Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: 2GVtC32BtOILLfl4gumKVpm30JvyoKn1FQt3EgAxKlE=
Subject key identifier: 97:8C:11:E7:77:DF:DB:BF:F6:B7:2C:9F:51:12:4D:A8:C2:BB:19:77
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 019F916D9A588E63234251A56B79855901EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 0F73
Signing time: Fri 24 Jul 2026 00:01:46 +0000
Manifest this update: Fri 24 Jul 2026 00:01:46 +0000
Manifest next update: Sat 25 Jul 2026 00:01:46 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: 2f8wowiav93SxFqvfZLBpicGjNVy0Fvi0Oi8aWtnZ6w=)
2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:9a:58:8e:63:23:42:51:a5:6b:79:85:59:01:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Jul 24 00:01:46 2026 GMT
Not After : Jul 25 00:01:46 2026 GMT
Subject: CN=978c11e777dfdbbff6b72c9f51124da8c2bb1977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:5e:2c:5e:14:11:ee:21:e1:2e:17:f8:2b:
0b:0b:7c:6c:09:bd:4b:37:d8:11:1d:e2:55:2e:36:
c2:97:a4:7e:fb:01:59:1c:ce:0e:6c:76:0e:0c:39:
d2:d9:44:da:cc:c3:d6:c2:e9:ba:fb:ac:58:b2:1c:
6c:d8:c1:60:69:f6:20:66:23:88:34:54:48:20:bd:
45:93:76:27:a1:2b:3a:2a:2b:7a:b8:b4:5a:a2:c7:
3b:50:1a:e6:3d:4b:57:f8:4a:b0:2d:27:54:fb:e8:
fd:de:65:f0:5d:bc:e6:97:8b:c5:da:17:4a:57:97:
87:44:52:51:60:2e:96:3e:24:ee:85:d6:52:a9:85:
d4:70:df:83:cc:aa:1f:e4:bc:16:63:d2:12:ef:b7:
f0:b6:a2:40:f1:a9:ca:23:aa:e1:03:21:6c:1b:ea:
65:f8:11:c1:c4:bc:6f:15:ee:88:97:28:e8:39:8e:
d7:51:06:ab:fa:ed:f4:00:51:91:16:e7:b8:c5:2a:
84:7c:ca:a0:54:02:35:19:0c:38:d9:60:87:21:dd:
4e:82:60:9a:2b:55:db:a5:c5:65:9a:2f:97:93:e7:
eb:03:f8:b3:18:c6:a0:f9:ff:6b:cf:82:43:ce:c8:
98:a9:1f:8a:1b:63:50:68:88:ec:0f:b5:29:fe:57:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:11:E7:77:DF:DB:BF:F6:B7:2C:9F:51:12:4D:A8:C2:BB:19:77
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e0:83:5e:64:47:81:a0:6b:4a:b2:0a:21:e9:ed:54:24:26:
24:09:34:ca:ec:62:6b:21:e9:3d:13:ed:e7:68:9f:86:bc:e2:
11:b6:1b:34:71:e0:5b:3b:3b:90:c0:49:8f:5f:22:40:8e:d4:
da:a5:3d:1c:07:f3:91:d9:f3:66:7a:35:7e:7c:35:5d:70:db:
04:b3:a8:44:ed:76:f2:31:ac:fa:1a:f3:cc:2c:62:0f:70:5c:
29:20:d0:0c:17:e6:6d:86:ea:9a:52:42:f1:11:73:e4:8b:04:
a1:70:57:d2:f0:75:17:d0:1d:bf:7b:2e:51:5e:51:da:63:af:
32:ca:a4:6d:74:70:3e:ad:02:f2:b3:76:25:d7:65:4c:71:e8:
18:3f:b6:08:9a:89:c0:48:27:a9:75:f8:b5:d2:45:10:bf:dd:
a5:f5:8b:a6:c7:78:d9:b9:3a:34:a0:83:a0:3d:aa:2b:6e:f4:
7d:30:c4:fe:3e:57:db:31:40:be:23:b8:2d:13:31:ae:d9:2c:
fe:19:50:81:2a:50:29:ea:45:9c:0c:d8:5d:47:e8:01:a8:d0:
0c:81:f1:da:16:b6:74:c5:94:da:13:b7:11:e1:c2:78:9e:b4:
a3:5f:44:25:b2:3f:46:ec:bf:59:06:76:73:d2:39:8d:60:93:
2d:ba:bb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:25 2026 by rpki-client