Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: yk78iw0k9XrSA/B1WUActw20fLPVM/8HgYEKbanYnLU=
Subject key identifier: 97:36:6F:A2:76:9B:CC:E8:76:FB:BA:C0:E7:C8:FB:55:F8:2F:C2:46
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 019F8F10A0C156EE946A89CAB005F856C0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 0354
Signing time: Thu 23 Jul 2026 13:00:59 +0000
Manifest this update: Thu 23 Jul 2026 13:00:59 +0000
Manifest next update: Fri 24 Jul 2026 13:00:59 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: 6gsYHPZuAFoqd7MURwF/NLv957n2KhQ3TDGAMkW6qE8=)
2: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (hash: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0=)
3: hy7RusIjQH3rR8WgetncxaNV-TU.asa (hash: bhJXUcT+3ZOCVeeC8XzBVDF8FSK6zRK0UuX+SfxSKNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:a0:c1:56:ee:94:6a:89:ca:b0:05:f8:56:c0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Jul 23 13:00:59 2026 GMT
Not After : Jul 24 13:00:59 2026 GMT
Subject: CN=97366fa2769bcce876fbbac0e7c8fb55f82fc246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:99:31:8a:f4:3b:80:03:9e:60:19:3d:c8:91:
57:8c:f3:10:90:7e:0e:cc:36:93:5d:95:16:ce:8d:
0e:fe:de:70:3f:49:04:b9:be:ad:45:a5:82:53:06:
43:51:79:8b:37:e8:bf:7d:a0:62:ab:96:03:c5:76:
3b:48:12:53:2f:28:ae:1b:8b:55:2a:9b:13:be:7e:
00:e8:0c:95:97:91:ed:54:7e:a8:26:f7:f5:91:86:
6b:9e:08:c1:dc:e9:f4:25:4c:c5:4d:b8:45:3a:b2:
e7:b9:ba:b3:49:72:54:f9:f5:85:f4:8c:22:da:79:
27:9a:f7:37:55:cd:bd:9d:88:98:e3:00:4f:82:5f:
f7:74:4e:74:fe:80:d9:ac:12:56:e7:2e:c3:be:ae:
cf:00:f9:49:a8:bc:21:8a:2a:be:15:37:16:0d:87:
10:a8:15:4d:2e:dd:5d:f7:b8:bf:71:85:d8:29:8d:
31:1c:bb:16:fb:d1:6e:5d:2b:f3:cd:6f:7a:0d:48:
47:22:db:e3:9d:a9:78:16:03:e7:48:8f:58:65:36:
73:3d:43:1d:3b:3d:02:ad:75:da:b7:7e:11:10:5a:
8c:9f:bd:8d:f3:c6:55:1a:de:7b:91:56:d5:2a:eb:
58:78:a5:81:62:93:26:c5:bb:b3:67:8f:3d:2d:f5:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:36:6F:A2:76:9B:CC:E8:76:FB:BA:C0:E7:C8:FB:55:F8:2F:C2:46
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:1c:a1:e6:4a:24:78:4a:e0:d8:74:91:f8:03:09:91:e7:57:
10:2d:ae:63:5e:92:9e:56:12:31:85:1a:1f:c5:20:00:f5:a8:
58:53:45:b1:e9:12:e4:ca:07:48:e3:33:5e:7f:87:d3:5a:f1:
18:e9:62:d0:d2:e0:a4:14:71:52:15:c8:a1:9f:7d:e1:eb:cf:
55:7f:0a:ef:1e:fd:e7:80:c9:90:7a:50:e4:96:0f:86:32:b0:
d7:13:cd:57:92:14:b6:11:82:18:80:d0:a6:3a:4c:aa:f7:19:
35:29:b7:b7:35:31:5f:79:f0:6c:60:b6:b3:f4:f6:1e:84:ad:
74:05:91:9b:2d:21:31:36:dd:bc:c0:81:9c:6a:7d:2e:cc:51:
34:2c:34:51:f4:0f:4b:9e:26:65:14:52:a4:82:79:50:6b:22:
93:03:0b:9d:9b:d3:a3:d7:3b:f9:aa:54:8f:ad:28:50:23:ab:
c7:27:8f:c4:fe:30:4d:30:24:40:6a:4e:48:42:93:09:c4:ab:
e2:4b:f2:25:83:1b:1d:02:23:30:8f:2d:8f:4a:4d:aa:74:01:
cc:5d:12:df:5e:61:d2:e7:88:f0:b2:de:06:a4:74:fa:82:af:
d8:de:06:8e:39:52:d4:57:f8:e0:e2:60:0b:05:86:6b:2b:21:
51:10:1a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:44 2026 by rpki-client