Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
File: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft (raw, json)
Hash identifier: lAHMjI6FAMwwPAHAHJuUUX6Wny15Rv4M7vX2OwcGCT4=
Subject key identifier: 0C:14:6D:47:AC:51:C1:9C:11:5D:BD:F0:2A:76:69:CC:33:98:5D:8A
Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
Certificate issuer: /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Certificate serial: 019CAB6ADB9DEA1D82134D6E89CA6A53DCBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
Manifest number: 1292
Signing time: Sun 01 Mar 2026 22:00:32 +0000
Manifest this update: Sun 01 Mar 2026 22:00:32 +0000
Manifest next update: Mon 02 Mar 2026 22:00:32 +0000
Files and hashes: 1: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl (hash: 37tXDitA0I+E6M8URPgarewFGpeeE8SjWEBMmVcVMZQ=)
2: 3WjchZn0ZaVWap-kBJDqG0_K268.roa (hash: mSek/wANUBuae6L6B5/5kvCQ+lsoN15OARfOIY4PvDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:db:9d:ea:1d:82:13:4d:6e:89:ca:6a:53:dc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Validity
Not Before: Mar 1 22:00:32 2026 GMT
Not After : Mar 2 22:00:32 2026 GMT
Subject: CN=0c146d47ac51c19c115dbdf02a7669cc33985d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:9a:ff:1d:e8:2d:89:48:df:42:12:41:71:
16:52:73:94:43:c4:f8:22:ae:01:f8:38:90:25:42:
20:ca:7a:9f:d6:8c:18:25:71:37:cb:b2:01:e1:69:
a6:4a:aa:d1:89:c5:a4:c0:79:c8:10:01:62:68:c7:
93:53:d3:c3:f3:eb:c4:dd:80:2a:aa:35:a3:da:3d:
68:d4:6b:1d:f2:5a:39:4e:35:b2:8d:1d:ca:bd:b3:
ff:25:e9:5b:48:92:1e:8f:e0:f0:5c:80:44:44:68:
b8:e6:89:44:6b:28:76:47:84:92:11:20:19:e1:3a:
be:a0:a4:f1:4d:52:48:d9:7f:da:75:14:23:32:8e:
59:58:0a:92:8b:1e:05:ce:44:46:3d:5c:f9:5f:4d:
51:0e:44:30:30:3e:42:52:80:28:bb:bd:eb:a9:d2:
45:02:2f:d8:6a:be:4c:0a:39:e6:1f:4f:c8:2d:c0:
f6:c7:70:1f:29:99:c6:e6:9c:a6:de:ff:40:5b:d1:
04:05:5c:20:53:0e:a8:c6:af:5e:46:b6:51:c5:50:
ca:b5:a4:b7:9a:a1:0b:0d:cd:67:ef:e7:dd:0b:33:
f5:fe:f0:88:9d:9f:2e:4b:8d:08:0e:13:53:3f:e1:
e9:59:81:47:a7:f1:54:9c:22:9b:72:92:e8:20:b7:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:6D:47:AC:51:C1:9C:11:5D:BD:F0:2A:76:69:CC:33:98:5D:8A
X509v3 Authority Key Identifier:
keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6a:14:67:d2:3a:f3:26:30:db:b8:a7:f3:0d:b2:0e:f1:56:
5d:80:72:17:aa:09:eb:32:28:1c:55:22:ce:1d:86:27:79:0c:
60:7e:1a:16:4f:69:a7:89:71:9e:18:d1:f3:dc:3e:0b:84:65:
32:53:d2:47:67:5c:ac:3e:13:93:55:aa:f2:8c:58:1b:1c:33:
78:3d:15:25:d0:20:7c:1d:9a:e8:9f:e5:61:2d:a5:db:79:22:
7b:dc:6d:e2:1a:c0:e6:f3:90:f6:ec:87:f9:6a:12:a1:8e:df:
df:07:74:7c:55:e1:0f:27:20:de:ee:33:e6:97:f0:13:b8:57:
84:ea:63:0f:b1:15:27:fd:1b:60:ab:13:4f:d7:f9:a1:42:0a:
c7:4c:d9:49:da:b3:46:e5:6b:96:ae:2d:60:08:50:f8:ce:37:
3b:ca:66:e7:cb:92:b6:25:01:84:23:4d:a6:eb:06:cf:2e:f2:
5b:ce:00:f9:c1:a2:e7:c5:6a:7e:f8:f0:01:43:53:55:f4:78:
a9:96:17:d2:c1:10:6e:99:e3:93:92:4c:7c:eb:3a:e2:63:17:
51:4a:28:24:3f:8d:b5:c8:31:df:29:c6:3b:ed:d5:be:84:a9:
91:38:d0:1e:c1:24:9f:0d:48:21:aa:c9:81:dc:e1:dc:92:57:
2d:9e:c2:28
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyratud6h2CE01uicpqU9y6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzUxMzAyYWY3YjVjZDZiZWYzNzE3YjY4MzY3ZTAyYjYx
N2QyZGMwHhcNMjYwMzAxMjIwMDMyWhcNMjYwMzAyMjIwMDMyWjAzMTEwLwYDVQQD
EygwYzE0NmQ0N2FjNTFjMTljMTE1ZGJkZjAyYTc2NjljYzMzOTg1ZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOOa/x3oLYlI30ISQXEWUnOUQ8T4
Iq4B+DiQJUIgynqf1owYJXE3y7IB4WmmSqrRicWkwHnIEAFiaMeTU9PD8+vE3YAq
qjWj2j1o1Gsd8lo5TjWyjR3KvbP/JelbSJIej+DwXIBERGi45olEayh2R4SSESAZ
4Tq+oKTxTVJI2X/adRQjMo5ZWAqSix4FzkRGPVz5X01RDkQwMD5CUoAou73rqdJF
Ai/Yar5MCjnmH0/ILcD2x3AfKZnG5pym3v9AW9EEBVwgUw6oxq9eRrZRxVDKtaS3
mqELDc1n7+fdCzP1/vCInZ8uS40IDhNTP+HpWYFHp/FUnCKbcpLoILc4kQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAwUbUesUcGcEV298Cp2acwzmF2KMB8GA1UdIwQY
MBaAFPt1EwKve1zWvvNxe2g2fgK2F9LcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zVVRBcTk3WE5hLTgzRjdhRFotQXJZWDB0dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvNWQ0MDA0LWFhYzAtNGVhZC1hNTgw
LWM2NjRiNGU4NmFiNS8xLzEtM1VUQXE5N1hOYS04M0Y3YURaLUFyWVgwdHcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I1LzVkNDAwNC1hYWMwLTRlYWQtYTU4MC1jNjY0YjRlODZh
YjUvMS8xLTNVVEFxOTdYTmEtODNGN2FEWi1BcllYMHR3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGoU
Z9I68yYw27in8w2yDvFWXYByF6oJ6zIoHFUizh2GJ3kMYH4aFk9pp4lxnhjR89w+
C4RlMlPSR2dcrD4Tk1Wq8oxYGxwzeD0VJdAgfB2a6J/lYS2l23kie9xt4hrA5vOQ
9uyH+WoSoY7f3wd0fFXhDycg3u4z5pfwE7hXhOpjD7EVJ/0bYKsTT9f5oUIKx0zZ
SdqzRuVrlq4tYAhQ+M43O8pm58uStiUBhCNNpusGzy7yW84A+cGi58VqfvjwAUNT
VfR4qZYX0sEQbpnjk5JMfOs64mMXUUooJD+Ntcgx3ynGO+3VvoSpkTjQHsEknw1I
IarJgdzh3JJXLZ7CKA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:31 2026 by rpki-client