Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: zGgi5KjBV5cBWWDHkJw8EA+bxoOOyGnR9ooiDaaox10=
Subject key identifier: 70:27:8B:C2:D9:B1:C9:CA:EA:3F:EC:4A:77:53:79:8D:0D:61:B9:30
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 019FA93E3F404EDF49ECD620F1420ECAA451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0F0B
Signing time: Tue 28 Jul 2026 15:00:56 +0000
Manifest this update: Tue 28 Jul 2026 15:00:56 +0000
Manifest next update: Wed 29 Jul 2026 15:00:56 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: +apDJJWI0Iqm+tGXO4OWv8amY++O5XujeBL2KhGODyI=)
2: y2Yw6-Xzss6T6oXyrYGmZ001q9U.roa (hash: d8IrU4kU0qWnxL1m5NsiZ0ByNC3CpvcAWEyIv/Y47HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:3f:40:4e:df:49:ec:d6:20:f1:42:0e:ca:a4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Jul 28 15:00:56 2026 GMT
Not After : Jul 29 15:00:56 2026 GMT
Subject: CN=70278bc2d9b1c9caea3fec4a7753798d0d61b930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:36:7e:71:a8:bd:88:df:10:5f:60:0b:c2:
23:ee:76:55:92:ad:9e:5c:42:93:f5:13:21:69:46:
21:fa:7a:e7:41:a2:06:f3:d9:7d:4d:9c:e7:22:88:
85:ad:66:67:ee:a1:65:39:66:7e:a3:9c:a8:63:71:
ff:31:19:31:af:a7:30:d7:df:54:a3:b4:13:d7:cf:
6c:d9:52:98:6d:bc:d2:2b:60:b0:45:56:b0:f4:d6:
c7:3a:24:46:dc:81:aa:a9:d1:8b:1d:00:2c:45:b4:
c4:df:d4:7b:05:6e:a3:98:f6:ec:a6:9d:e4:8e:26:
8a:88:90:05:21:53:1d:af:3b:fe:db:d9:c0:b6:5a:
1b:a2:04:be:b4:21:d2:a0:c7:64:57:9e:33:ee:61:
0b:3a:c3:0e:64:be:e2:a7:b7:e4:ab:0c:97:d3:82:
4e:3f:e0:ed:46:89:80:a2:cf:46:2b:51:51:ba:0b:
21:16:8d:78:e7:8a:a0:66:07:8a:6e:f9:62:72:79:
f7:68:ec:f1:49:84:22:29:1d:6c:ec:07:66:50:02:
bb:7e:11:15:2e:d0:2f:3c:d5:76:7e:e8:0d:c5:f4:
71:23:bf:cf:cc:bc:ed:68:dc:05:7e:d9:4a:15:7d:
cb:c7:93:88:63:c7:42:a9:03:8c:42:37:82:29:27:
dd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:27:8B:C2:D9:B1:C9:CA:EA:3F:EC:4A:77:53:79:8D:0D:61:B9:30
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:35:9a:23:8c:d2:6f:eb:95:e8:17:73:3c:ff:33:71:58:8d:
f2:4d:4c:f0:e7:fb:7e:24:58:e9:74:2a:b8:d3:dd:b5:21:59:
b8:80:88:2d:11:b2:59:89:5d:a1:e1:9e:3a:09:75:29:47:59:
4c:dc:de:49:6f:de:e7:c3:4d:24:30:9a:41:ac:86:4a:41:e9:
ef:c6:74:ee:b3:9a:0c:34:58:07:54:71:e8:03:3e:05:d8:90:
86:13:e7:d6:37:68:d2:f2:92:bb:d8:9e:e3:5e:9b:81:7a:a8:
d9:69:9d:ce:51:eb:cf:e8:3a:d9:18:1b:7a:59:56:09:c2:c4:
d0:c3:6f:9e:9e:4c:4b:4c:97:bb:b5:60:22:cf:b0:c3:56:71:
ff:57:41:2c:25:f0:3c:50:db:40:5d:7c:87:48:57:55:f2:59:
e6:83:29:ca:9a:19:be:e1:42:56:63:4e:86:85:ed:4c:4e:5f:
ec:1d:a0:cf:dc:b9:9e:4d:80:c4:8e:4e:17:48:95:d4:3c:b0:
1d:7d:ca:63:b1:4f:b2:2e:31:a8:55:7c:43:5c:f0:3a:a9:84:
18:e4:84:52:56:18:89:73:a7:c8:75:f0:81:d7:f8:4f:99:ba:
30:7d:91:c1:a0:85:75:fa:79:37:1f:9a:8a:e4:43:7c:9b:7f:
a9:41:be:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:11 2026 by rpki-client