Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: 1cNeml/X0Q9m+HZ1qIkqyIW1XHciEpxjIVVjofm5fo0=
Subject key identifier: E5:C8:A5:E1:E2:23:69:E8:94:66:B3:A0:13:C2:4F:C2:95:A9:AD:F2
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019EBFC8D4494EDF5DB152485F337A1277E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 1801
Signing time: Sat 13 Jun 2026 07:01:10 +0000
Manifest this update: Sat 13 Jun 2026 07:01:10 +0000
Manifest next update: Sun 14 Jun 2026 07:01:10 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: VUf01D46LqFvt6Gn01yAYOkkSdJWRREXJcPiGQIMq9E=)
2: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (hash: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA=)
3: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (hash: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:d4:49:4e:df:5d:b1:52:48:5f:33:7a:12:77:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jun 13 07:01:10 2026 GMT
Not After : Jun 14 07:01:10 2026 GMT
Subject: CN=e5c8a5e1e22369e89466b3a013c24fc295a9adf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:d9:b6:91:a9:91:48:02:f4:69:22:1d:5e:
e3:bd:32:10:ee:e1:39:77:26:0a:90:82:86:e5:72:
b2:81:1d:31:e0:62:ce:ce:ed:9b:f2:1a:0c:94:e9:
87:27:72:73:88:55:04:d2:21:eb:87:77:9b:b7:64:
dc:f0:a3:be:77:f6:f5:90:8f:58:60:da:0a:33:c5:
b7:13:e5:ed:08:2c:91:1b:df:73:78:a0:0a:cf:37:
27:c1:c8:fa:15:54:cc:0e:73:df:c0:d8:61:7b:cb:
99:9d:d8:1d:16:c3:fb:a0:c0:57:3e:05:c3:cc:43:
07:2d:09:0c:cc:27:fb:f3:c4:6a:51:32:38:f3:5f:
12:c8:ee:ed:b8:5b:d1:d6:ca:1c:e7:09:5d:b5:fb:
70:8a:78:8f:17:1f:a7:7d:13:e3:82:92:66:b3:84:
a8:bb:b1:32:81:54:39:25:01:e5:f0:3f:1c:2f:61:
9f:14:e2:e4:70:2f:de:a0:b2:81:8e:ad:a9:ec:b8:
8d:4b:95:b0:3a:b5:a4:0e:9f:65:b4:71:1b:c0:40:
79:99:5c:ff:b1:e9:9b:ea:a9:a3:dc:c5:d8:1f:9c:
00:61:88:3f:c7:4b:a5:73:6c:2d:1b:93:82:12:56:
7c:e2:28:4d:61:25:66:67:a5:1f:65:5d:f9:3f:a7:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C8:A5:E1:E2:23:69:E8:94:66:B3:A0:13:C2:4F:C2:95:A9:AD:F2
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a4:e4:db:c3:a2:d5:6e:d5:b3:4d:78:b2:b4:6e:b4:e9:5e:
2e:90:c8:91:93:8d:a8:c9:5a:35:6b:e1:24:27:96:48:21:7c:
a3:2b:5c:fa:99:cb:bd:d2:e3:54:50:e9:7f:40:14:03:46:3e:
b2:8f:c6:8a:95:2c:dc:b7:01:e7:e0:c5:8f:04:7b:e4:1e:95:
75:7e:2b:40:b6:33:34:27:48:22:77:85:e4:34:10:d9:3c:9d:
10:ee:0b:5c:25:81:ad:59:2d:9d:87:cc:7d:fc:fd:2e:4e:a3:
c6:9d:30:d2:8f:e0:71:16:66:5c:ae:45:1c:5a:0a:99:ee:52:
8f:5f:0f:f7:11:c0:01:c9:18:f9:10:3f:60:02:04:0d:58:63:
06:f3:d9:92:cd:92:40:65:f6:3a:74:5a:ed:f5:f2:c8:40:13:
e6:b9:95:56:8c:ac:d1:48:b0:69:48:16:f3:e1:97:30:2e:c4:
9a:7f:b1:b4:6f:12:e7:ba:24:07:a4:5b:79:ff:e0:ae:2d:79:
c9:05:3d:7b:7d:01:13:01:89:09:4f:0d:b0:74:57:e9:f3:72:
3d:02:82:ba:80:25:19:4c:3c:8a:2f:70:f9:14:38:f3:1f:91:
b3:5e:97:7c:26:ea:39:98:0b:f4:ee:70:a0:93:a6:21:28:10:
60:21:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:56 2026 by rpki-client