Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: KAucYYtkH6F+ve9BxRTzjiRoCBL8c9WQmPo1Se2H5yw=
Subject key identifier: 67:EF:5C:68:CE:C5:E1:8A:C4:1F:5A:1B:06:9F:F9:E6:04:08:64:A5
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 019D2A04AC9ADFD098D5DD3CD55E623BC78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0DC0
Signing time: Thu 26 Mar 2026 12:00:42 +0000
Manifest this update: Thu 26 Mar 2026 12:00:42 +0000
Manifest next update: Fri 27 Mar 2026 12:00:42 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: Smwhz+HOvtHD5DYy9tHjcOVBNTZzJNhuiGSOrDwS604=)
2: y2Yw6-Xzss6T6oXyrYGmZ001q9U.roa (hash: d8IrU4kU0qWnxL1m5NsiZ0ByNC3CpvcAWEyIv/Y47HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:ac:9a:df:d0:98:d5:dd:3c:d5:5e:62:3b:c7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Mar 26 12:00:42 2026 GMT
Not After : Mar 27 12:00:42 2026 GMT
Subject: CN=67ef5c68cec5e18ac41f5a1b069ff9e6040864a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3f:2c:60:6b:1b:bc:d4:74:64:5e:66:c8:04:
70:b3:e1:d8:09:c6:07:8c:f6:a8:13:20:dc:97:9f:
ce:67:d5:64:1c:28:0c:1e:5b:10:b2:fd:69:b4:94:
96:6d:46:09:07:25:9d:0a:4b:e6:2f:48:8b:9e:16:
b2:eb:7a:f1:43:73:84:82:19:c4:01:95:4b:b7:b5:
8e:8b:bf:9d:6e:55:87:ff:eb:92:6b:1a:23:cc:47:
b3:7f:d1:92:94:8f:c8:b6:6e:53:1a:e2:36:8e:a1:
90:71:41:ea:32:fc:88:73:30:86:3b:b8:e1:39:5f:
96:d6:68:fb:55:74:37:c7:38:49:48:49:98:16:ae:
19:79:44:c9:49:62:24:d1:3e:ca:1e:25:b6:ca:80:
82:4e:36:da:57:db:8e:fc:60:fe:ce:51:e1:0b:68:
6e:3e:3f:45:b1:5f:ee:3e:5b:7b:91:cd:da:01:a4:
b9:b9:9e:0d:92:e0:83:a5:f4:71:90:0a:4a:ad:43:
a9:b7:c3:eb:dd:74:99:e5:f1:4b:68:a8:10:50:5a:
79:37:4d:4d:bc:6e:79:87:89:17:fd:1a:9e:14:20:
8a:93:4e:5e:cd:84:da:7b:18:4c:19:7c:68:17:76:
a7:68:91:81:d9:e0:cd:1a:10:66:73:4d:c3:71:18:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EF:5C:68:CE:C5:E1:8A:C4:1F:5A:1B:06:9F:F9:E6:04:08:64:A5
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:20:42:63:bb:62:d8:6d:41:d8:f8:8e:4e:3a:1a:40:d0:78:
2a:ba:72:ba:17:6b:b3:50:c8:d5:17:26:90:f3:94:6e:19:f2:
6c:65:c1:bf:d8:72:95:f1:d3:56:39:d5:1d:da:ce:0f:3e:56:
16:5e:06:95:21:d5:c3:48:90:d9:28:0e:d1:11:1e:21:30:1b:
85:55:c3:73:32:15:5c:6d:37:15:d9:c3:31:cb:b9:48:a9:ea:
5e:fe:9b:16:18:a3:ca:5a:e4:da:e4:c2:ed:f6:1b:7e:9e:00:
1c:3b:db:04:56:e4:b9:d6:b9:18:f2:e8:95:70:e9:a1:b1:80:
a3:b6:6d:94:43:5f:14:c5:52:7e:36:97:32:95:f6:57:87:36:
b8:88:d4:80:be:60:76:43:26:b3:9c:08:ea:51:af:5e:94:02:
55:0e:1e:8d:df:63:66:0c:64:71:a9:db:76:70:58:6a:d6:da:
78:e4:6f:3f:2b:fd:22:c9:26:ad:b1:72:32:3d:57:a0:39:59:
2d:8e:96:77:24:6b:f1:42:fe:a1:dd:00:93:75:16:16:9f:a8:
89:15:e4:b6:53:e7:bd:99:1c:d0:6d:40:0e:b0:77:be:0f:ca:
98:ed:5c:c1:c7:ff:1c:25:f7:4e:59:ea:05:ad:39:63:d4:66:
93:d3:84:4b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0qBKya39CY1d081V5iO8eNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzIzNzA2ZDBlODM3NThiYTUyMTM4ZTlkYjQyMDdiNWE1
YzE4OWMwHhcNMjYwMzI2MTIwMDQyWhcNMjYwMzI3MTIwMDQyWjAzMTEwLwYDVQQD
Eyg2N2VmNWM2OGNlYzVlMThhYzQxZjVhMWIwNjlmZjllNjA0MDg2NGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T8sYGsbvNR0ZF5myARws+HYCcYH
jPaoEyDcl5/OZ9VkHCgMHlsQsv1ptJSWbUYJByWdCkvmL0iLnhay63rxQ3OEghnE
AZVLt7WOi7+dblWH/+uSaxojzEezf9GSlI/Itm5TGuI2jqGQcUHqMvyIczCGO7jh
OV+W1mj7VXQ3xzhJSEmYFq4ZeUTJSWIk0T7KHiW2yoCCTjbaV9uO/GD+zlHhC2hu
Pj9FsV/uPlt7kc3aAaS5uZ4NkuCDpfRxkApKrUOpt8Pr3XSZ5fFLaKgQUFp5N01N
vG55h4kX/RqeFCCKk05ezYTaexhMGXxoF3anaJGB2eDNGhBmc03DcRiKWQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGfvXGjOxeGKxB9aGwaf+eYECGSlMB8GA1UdIwQY
MBaAFPtyNwbQ6DdYulITjp20IHtaXBicMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zSTNCdERvTjFpNlVoT09uYlFnZTFwY0dKdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvY2ZhYzMxLTgzNTYtNDMyZC1hMzRk
LWI2MTQzNjExOTZmZC8xLzEtM0kzQnREb04xaTZVaE9PbmJRZ2UxcGNHSncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU5L2NmYWMzMS04MzU2LTQzMmQtYTM0ZC1iNjE0MzYxMTk2
ZmQvMS8xLTNJM0J0RG9OMWk2VWhPT25iUWdlMXBjR0p3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyBC
Y7ti2G1B2PiOTjoaQNB4Krpyuhdrs1DI1RcmkPOUbhnybGXBv9hylfHTVjnVHdrO
Dz5WFl4GlSHVw0iQ2SgO0REeITAbhVXDczIVXG03FdnDMcu5SKnqXv6bFhijylrk
2uTC7fYbfp4AHDvbBFbkuda5GPLolXDpobGAo7ZtlENfFMVSfjaXMpX2V4c2uIjU
gL5gdkMms5wI6lGvXpQCVQ4ejd9jZgxkcanbdnBYatbaeORvPyv9IskmrbFyMj1X
oDlZLY6WdyRr8UL+od0Ak3UWFp+oiRXktlPnvZkc0G1ADrB3vg/KmO1cwcf/HCX3
TlnqBa05Y9Rmk9OESw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:42:38 2026 by rpki-client