:52:8b:b4:40:3e:0c:7e:47:be:9e:16:86:73:8d:ba:7a:12:
cf:36:5d:09:d8:fa:c7:a7:e1:6b:ad:85:12:ba:54:1f:6f:66:
bf:96:23:da:53:18:2a:e3:de:cb:7e:21:c1:c8:d6:79:c4:72:
db:e0:ac:44:21:e9:10:44:29:6f:04:05:59:07:78:77:d0:6c:
00:d3:9b:eb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaEMlG9F1FsKOGhx8MdRMxz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzIzNzA2ZDBlODM3NThiYTUyMTM4ZTlkYjQyMDdiNWE1
YzE4OWMwHhcNMjYxMDA1MTUwMDE2WhcNMjYxMDA2MTUwMDE2WjAzMTEwLwYDVQQD
Eyg3OWNmMGJhN2Y1ZDc0MTA1NzBmNjNlM2M2NjVlZjEzZjBmNWJlMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xexChI47yes/nQkw554UVKukrux
J42TuUU4CWObdOyY0MdaDN3VKaLBu+//bZI1GeNCD6BTLc9JVkRBxklxHfuD83fu
scsRCZ4s6bNb4RF2Dh0n5JaDmhKhQ2xZldhM4LPQZJd7R/sfQ3oGdgJbSQUJvDa6
9eswEhJy60si1XUr6BLUqftdWvupBhxvbRLqKgKqep2SKK7O/nCKiN6VkTGVb7W2
ELwTa81YH4wvaIxXsKEQPQd0HX1sina6gT60nFONabnSHiDkV3JfsdcoS+JzWzIy
KZRyH4oKUFdPnYa7bukB+0bNMnWMK6mDztq95FHLvh4wNviyISEjUcoraQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHnPC6f110EFcPY+PGZe8T8PW+FyMB8GA1UdIwQY
MBaAFPtyNwbQ6DdYulITjp20IHtaXBicMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zSTNCdERvTjFpNlVoT09uYlFnZTFwY0dKdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvY2ZhYzMxLTgzNTYtNDMyZC1hMzRk
LWI2MTQzNjExOTZmZC8xLzEtM0kzQnREb04xaTZVaE9PbmJRZ2UxcGNHSncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU5L2NmYWMzMS04MzU2LTQzMmQtYTM0ZC1iNjE0MzYxMTk2
ZmQvMS8xLTNJM0J0RG9OMWk2VWhPT25iUWdlMXBjR0p3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVq4
qXNbs3PyqNFM2TpalmXbD05yyXeh4Y0HVaib8B9aaZImlJKUd1Hh5y15Gs2ZrBTX
hRzn0GcKcJcgY9Ro+V0ur9L/8MCvWxvXrNqCAH93LPVgKNVau5JpEXa174A1g/3g
Iklmz10wqpB8gGbtpNS1ayDssj+By9q46wZObl60we30aJfUCZ6ZEx8flnLc66Qy
sdq0IIPrSteahgy3rRKy6fApySF6B277+lXz6mrHo6Xj7FKLtEA+DH5Hvp4WhnON
unoSzzZdCdj6x6fha62FErpUH29mv5Yj2lMYKuPey34hwcjWecRy2+CsRCHpEEQp
bwQFWQd4d9BsANOb6w==
-----END CERTIFICATE-----
Generated at Mon Oct 5 18:48:03 2026 by rpki-client