Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
File: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft (raw, json)
Hash identifier: JCCXCY21hkA4jZgLly5xUXlOKweP0+jPc0R0eME0q28=
Subject key identifier: 7A:A3:15:59:07:8C:7B:53:10:90:C9:D0:9A:56:BF:F7:88:49:F1:FD
Authority key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
Certificate issuer: /CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Certificate serial: 01A0D0488F82FB07B7B774D01B4A1D4667BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
Manifest number: 0311
Signing time: Wed 23 Sep 2026 22:00:11 +0000
Manifest this update: Wed 23 Sep 2026 22:00:11 +0000
Manifest next update: Thu 24 Sep 2026 22:00:11 +0000
Files and hashes: 1: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl (hash: DbNUjcSfwqHpZZdXV3lyBhRjPHkxCHi+8yE5K6Syo+I=)
2: WpzJEd65jg1k9FCh0sQW8umMMfA.roa (hash: PuNyfpISewPH4mNqXsD+xLFU8GYwjzfSIZCXja26VFo=)
3: ccdFrTh3VHUoyOT1nnX0rj2puX8.roa (hash: pTRpbV+9+EAGdM0aQTffw7AYRR2qz6vM+MiP328gvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:8f:82:fb:07:b7:b7:74:d0:1b:4a:1d:46:67:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Validity
Not Before: Sep 23 22:00:11 2026 GMT
Not After : Sep 24 22:00:11 2026 GMT
Subject: CN=7aa31559078c7b531090c9d09a56bff78849f1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:8e:23:66:56:4d:cb:32:36:bd:64:5b:0e:
76:85:51:cd:72:e7:56:c2:0b:9a:46:6c:36:87:a2:
72:10:b3:6d:57:4d:e6:86:c8:1e:a7:9a:e8:fe:03:
b1:a4:b1:91:b8:14:66:54:ad:f5:af:52:61:9f:ab:
10:4e:a3:a2:39:b8:26:d2:ec:29:24:e1:06:7b:ce:
69:d0:26:52:a1:0d:33:4a:3f:4f:88:db:41:03:af:
22:0a:d1:fc:ac:66:7b:12:46:e0:04:ed:65:5d:a2:
5e:36:fe:2d:7c:2c:f5:ca:b2:5a:1a:fe:77:95:c6:
a4:35:59:7c:d0:9e:cc:0c:73:31:e6:b6:70:ae:d3:
d0:c7:f1:72:c9:06:41:9d:f6:67:8b:58:f8:37:28:
04:c9:f3:5b:31:65:09:af:c4:33:0b:b9:cd:0b:66:
0c:d8:03:57:8d:d3:c8:3f:7d:cd:b0:f6:42:9e:65:
be:33:60:11:e0:79:28:f6:e2:25:fd:6f:59:fd:20:
9b:80:ae:ac:e0:11:74:17:d7:4b:0a:49:00:73:1a:
83:05:ca:78:b2:f7:fe:74:42:f0:c1:3b:0e:26:c1:
53:30:9c:4e:c1:15:71:96:26:ca:82:52:c8:2a:fe:
e6:48:b5:36:cf:24:13:26:90:53:d3:db:97:b2:b3:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A3:15:59:07:8C:7B:53:10:90:C9:D0:9A:56:BF:F7:88:49:F1:FD
X509v3 Authority Key Identifier:
keyid:FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8b:3c:05:e5:01:ac:b7:03:5d:fe:d7:a9:be:2b:ea:ec:62:
4c:92:37:22:79:e7:d7:94:29:b5:35:91:32:85:df:7d:c1:aa:
90:fd:8c:45:8c:ea:b0:b1:7e:e5:6b:14:ae:c9:6f:77:f0:1f:
12:da:75:25:6c:6e:19:62:f9:97:a0:57:31:f2:db:39:2a:5e:
39:ca:9c:97:a5:bc:46:3c:1c:f4:87:31:fb:39:b6:8f:cd:2a:
b2:18:fa:33:2b:74:66:46:3a:fc:4c:f3:63:aa:07:7a:ef:5b:
0a:25:30:b4:4d:e9:dc:c0:5f:2d:c0:b5:b3:b3:3f:d5:71:24:
ad:30:cf:f8:dc:b7:f1:33:d9:5e:8f:0a:c9:bd:7a:48:59:18:
59:2f:01:0e:b6:df:84:6f:dc:d9:19:8a:d7:1a:41:40:f5:33:
d9:4f:90:52:61:08:77:a2:b9:09:ce:77:83:a4:99:bc:21:22:
d1:79:58:57:b4:c9:04:a2:48:46:d8:2f:c8:ce:ab:d1:d1:8c:
bc:9d:bd:dc:e1:c0:af:12:e1:b5:28:e1:d7:b0:b8:5d:73:a9:
ea:c1:64:74:8a:05:55:b9:16:72:49:ae:22:09:e6:8f:63:2b:
31:ee:17:7d:6e:10:ad:ef:94:40:c9:46:97:4d:72:cc:7e:7a:
cb:92:69:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:17:01 2026 by rpki-client