Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
File: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft (raw, json)
Hash identifier: 55c9xZBjTT5wbZ5V7D+e+XLDj0zjZ8TBighDnFEq0CI=
Subject key identifier: 2D:59:9A:ED:D9:5B:3D:DA:12:FE:55:16:DC:4E:FA:26:63:F1:95:4F
Authority key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
Certificate issuer: /CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Certificate serial: 019D999974321AAD5EDDB60AD5E98625DBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
Manifest number: 0167
Signing time: Fri 17 Apr 2026 04:01:03 +0000
Manifest this update: Fri 17 Apr 2026 04:01:03 +0000
Manifest next update: Sat 18 Apr 2026 04:01:03 +0000
Files and hashes: 1: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl (hash: +J8OOmqbr51wjTlk33Jnykb8l1CVzVd9o+jSBVX686g=)
2: WpzJEd65jg1k9FCh0sQW8umMMfA.roa (hash: PuNyfpISewPH4mNqXsD+xLFU8GYwjzfSIZCXja26VFo=)
3: ccdFrTh3VHUoyOT1nnX0rj2puX8.roa (hash: pTRpbV+9+EAGdM0aQTffw7AYRR2qz6vM+MiP328gvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:74:32:1a:ad:5e:dd:b6:0a:d5:e9:86:25:db:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Validity
Not Before: Apr 17 04:01:03 2026 GMT
Not After : Apr 18 04:01:03 2026 GMT
Subject: CN=2d599aedd95b3dda12fe5516dc4efa2663f1954f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:b8:00:e8:8f:aa:08:cf:1f:4e:41:8c:83:
4f:99:e2:b6:45:9c:61:3d:c6:81:f3:bb:eb:42:28:
fd:f7:be:78:8e:31:73:c3:0e:09:e4:81:e9:29:76:
71:bf:26:23:44:8b:e6:aa:bc:7b:ed:5b:75:b3:84:
2d:e6:b6:fe:bd:b5:36:8c:ed:ac:2a:eb:37:9f:ed:
39:0d:2f:09:7a:c3:b8:8f:f1:14:22:4c:e4:45:89:
ef:66:39:39:c5:f1:96:87:75:1b:f8:d5:82:3e:37:
ed:97:77:e5:08:03:0a:fc:3b:8a:63:10:ca:d9:92:
bc:13:23:bd:a2:93:25:81:e6:29:a6:e5:78:38:b9:
d1:b4:fe:bb:83:a1:62:29:9b:1f:a3:72:d4:3d:6f:
c7:4c:40:2d:9c:f7:8c:a0:30:b2:33:8d:be:c2:1b:
02:7a:41:6d:27:57:31:b6:7c:4a:f7:6a:0e:48:c7:
e7:32:d2:a0:92:a6:c4:ed:28:ac:6e:e0:aa:2f:48:
a8:49:32:6a:b7:af:21:ab:3c:8a:46:e7:e7:df:fa:
eb:f5:69:39:ca:5e:bc:14:51:1b:43:c4:ca:a0:0e:
8c:f7:e2:73:72:b4:04:e2:19:b6:2f:6e:4b:05:98:
ce:ff:9f:61:3a:07:86:56:8c:a6:1d:d7:c0:85:a2:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:59:9A:ED:D9:5B:3D:DA:12:FE:55:16:DC:4E:FA:26:63:F1:95:4F
X509v3 Authority Key Identifier:
keyid:FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:18:cd:70:ca:48:52:4e:e2:b6:d9:b5:57:92:e2:44:4d:ec:
6d:4e:7a:2f:a2:6c:de:9a:84:b4:74:ae:1d:e0:ec:3d:9c:0a:
ce:d4:00:48:5a:aa:64:c3:1f:12:14:22:36:f1:ce:6f:bf:1a:
6f:5c:57:36:8c:dc:7f:6c:be:6a:5e:f8:10:91:8d:60:ac:b5:
cc:04:1f:b9:eb:e3:87:cf:6e:8d:7d:9b:12:3e:4a:0e:00:ea:
b2:73:7d:ef:d6:19:25:f4:61:e2:0f:77:d8:f6:e9:80:b1:d2:
9f:15:53:eb:7d:1e:b9:a4:33:2b:80:37:1d:80:2f:d4:f2:e7:
0e:56:d5:b0:38:67:f0:09:92:42:20:f7:fe:50:0c:05:cb:db:
f9:c0:48:16:cf:e4:c3:9d:df:f8:7d:b1:ec:76:bf:db:5d:1b:
80:17:ba:48:81:cf:93:3d:43:9e:5f:c3:1f:0c:e9:2f:6b:75:
eb:6a:e0:34:8d:ba:ac:bd:00:87:b8:d0:92:98:8c:76:22:c7:
39:23:d5:1d:50:bc:54:01:00:63:bf:cb:aa:3f:5d:6a:11:11:
ff:54:ce:82:c1:2b:81:c3:5b:2a:91:7d:f8:e9:b2:86:14:9f:
14:4d:77:61:44:2f:3c:6b:fb:a6:14:6d:7f:54:1b:04:a9:c7:
45:b4:1b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:11:34 2026 by rpki-client