Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: zPW1Gp6XEAUqcQFQztU/IxZ/79WPoheLtDB0OU5MhkY=
Subject key identifier: 31:2F:0C:2C:45:D3:76:9A:36:16:2E:57:C2:92:50:D0:0F:12:46:50
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 01A0DA5F3B89789960E00F4BA8E3A9023F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0FA9
Signing time: Fri 25 Sep 2026 21:01:09 +0000
Manifest this update: Fri 25 Sep 2026 21:01:09 +0000
Manifest next update: Sat 26 Sep 2026 21:01:09 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: M6xmuHdMsqYxwhIiGPrGnxv1ufxxBqHsLnRTta0PLGo=)
2: y2Yw6-Xzss6T6oXyrYGmZ001q9U.roa (hash: d8IrU4kU0qWnxL1m5NsiZ0ByNC3CpvcAWEyIv/Y47HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:3b:89:78:99:60:e0:0f:4b:a8:e3:a9:02:3f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Sep 25 21:01:09 2026 GMT
Not After : Sep 26 21:01:09 2026 GMT
Subject: CN=312f0c2c45d3769a36162e57c29250d00f124650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:48:74:5d:7d:cc:9a:ab:03:96:4d:a4:c5:
75:be:0c:63:95:f9:b2:61:eb:83:a4:7a:7c:8b:40:
6b:97:f3:e1:fc:1f:26:42:01:98:c4:d6:b5:ef:25:
f9:0f:30:d2:87:91:d8:41:fe:b5:86:86:c0:c2:34:
cd:95:0a:d9:10:e1:c6:ad:65:56:38:3b:6f:61:cf:
a8:60:11:b8:9d:98:df:a8:7e:6a:ba:7c:b4:f2:0b:
15:f0:b7:e5:8e:64:49:da:48:65:45:da:7f:5e:d2:
fa:d9:79:e0:9b:d7:26:be:b3:cb:75:c2:97:f1:08:
8a:2d:7f:d9:d6:e7:09:aa:34:d4:9f:a1:38:c7:40:
12:04:e2:67:47:6f:1a:ce:ee:c9:86:47:59:55:e6:
2f:e2:ee:90:a6:ed:ae:7a:7d:5b:77:e4:72:03:f9:
8a:20:17:eb:4d:0d:10:3c:a4:7c:13:64:77:dc:68:
32:21:59:5f:00:55:a6:f5:2d:40:8b:60:ce:7e:66:
d5:38:a1:9b:34:21:03:c1:9a:42:ed:3a:b5:83:70:
73:d0:9a:92:b8:d2:3b:31:1d:a2:4b:c8:36:81:c6:
52:45:04:49:0c:90:07:ee:3f:ec:45:38:49:ef:46:
05:a9:98:24:13:14:87:8f:a6:0f:cd:3d:e5:5b:cb:
c0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2F:0C:2C:45:D3:76:9A:36:16:2E:57:C2:92:50:D0:0F:12:46:50
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:59:89:13:af:53:77:90:1b:f1:4c:bb:5d:53:1e:63:ba:78:
ab:16:89:35:cc:fd:6f:78:87:ff:83:eb:57:fe:2b:15:80:85:
18:e1:b5:44:95:c2:4c:ab:04:21:7d:c6:b8:f4:97:8b:37:de:
77:20:58:90:7a:c1:82:55:d6:b6:c8:eb:1d:b4:a5:d7:27:29:
fb:1e:2a:b0:31:9d:d1:22:26:a8:82:da:21:34:3b:02:94:3c:
d5:c7:a6:ba:05:1f:02:8a:62:58:42:57:e4:c8:1f:00:ea:7e:
18:e2:19:16:ed:80:4a:6c:93:1b:c2:b1:ae:df:c3:bc:6a:d1:
19:5d:dd:22:f8:aa:99:45:3f:c9:29:da:f8:76:85:79:27:3e:
cf:da:6c:f5:fd:0f:44:0a:09:54:a9:87:ca:55:c8:34:3e:92:
51:23:15:0f:74:a9:35:e8:f4:97:f3:96:5a:6a:b1:c4:dc:23:
59:7a:84:51:8f:ee:c1:c6:ef:e0:de:9d:50:1a:cc:04:d5:1b:
3d:c4:98:f8:40:da:2f:fe:da:02:00:37:c4:4f:75:cf:7b:ad:
54:94:9e:20:5d:f3:e9:7d:8b:f8:4b:3d:6f:a1:fe:85:a3:27:
79:39:ff:7a:26:45:62:03:85:18:de:6b:af:cd:c0:d4:53:07:
c7:fe:56:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:04:24 2026 by rpki-client