Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: RmhMNNnJk0A42aFHZZPdkNOmclRuYPqax7Ql9uqxrx4=
Subject key identifier: 9B:A4:4A:C0:9F:04:2E:8B:DE:38:A2:99:98:D0:6E:8F:DE:08:59:EB
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 019D99625361856923A835004B1354FBBBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 0E6E
Signing time: Fri 17 Apr 2026 03:00:51 +0000
Manifest this update: Fri 17 Apr 2026 03:00:51 +0000
Manifest next update: Sat 18 Apr 2026 03:00:51 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: st7xV6HCIQwg9iTTk3BFMTOCJu90fYmaEYYAEw5wn84=)
2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:53:61:85:69:23:a8:35:00:4b:13:54:fb:bb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Apr 17 03:00:51 2026 GMT
Not After : Apr 18 03:00:51 2026 GMT
Subject: CN=9ba44ac09f042e8bde38a29998d06e8fde0859eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c9:28:2b:f2:7f:ba:55:47:53:b3:31:ab:c7:
09:82:a6:e3:67:87:11:a6:98:cf:e2:2f:46:2d:89:
7b:03:dd:36:47:a0:fd:d9:d6:d5:21:81:00:63:82:
78:5d:ec:17:a7:52:48:75:68:e9:2e:4b:5f:03:75:
87:ee:25:91:dc:a9:54:33:9e:e7:11:00:22:25:10:
4d:13:19:7e:57:55:44:c8:6a:45:5a:ce:a7:6a:ef:
7e:15:07:ea:f9:55:dd:e0:94:89:8d:c9:56:81:10:
40:d1:f2:84:06:74:fa:c5:ce:85:38:f0:ef:ba:52:
c3:0a:50:84:ab:21:53:8b:78:87:8d:6f:8d:58:ee:
2b:c4:e6:d1:3e:e8:d1:78:97:68:70:e1:2e:f6:9a:
71:d2:7a:c4:55:0e:59:3d:ad:db:7e:65:4f:75:bc:
26:19:09:3c:cf:ed:46:cc:55:24:b6:e4:b5:57:e5:
1c:a9:bb:ab:e2:57:0d:ad:6a:ad:85:57:bc:1c:2f:
af:58:cc:f5:ce:b3:47:46:ff:9c:59:ec:21:b3:2a:
0a:0f:03:b0:1c:80:bb:53:58:82:86:67:3f:c6:ec:
cf:67:07:ef:12:72:92:99:96:34:d7:5b:21:81:e6:
bb:76:a2:7c:f0:46:c7:05:ac:6e:fc:f0:36:84:90:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A4:4A:C0:9F:04:2E:8B:DE:38:A2:99:98:D0:6E:8F:DE:08:59:EB
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:80:a6:28:ca:c7:52:cf:4e:70:8c:cb:f0:eb:d0:36:16:03:
e0:8c:f9:3f:18:df:c5:ce:76:40:e4:76:57:06:b8:38:57:21:
99:fa:29:a5:92:e8:e5:69:b0:71:db:df:45:e4:d6:3d:56:0a:
28:a2:89:b0:ce:86:1a:ee:5f:ca:b9:09:5c:3a:17:d8:bc:7a:
4a:46:c1:02:e6:5d:50:4a:1b:95:a2:43:c1:7b:5f:1b:d7:d7:
63:c3:ae:70:98:f9:5c:4e:07:37:b5:61:73:75:00:ee:02:7e:
b1:1c:9c:94:2b:36:74:db:f4:94:6e:73:42:03:fb:51:b8:71:
2d:77:3d:1a:e2:94:41:88:9b:d0:e0:42:c1:47:74:de:b1:41:
79:4a:03:ce:20:04:e5:b4:4e:5b:0a:c0:a5:93:88:de:f5:e4:
3f:20:85:41:be:ce:0a:25:97:1d:0a:a8:9d:06:15:11:88:80:
51:42:48:46:b9:02:73:48:1f:27:88:79:7d:e1:d6:c8:e9:19:
fc:b9:8a:06:93:e1:45:f1:91:fb:e7:67:21:2e:4a:77:4e:cb:
0d:a0:4a:22:5b:f1:9f:9f:00:35:36:21:a9:13:f7:d8:31:d3:
97:1c:31:e5:39:a9:14:1f:ba:07:eb:05:3b:72:49:4f:26:47:
25:73:dc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:58 2026 by rpki-client