Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: obw7LgDforUsKBLnGHn1F9ABAR6p14mr6K1IyDewwbY=
Subject key identifier: 92:06:46:EB:E1:DB:8F:39:44:50:D0:B1:C9:6E:CA:31:4A:CB:3E:72
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019EBDDA682373CA17A4A255D906B9BF55B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 1800
Signing time: Fri 12 Jun 2026 22:01:07 +0000
Manifest this update: Fri 12 Jun 2026 22:01:07 +0000
Manifest next update: Sat 13 Jun 2026 22:01:07 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: vcgQsOfufBNUgDEhs2WuDI+wjDK67OxEbvF+Ava2Xe0=)
2: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (hash: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA=)
3: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (hash: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:68:23:73:ca:17:a4:a2:55:d9:06:b9:bf:55:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jun 12 22:01:07 2026 GMT
Not After : Jun 13 22:01:07 2026 GMT
Subject: CN=920646ebe1db8f394450d0b1c96eca314acb3e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:61:3c:eb:9e:d4:c8:ea:3b:34:58:3a:7d:
11:d1:db:9c:10:c9:74:5a:a5:4b:9e:36:aa:aa:0d:
29:11:63:6f:d2:b2:5b:7b:39:f7:9d:c5:33:a4:07:
97:79:fd:31:9d:a0:2c:28:00:67:f0:5e:4c:e5:3f:
5b:ee:f3:6d:ff:d7:e8:98:ad:fb:70:97:a6:d3:7d:
61:f1:94:af:60:6a:76:91:70:61:2d:ee:ce:43:16:
9d:70:7a:1e:21:d4:f6:d6:4f:59:41:8d:7c:92:de:
11:66:a9:3f:32:5d:dd:fc:94:1c:e8:e2:78:0b:11:
63:ce:c7:eb:38:6a:7b:91:f6:02:ca:8e:e4:e9:01:
d9:70:9b:c3:31:35:2c:f1:0d:ba:f7:bd:ce:2d:56:
1b:84:ad:33:fa:07:9a:1c:25:85:5c:20:13:b9:82:
08:dc:5a:21:1f:7a:5b:72:6c:2f:a5:20:5e:1c:aa:
04:76:e9:cf:59:35:62:e4:e7:a9:80:8e:94:81:5e:
8a:0d:93:e0:69:d3:a3:68:24:9e:a9:81:55:7e:77:
9e:af:97:93:f6:98:60:ff:48:89:6f:8c:e3:2c:a6:
ef:00:5d:e1:94:86:b8:82:c3:49:e9:c9:5a:9d:18:
73:56:9b:84:58:ed:be:15:42:e5:68:4d:e3:a0:8d:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:06:46:EB:E1:DB:8F:39:44:50:D0:B1:C9:6E:CA:31:4A:CB:3E:72
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:08:a1:aa:ad:ab:9e:95:0e:ad:f3:4e:5f:45:d8:5d:3e:6c:
ca:e3:65:84:1c:4a:d0:a3:7f:72:48:7c:f2:f3:ca:a2:c2:41:
5c:b6:72:ab:0b:86:64:59:e6:8c:da:18:da:df:24:bd:8c:77:
d4:96:6a:fa:10:21:70:68:63:b4:f8:d9:d9:2b:f1:5f:80:77:
65:e3:9c:bd:cb:81:49:2a:9a:78:f5:2f:8e:ea:19:55:6c:27:
11:b2:b0:63:97:47:87:97:a2:75:69:93:4f:5f:03:77:be:1d:
e2:de:72:1e:98:83:0f:54:aa:5b:b6:1f:44:d9:c7:4d:45:1b:
5d:56:ee:b3:84:ee:18:7a:99:21:c0:d6:27:ae:0e:76:af:87:
2b:bf:52:e1:11:b5:4e:32:98:d1:4d:5a:cc:e0:90:c2:fe:80:
f8:a8:2a:0c:41:dc:50:db:7c:3e:59:05:c8:a4:a8:c0:04:59:
af:cb:bc:4c:33:f5:92:d3:26:bd:db:ae:92:bc:cd:3e:bc:f5:
8f:bd:a9:85:f8:ad:c1:53:5f:a3:87:c8:52:b8:44:6e:91:ec:
2c:72:7b:a5:d4:c1:a7:e0:2a:6e:db:e8:d6:65:16:70:19:a2:
fd:7b:01:a3:7a:41:8a:fb:95:f8:a5:69:4b:ec:7e:10:9f:c7:
28:63:7f:0a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ692mgjc8oXpKJV2Qa5v1W1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzgyYjc4ZjIwYTZlNGI3MDY0MzA1MmJkMWE0MGFmMTVh
NTYzMzgwHhcNMjYwNjEyMjIwMTA3WhcNMjYwNjEzMjIwMTA3WjAzMTEwLwYDVQQD
Eyg5MjA2NDZlYmUxZGI4ZjM5NDQ1MGQwYjFjOTZlY2EzMTRhY2IzZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK9hPOue1MjqOzRYOn0R0ducEMl0
WqVLnjaqqg0pEWNv0rJbezn3ncUzpAeXef0xnaAsKABn8F5M5T9b7vNt/9fomK37
cJem031h8ZSvYGp2kXBhLe7OQxadcHoeIdT21k9ZQY18kt4RZqk/Ml3d/JQc6OJ4
CxFjzsfrOGp7kfYCyo7k6QHZcJvDMTUs8Q26973OLVYbhK0z+geaHCWFXCATuYII
3FohH3pbcmwvpSBeHKoEdunPWTVi5OepgI6UgV6KDZPgadOjaCSeqYFVfneer5eT
9phg/0iJb4zjLKbvAF3hlIa4gsNJ6clanRhzVpuEWO2+FULlaE3joI1fIwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJIGRuvh2485RFDQscluyjFKyz5yMB8GA1UdIwQY
MBaAFPt4K3jyCm5LcGQwUr0aQK8VpWM4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zZ3JlUElLYmt0d1pEQlN2UnBBcnhXbFl6Zy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOWRjOTMzLTVjMGQtNDQ2MS1hNDVk
LThmN2Q1NjkxYzFiZS8xLzEtM2dyZVBJS2JrdHdaREJTdlJwQXJ4V2xZemcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UzLzlkYzkzMy01YzBkLTQ0NjEtYTQ1ZC04ZjdkNTY5MWMx
YmUvMS8xLTNncmVQSUtia3R3WkRCU3ZScEFyeFdsWXpnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagih
qq2rnpUOrfNOX0XYXT5syuNlhBxK0KN/ckh88vPKosJBXLZyqwuGZFnmjNoY2t8k
vYx31JZq+hAhcGhjtPjZ2SvxX4B3ZeOcvcuBSSqaePUvjuoZVWwnEbKwY5dHh5ei
dWmTT18Dd74d4t5yHpiDD1SqW7YfRNnHTUUbXVbus4TuGHqZIcDWJ64Odq+HK79S
4RG1TjKY0U1azOCQwv6A+KgqDEHcUNt8PlkFyKSowARZr8u8TDP1ktMmvduukrzN
Prz1j72phfitwVNfo4fIUrhEbpHsLHJ7pdTBp+Aqbtvo1mUWcBmi/XsBo3pBivuV
+KVpS+x+EJ/HKGN/Cg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:41 2026 by rpki-client