Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: mUbiJiRQ5HEwsxt28reXmXpJ9ztpWWdXVHNi9Wbb7ks=
Subject key identifier: B2:90:66:E3:F7:87:7B:04:BD:11:C9:D4:34:BC:83:EC:BA:9E:D4:10
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 01A0D011B6BD6E01EC8733198BE9402ACAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 1018
Signing time: Wed 23 Sep 2026 21:00:16 +0000
Manifest this update: Wed 23 Sep 2026 21:00:16 +0000
Manifest next update: Thu 24 Sep 2026 21:00:16 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: FCT5YHGt+zvMgewBD8XUjcWbCo3tfVcDvC9pc+p3+vM=)
2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:b6:bd:6e:01:ec:87:33:19:8b:e9:40:2a:ca:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Sep 23 21:00:16 2026 GMT
Not After : Sep 24 21:00:16 2026 GMT
Subject: CN=b29066e3f7877b04bd11c9d434bc83ecba9ed410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:ce:14:56:24:c6:ae:4d:4e:0b:9c:5b:81:
a5:ce:3e:3c:ad:6e:73:af:3f:88:d3:fc:4a:68:24:
63:a5:90:3b:d9:ce:b8:d6:a5:5f:38:6d:c4:60:d5:
f8:9c:ff:f0:c9:57:6c:d9:02:0a:d6:d7:4c:f9:25:
43:24:d8:4e:9f:ec:36:73:42:d9:15:70:9e:82:7c:
4a:dc:65:c7:81:ba:96:80:eb:aa:43:7c:f5:e6:d4:
ed:59:98:0c:16:78:69:78:f5:12:05:8a:8a:8a:15:
a8:69:d9:33:8d:70:44:cb:8c:72:a8:a2:6e:91:5f:
c6:9e:66:09:38:09:ca:20:a0:db:eb:50:23:41:21:
97:74:4d:a1:89:d2:c3:7e:fa:1a:50:1b:65:c4:c1:
37:d5:60:db:16:66:3a:34:8b:5e:9d:08:1c:df:03:
4f:74:b9:3d:93:26:98:e8:ef:42:07:8a:b2:a9:82:
7b:e2:27:eb:97:b8:e4:12:fc:f1:b6:bf:0f:0f:2e:
d4:29:59:8f:81:e9:a8:b5:6a:f8:af:26:77:97:1b:
51:07:09:c6:df:47:ca:c8:9c:65:52:78:89:9e:11:
77:c1:f1:35:41:ba:57:6e:b1:d9:20:e1:6e:06:32:
81:ee:d9:75:95:c6:a8:0c:25:70:ae:93:89:ce:82:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:90:66:E3:F7:87:7B:04:BD:11:C9:D4:34:BC:83:EC:BA:9E:D4:10
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d6:8a:9a:92:d4:a6:67:90:7b:93:55:03:0b:ff:1a:00:58:
0b:8a:ff:04:44:0a:48:a8:78:c0:4a:25:83:0a:f5:b8:0c:5e:
4b:71:41:df:ab:31:e5:f2:57:74:0c:b5:f9:c0:fb:f1:98:6c:
d1:b2:29:18:c8:59:af:c2:a5:df:62:1a:4e:9b:75:05:e3:3d:
1f:be:05:07:f9:68:bc:1a:b8:8d:92:78:39:36:b1:61:0e:ee:
a6:ef:be:83:27:48:86:b2:7f:13:ae:7b:70:b0:f7:3f:2f:38:
1d:c1:bd:b4:91:24:78:43:36:b8:05:4d:e5:88:91:9f:5e:9c:
fb:40:d3:1a:69:6c:3a:77:9a:99:ed:2e:46:ec:e8:50:0c:e3:
b1:0b:a0:72:ac:ce:9c:16:5e:8d:62:63:55:eb:88:88:ca:21:
53:8a:04:9f:45:83:c5:3f:45:84:ad:ef:8b:3d:ac:7e:0d:e7:
1b:29:34:3e:ef:48:fb:48:f4:3f:93:c5:af:e6:a6:3a:f0:9d:
b2:75:83:ad:d8:4d:3f:c1:d1:f3:3d:17:04:5b:f9:6e:45:98:
60:59:bc:15:0f:68:46:bc:86:2f:e2:e2:d0:66:8a:2f:be:84:
2f:fb:01:40:3d:8d:98:f6:7c:4a:a7:f1:41:87:8b:8a:2f:32:
ea:9f:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:43:29 2026 by rpki-client