Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: lyBa5VXyU3XwV1xs5NsWMy/V5i6b/2vsxxrJoG7+B5k=
Subject key identifier: 92:07:08:B6:DE:D2:A3:D8:AB:FE:E5:B7:6A:E2:4B:F9:57:67:7E:0A
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 019D27721CC7C5A2AE900437E620403FFF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 0E33
Signing time: Thu 26 Mar 2026 00:01:23 +0000
Manifest this update: Thu 26 Mar 2026 00:01:23 +0000
Manifest next update: Fri 27 Mar 2026 00:01:23 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: Kx3AoMSW447VFu7r9I9i5w1lkQk7kzbiKRh4fukK/TY=)
2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:1c:c7:c5:a2:ae:90:04:37:e6:20:40:3f:ff:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Mar 26 00:01:23 2026 GMT
Not After : Mar 27 00:01:23 2026 GMT
Subject: CN=920708b6ded2a3d8abfee5b76ae24bf957677e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:f4:e8:54:dc:98:bf:6b:bf:ac:6d:b8:d2:
7b:14:92:f9:80:db:fd:f8:0c:4f:e5:81:be:56:11:
0d:2b:3d:15:ef:d4:b8:f9:df:ce:de:5e:46:6f:24:
f0:d1:df:2a:45:3b:27:49:84:ed:d0:57:4c:37:07:
b0:f7:cd:a8:02:2b:4d:67:e7:13:3c:a1:94:0f:d6:
6f:f2:82:e7:2e:6c:c7:c5:f1:a1:d9:a3:ab:2f:d2:
73:5b:b3:60:39:5b:19:da:d0:cf:e5:fd:b8:27:03:
60:d7:56:8e:1c:4e:10:ba:2a:12:45:25:b4:d4:57:
2e:89:65:b1:39:36:a8:c7:97:5a:a7:b8:09:4a:ca:
88:15:35:69:da:8f:be:4d:56:01:64:1e:5b:e9:52:
14:9f:23:3a:05:ee:d5:81:e8:3d:cb:03:4b:66:20:
72:6b:db:b9:a6:fd:91:f7:0c:fb:66:54:3e:fc:11:
df:24:4e:63:82:0a:0c:1d:83:f5:12:4b:85:1b:d3:
ed:9a:86:da:c8:f0:4f:f6:ea:41:4e:90:e9:67:9f:
8f:1f:c9:e5:a8:3c:ad:3d:1d:6e:31:c8:81:53:1b:
b6:ae:00:aa:15:14:41:f0:dd:0a:3c:a0:83:ba:98:
ec:f7:d6:f3:05:af:1a:97:51:33:d4:9e:e0:ca:ad:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:07:08:B6:DE:D2:A3:D8:AB:FE:E5:B7:6A:E2:4B:F9:57:67:7E:0A
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:63:1e:cf:b0:a9:24:60:66:b1:86:08:f7:8a:71:eb:ef:e6:
f6:11:82:5c:4c:14:b4:99:7d:25:13:10:3b:14:c5:16:0c:7f:
3c:87:2a:46:71:6d:d9:ee:2a:50:bc:72:13:26:c8:84:6f:63:
80:25:8e:8c:c2:f5:c2:45:9d:0f:96:00:35:1c:57:7d:3f:22:
87:a1:08:2c:25:bb:c9:40:c5:35:89:33:37:9a:e6:b5:e2:01:
99:c5:be:25:eb:a9:ba:1a:87:db:28:17:38:f0:1a:c0:ee:79:
54:7c:04:1c:4e:0b:b7:21:b6:ee:9d:e5:68:1a:4f:01:d1:29:
62:c5:61:74:f5:68:f1:c7:40:50:89:06:c2:8d:41:5e:20:e6:
80:76:d0:54:3e:9f:50:95:bc:5d:09:62:e9:bd:b5:95:25:34:
90:32:66:a4:f4:a9:38:bd:78:fc:2e:b1:e2:67:09:20:b8:f2:
77:9d:f7:2b:ac:21:73:98:10:89:0e:d2:0a:fd:a2:24:46:17:
19:28:cd:51:69:c0:a0:a3:5d:65:b0:2b:a4:64:4c:6a:22:0a:
24:50:ce:58:c5:a1:ce:f5:d3:68:b8:25:48:fa:3d:e2:3b:b4:
58:e4:5a:e4:0c:ba:31:e0:84:6f:a7:3c:d6:f6:db:b7:59:f2:
06:d2:2f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:35 2026 by rpki-client