Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: pXGSPg9uCdipARzVa0dCA0z3s9ddAwoUc/huMUUOJ6g=
Subject key identifier: 9F:A0:24:BE:D7:96:CD:5D:C7:EA:4B:A3:E4:BB:FC:F7:C0:3F:A6:D7
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 019D27DFFE20899ADC29308726597A4CF013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: 0213
Signing time: Thu 26 Mar 2026 02:01:24 +0000
Manifest this update: Thu 26 Mar 2026 02:01:24 +0000
Manifest next update: Fri 27 Mar 2026 02:01:24 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: 5Ym1kmISNtH+mQtMzflRRLa8Kx/ps2bImdU7qtXk9sk=)
2: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (hash: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:fe:20:89:9a:dc:29:30:87:26:59:7a:4c:f0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Mar 26 02:01:24 2026 GMT
Not After : Mar 27 02:01:24 2026 GMT
Subject: CN=9fa024bed796cd5dc7ea4ba3e4bbfcf7c03fa6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:b5:5b:a4:e8:31:76:e6:b6:29:54:43:af:
48:21:e2:7d:df:83:2a:65:ba:c0:0f:d1:ab:6f:e9:
6e:d4:e0:71:8f:eb:11:dd:8e:66:93:69:b2:8f:c6:
b8:ee:a7:3f:0a:ba:96:d9:ee:88:4d:f2:c6:8e:6b:
db:6d:1b:cc:56:13:e8:d1:c0:07:4d:ba:7e:9d:61:
69:7e:1f:12:70:7b:e0:76:25:a5:a4:0d:cc:02:cf:
41:bd:11:85:52:fd:71:e7:e8:24:68:a9:0c:04:3e:
5e:82:8d:d2:ba:50:b7:ca:b2:64:df:e3:67:04:5b:
c9:d8:22:75:f8:92:df:d6:35:38:3c:78:34:8c:bf:
f1:de:f5:6b:96:6e:06:1a:2a:ef:86:25:22:f6:8c:
97:8d:9c:03:07:a9:d4:ac:c0:d4:61:2d:cf:2c:e7:
93:94:7d:f7:84:3b:59:57:dd:84:d2:e3:84:22:a7:
a3:4d:88:36:cc:32:a4:ba:67:52:09:f7:62:d3:ff:
4c:de:e8:b5:59:46:3d:a1:35:23:5f:e7:9a:d9:7f:
80:75:9b:53:e0:dc:93:56:e6:45:11:d1:1a:ba:47:
6c:a8:81:30:d7:3b:a2:08:1b:29:b5:ec:6a:03:79:
35:3d:eb:ca:76:d6:f7:4b:3e:98:47:00:9f:a6:7f:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A0:24:BE:D7:96:CD:5D:C7:EA:4B:A3:E4:BB:FC:F7:C0:3F:A6:D7
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:64:43:83:7d:31:e0:c5:1b:fe:a6:ea:bb:ec:4b:70:f1:2c:
26:48:9e:eb:65:d5:ff:ac:17:2c:b9:1d:3f:a9:61:cb:be:15:
8c:51:f0:3a:0d:e8:fa:97:08:43:0e:fb:9b:40:ac:c4:e4:ea:
56:19:8e:c8:98:27:21:c9:32:94:2c:37:fb:d8:76:68:29:8d:
6c:d7:e7:b4:ce:ae:4b:f1:b8:de:1e:56:0e:83:a8:fe:71:17:
1b:6c:f4:1f:2b:81:9f:a8:27:fb:37:94:14:68:c3:2d:32:9a:
32:fc:87:bb:06:5d:0e:f6:ed:3b:3f:ff:c1:ed:6b:a5:8f:b2:
0d:47:1c:84:bf:df:0f:b6:fb:3b:d6:4f:64:ef:49:cb:be:d7:
c6:8d:b9:d7:fa:c1:37:bb:52:38:82:ae:bd:db:ac:a1:b7:d6:
a1:4f:e1:98:c0:a9:f1:ca:38:7c:e3:06:cb:26:30:f5:e8:4f:
70:36:90:f9:b9:43:67:90:e3:75:06:6c:97:31:ae:40:83:8a:
d9:04:6b:db:be:ba:ae:e7:3a:39:08:98:2c:7e:00:ea:4a:b1:
99:17:ea:52:84:ab:dd:d0:c3:f7:bc:da:9b:19:e6:3f:57:ee:
6d:16:8c:91:26:d1:8a:d7:77:ca:b9:98:c9:cf:fc:86:52:16:
ec:3c:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:29 2026 by rpki-client