Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: BBnI0VtJQoWS9AZJYHkQRILmZgFLaXIhQ+q+CIT6IlA=
Subject key identifier: 3D:CE:3C:57:F0:30:73:E9:CD:62:25:6F:BD:27:23:9B:A9:B8:C2:F3
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019D9C2D034D6FF33BC37393281FFF0C50DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 176A
Signing time: Fri 17 Apr 2026 16:01:28 +0000
Manifest this update: Fri 17 Apr 2026 16:01:28 +0000
Manifest next update: Sat 18 Apr 2026 16:01:28 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: mVg+c4iX8S3wINRJV6GLmE8s4LaxsZNKzft5jKccpxk=)
2: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (hash: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA=)
3: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (hash: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:03:4d:6f:f3:3b:c3:73:93:28:1f:ff:0c:50:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Apr 17 16:01:28 2026 GMT
Not After : Apr 18 16:01:28 2026 GMT
Subject: CN=3dce3c57f03073e9cd62256fbd27239ba9b8c2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:6f:db:04:da:1f:ef:1c:b3:01:cd:51:39:
92:5f:92:bf:17:de:b9:4c:db:3f:96:fd:5b:61:6d:
3d:04:89:90:0e:7e:80:a3:32:22:30:b7:4d:f2:41:
ef:a2:2b:d3:24:ed:c7:02:7f:c0:c5:b9:c7:77:02:
0d:55:d8:5c:8b:09:84:d2:db:b1:b6:3d:24:bf:37:
33:b9:ce:7c:af:c0:eb:fc:d4:ca:54:f1:5e:e6:27:
f0:af:5a:99:e0:ab:36:63:c9:0f:a1:95:b0:52:6b:
78:3c:d5:ea:c6:d1:0b:1d:f3:d4:c0:6d:51:8b:21:
df:59:a8:71:4e:49:52:a7:d3:09:35:02:6e:b2:05:
2d:06:de:46:2d:2a:f1:9e:01:b2:27:01:a4:c5:15:
73:3c:de:ad:da:f9:7b:0e:52:86:b1:51:25:6b:3a:
62:bd:f6:c7:91:5c:65:6b:0f:c8:e4:46:52:4b:63:
5f:bb:f4:e6:45:e3:8d:d6:0c:18:17:0c:1a:eb:11:
ed:d5:57:07:f7:83:51:8c:41:fb:5a:48:8c:92:c5:
2a:09:79:88:b6:56:7c:84:44:e5:84:ec:9b:19:ac:
e4:b8:68:4b:fa:6f:6d:90:b2:e5:d1:b2:37:0b:27:
7d:a6:23:a5:65:c2:7c:bf:6e:73:85:f3:d9:c9:67:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CE:3C:57:F0:30:73:E9:CD:62:25:6F:BD:27:23:9B:A9:B8:C2:F3
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1e:de:4e:d2:43:19:98:63:e8:59:66:e7:49:84:78:17:00:
1d:74:44:56:14:14:a2:4c:22:66:30:9d:e2:03:16:41:b7:76:
85:db:c6:9d:6b:b6:05:14:85:c7:93:79:4b:28:84:61:40:08:
dd:f0:b1:e6:c5:79:4f:eb:cf:4d:94:c4:19:ad:ea:80:77:9f:
50:43:29:23:59:16:45:65:43:3f:e4:57:45:35:2c:2d:13:00:
42:af:ee:3f:35:e2:35:a6:8f:b8:5e:6d:79:10:3c:c9:a2:33:
63:3c:31:ee:d8:77:a0:29:0a:b5:18:e7:68:59:f6:83:2b:29:
d2:75:5d:16:a2:d4:da:c5:d5:5c:30:51:c1:dd:5a:29:95:ce:
7a:cd:7d:2d:f1:c9:26:0d:8c:9d:24:b3:5f:3d:8e:1b:c6:b7:
97:5b:f2:e7:d8:51:c5:75:bf:07:84:0a:b2:21:9c:26:e5:b1:
60:35:c9:28:cb:c4:1f:4e:d0:0f:3f:d2:69:76:8f:9c:11:d7:
7e:69:03:f3:a5:a8:14:a5:c5:96:a2:35:33:8f:af:c0:b6:e4:
40:d9:af:32:6f:36:f9:e1:37:27:72:5e:d9:9d:cb:c0:97:b1:
45:3c:e9:7c:5e:6a:82:c7:61:09:d9:c4:af:f5:1c:aa:ca:82:
f2:d0:a5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:15:48 2026 by rpki-client