Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: /Xnh4mop08ibj8l8Jydu61LwAJFXJTPoJxHXPVfqQJI=
Subject key identifier: AB:82:B1:43:57:5A:C2:7E:0F:DE:A6:91:E1:F8:7F:AE:5B:8E:DA:AE
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019CAAC60A94F6418BAACD398F4A27604D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 16ED
Signing time: Sun 01 Mar 2026 19:00:31 +0000
Manifest this update: Sun 01 Mar 2026 19:00:31 +0000
Manifest next update: Mon 02 Mar 2026 19:00:31 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: X0BSi8z8TiBVY655n5okidhd/kDXgejB1moHKOpxIy8=)
2: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (hash: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA=)
3: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (hash: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:0a:94:f6:41:8b:aa:cd:39:8f:4a:27:60:4d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Mar 1 19:00:31 2026 GMT
Not After : Mar 2 19:00:31 2026 GMT
Subject: CN=ab82b143575ac27e0fdea691e1f87fae5b8edaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:0a:ff:04:06:84:78:2f:d0:e2:b0:71:49:
68:2a:3d:de:6b:41:7b:cd:4f:f0:40:33:3e:c7:f7:
6f:0a:7c:48:0d:05:b4:7e:01:2c:a8:60:d1:ed:69:
9e:20:e1:6c:2b:dd:5f:04:03:4d:fc:31:20:4a:e3:
1c:c4:de:c6:e9:f0:bc:8e:99:aa:4e:6d:fe:ee:73:
a5:c9:de:7d:b0:e9:c5:3a:f1:94:93:a6:6c:e3:eb:
b8:03:3e:da:95:d1:e0:67:62:df:fd:59:69:6e:60:
36:ad:07:74:bc:3a:d2:77:5b:c7:f3:ff:20:c8:ad:
44:11:7c:72:4c:60:7a:a6:aa:76:ef:a0:11:64:69:
9a:21:86:81:cf:86:09:0e:3d:95:96:6b:68:ce:b7:
d1:22:40:77:38:8c:d6:7c:5c:08:c2:d4:41:a3:28:
df:01:a8:8a:86:37:4f:4b:0f:1f:c7:71:22:44:33:
3b:d6:d5:27:e4:6b:36:b1:91:f4:40:ac:87:ff:94:
2c:04:ed:f8:f9:e3:b9:bf:42:f2:ad:f3:61:65:78:
df:92:7f:7e:7e:79:00:37:80:4f:be:19:47:37:06:
d1:e0:e3:a7:77:a3:5c:01:de:fc:db:23:f2:f1:25:
5c:8e:ed:72:44:5b:90:89:a1:d3:9a:32:6a:51:b0:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:82:B1:43:57:5A:C2:7E:0F:DE:A6:91:E1:F8:7F:AE:5B:8E:DA:AE
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:16:af:14:6c:e3:1f:80:7c:6c:75:bc:4d:bd:e6:82:5e:47:
8e:b7:51:39:7b:99:87:6b:37:3f:c6:ca:38:d1:9c:b5:14:e1:
b0:28:a5:bb:a1:b8:8c:1d:43:5b:8c:77:43:9a:dc:08:26:d9:
10:02:c5:80:7c:98:e1:12:18:68:b1:95:c9:c7:ab:7d:5f:4d:
11:22:5a:1c:04:66:78:a9:36:8d:af:a8:7b:46:59:74:a3:e7:
52:13:48:35:07:5d:e1:7d:7c:ea:7d:26:c9:67:b6:1a:a9:5b:
72:66:66:1e:0d:30:46:b3:55:4f:27:24:a7:55:bd:a5:71:4b:
99:40:98:34:45:38:14:47:cb:24:7b:ab:b2:52:8a:a2:0f:8b:
27:04:85:d5:7c:36:2a:54:4e:4d:32:39:22:c7:00:27:8c:48:
6e:8b:05:bf:82:d8:2d:d1:57:ee:df:59:0d:44:86:bc:db:f5:
c2:a3:56:52:36:35:ac:bc:94:0a:96:7b:e0:13:66:27:35:4d:
5a:1e:ea:32:bc:2e:3c:cb:65:54:dc:ec:ea:ca:41:e0:c0:30:
27:20:a0:35:d9:ef:4b:5d:17:cb:65:c9:86:f9:41:61:ec:5f:
d7:07:98:8e:ae:d3:b6:3a:0c:76:47:d3:5b:b0:e4:fc:1d:14:
b0:bd:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:35 2026 by rpki-client