Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: KnlVUVkU0L7nPRtN1z+i03KItEsmvpyFS499mODFfCU=
Subject key identifier: 17:F7:83:E5:A8:2A:C2:7F:10:C2:F6:2D:6F:ED:4B:D1:02:74:7A:E7
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 01A0C66A77644C386AFE2976B2FF3CD9AF48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 1013
Signing time: Tue 22 Sep 2026 00:01:01 +0000
Manifest this update: Tue 22 Sep 2026 00:01:01 +0000
Manifest next update: Wed 23 Sep 2026 00:01:01 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: NpFCX3NKaBuL6aSQQaF1ZUNojbp/C2cOsQVUyAXDO9E=)
2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:77:64:4c:38:6a:fe:29:76:b2:ff:3c:d9:af:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Sep 22 00:01:01 2026 GMT
Not After : Sep 23 00:01:01 2026 GMT
Subject: CN=17f783e5a82ac27f10c2f62d6fed4bd102747ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:b8:07:6a:54:17:60:27:25:3b:4f:2c:fd:
48:e9:b9:24:00:90:e6:90:e7:7c:a0:63:c3:47:f5:
19:21:4b:f9:e7:93:68:49:ec:22:15:cf:1f:ba:bd:
38:1e:6c:d8:8f:9b:de:4a:db:ef:2f:08:bb:18:29:
7a:87:93:12:16:9c:d8:c7:72:08:58:94:d7:e5:df:
d4:b4:73:48:d6:bb:c2:7e:69:e2:de:44:d3:97:62:
c0:3d:f9:f4:18:73:1f:d5:3c:b9:d5:54:08:93:1b:
8b:15:d8:95:56:64:52:f8:aa:06:50:64:9d:9c:36:
9a:30:06:db:a3:87:9f:c4:30:3b:2d:45:07:92:af:
06:55:bc:11:c9:83:63:db:a6:31:75:c7:9e:71:27:
ad:9f:e8:7d:c8:7b:8b:24:ca:a2:42:13:a7:7a:42:
45:37:54:c3:2c:66:e0:71:0c:fd:ae:e2:5b:88:05:
ba:c8:50:5e:2e:f1:f8:5a:bf:bf:fd:df:b8:f7:9c:
49:bf:a2:34:50:d4:6b:2f:0f:79:2b:83:91:f2:35:
56:22:14:e8:d9:a8:13:69:7c:8e:58:3e:d6:f0:98:
ba:69:79:59:5d:a0:39:12:c9:2c:db:2b:53:7c:6f:
ad:c9:ad:5c:6b:32:49:96:93:a0:77:31:67:61:d8:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:83:E5:A8:2A:C2:7F:10:C2:F6:2D:6F:ED:4B:D1:02:74:7A:E7
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:23:53:b0:75:10:92:0a:cb:de:03:0f:cd:f4:d3:76:9d:c8:
bd:53:7f:1e:64:bf:81:ac:3a:bf:fa:ee:ef:ab:1d:3a:f6:66:
2f:c7:0f:22:74:6d:d6:8f:fa:12:4d:04:bb:1e:94:3f:41:7f:
df:e5:60:e1:47:ce:0c:d5:f1:5b:b2:96:c4:a5:17:f2:89:f2:
44:cb:a3:0b:ef:07:b8:c7:7a:53:ab:e2:68:1f:93:27:81:5b:
a2:ad:15:08:1b:f7:10:10:0a:7a:8d:b0:75:46:78:58:e3:85:
90:e6:73:b9:d4:50:8c:d8:ac:18:58:a7:84:04:32:4d:35:ed:
35:bb:46:04:ee:3a:2f:83:91:11:58:48:f3:e9:8e:5c:b1:f6:
5c:a5:45:e2:69:c1:58:0b:7b:ae:59:a3:d8:01:a2:5e:e6:74:
73:5f:9b:30:a2:a1:fa:1d:19:b1:35:51:3f:ec:4e:e7:2f:3b:
2e:f4:00:04:1a:f0:76:3d:dd:fe:57:96:f7:28:78:16:d7:40:
c0:6b:18:6e:04:d2:43:fc:f2:a8:f4:a3:08:48:7c:6a:ab:c4:
00:29:76:63:1a:06:01:f2:89:d5:eb:2d:2d:45:7f:51:54:eb:
cc:64:05:e5:a2:64:2a:49:d2:8a:c3:7a:51:a2:19:ea:f6:43:
bf:3c:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:43:30 2026 by rpki-client