Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: 85caybw8Bz2tGeOEjRRwfLeNJSPvhnqQPRa3fmJVE5o=
Subject key identifier: D1:14:11:41:EB:83:FB:37:B7:01:6B:F1:2F:FA:FD:D7:0F:E3:E7:2A
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 01A0C557E606B8C670AFC9C0F26AA250E1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 190D
Signing time: Mon 21 Sep 2026 19:01:07 +0000
Manifest this update: Mon 21 Sep 2026 19:01:07 +0000
Manifest next update: Tue 22 Sep 2026 19:01:07 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: 26mjeR6OK691xPI+8sHdRPPACXlMmemexOeVSfIFIv4=)
2: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (hash: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA=)
3: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (hash: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:e6:06:b8:c6:70:af:c9:c0:f2:6a:a2:50:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Sep 21 19:01:07 2026 GMT
Not After : Sep 22 19:01:07 2026 GMT
Subject: CN=d1141141eb83fb37b7016bf12ffafdd70fe3e72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:e3:4d:76:bf:74:f0:7a:21:8e:18:65:2a:
de:d6:48:64:29:4f:a4:c8:d4:c9:27:07:a2:c1:78:
5d:4b:0d:1f:d4:61:5b:28:3c:b1:a9:58:6a:d9:c1:
b0:67:c2:2f:b5:3e:a8:33:45:d7:5f:dc:e6:e0:7a:
48:17:e0:cd:ce:f6:26:76:36:8d:e4:5c:f9:01:d0:
ac:ba:df:6f:b9:e8:ea:d7:df:55:79:4e:7c:ce:5f:
cc:11:94:a4:2e:16:04:97:fe:03:05:88:63:44:fd:
b6:f0:81:ca:f6:d3:5b:f8:3a:01:eb:b9:6d:ed:db:
2b:25:f4:41:60:f2:d4:44:ae:17:62:7f:51:67:08:
0b:3c:f8:90:98:7f:fc:65:43:a0:58:98:c1:bc:5d:
86:80:13:34:e2:ed:eb:2f:03:8f:c0:00:40:c6:ab:
17:9a:02:e0:6b:37:e4:95:18:9e:38:eb:ae:ab:88:
25:f8:f8:8f:01:4b:1d:ec:4d:02:c1:05:01:59:1d:
5c:65:9d:d3:51:36:41:24:1f:9c:56:d8:14:4c:53:
3d:3a:84:c9:22:43:59:ca:1b:0b:e0:bc:a1:7a:b6:
85:ab:ec:cc:36:48:5c:77:9c:79:86:c8:2b:f3:42:
1b:68:86:c3:7a:75:06:b0:53:fd:7f:f4:b4:8a:76:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:14:11:41:EB:83:FB:37:B7:01:6B:F1:2F:FA:FD:D7:0F:E3:E7:2A
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:aa:07:f9:bd:66:6b:76:11:6b:8c:97:7b:c1:de:c3:8d:86:
a0:54:ab:ed:06:47:f7:86:f4:97:c2:d5:b1:50:e7:38:37:1a:
23:13:93:bd:cb:88:87:af:d1:d3:ce:04:a4:10:d5:d5:b1:c6:
54:06:f8:d8:78:fa:30:64:6f:c2:eb:f3:ee:2a:57:36:f5:2d:
ce:b7:43:78:ea:4b:d6:99:99:f7:6b:72:35:83:e4:29:22:b3:
c8:37:e6:e2:4d:51:61:f5:36:b6:42:85:58:ff:8f:84:bb:8f:
20:fe:cc:24:9a:73:20:66:a1:86:3d:96:46:5b:ca:89:11:88:
79:e8:50:53:a2:d8:16:9c:be:83:ff:d5:8b:8b:a0:d4:2c:25:
4d:3f:fe:c6:80:7d:54:3d:ed:a1:7c:1d:7e:e3:6f:19:d0:4b:
d4:a4:4a:47:bc:31:4f:09:79:b3:13:09:ae:ac:4b:00:f7:8b:
72:11:a3:05:9b:f2:92:21:c4:e8:ae:36:c1:b1:22:33:99:b7:
da:f4:ac:ae:a2:23:c9:56:72:64:dd:ae:ed:24:59:14:5a:1d:
66:e9:40:eb:f4:51:c7:f2:d1:a6:1b:ba:bb:6a:3d:8f:09:50:
e9:09:32:a5:27:b9:d3:d3:08:ae:0a:85:de:86:49:a4:da:02:
71:bd:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:26:48 2026 by rpki-client