Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: MQt9wBoyf4hCrgreshi1fU33/CRLdJ99fy/h4xHE5vk=
Subject key identifier: FC:96:CC:B3:01:C5:55:A2:F7:74:4E:EE:2E:BF:74:72:D8:C4:07:29
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 019E1CB48033C83F83596437C28F01FFF174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 0EB2
Signing time: Tue 12 May 2026 15:00:51 +0000
Manifest this update: Tue 12 May 2026 15:00:51 +0000
Manifest next update: Wed 13 May 2026 15:00:51 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: Hg2/Kql4fNMTcoWMTE8cNybvNz7g8aDRq6rOwZHnmIM=)
2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:80:33:c8:3f:83:59:64:37:c2:8f:01:ff:f1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: May 12 15:00:51 2026 GMT
Not After : May 13 15:00:51 2026 GMT
Subject: CN=fc96ccb301c555a2f7744eee2ebf7472d8c40729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:5c:4b:0f:ab:07:ab:05:89:20:85:47:bf:
d1:6a:83:40:a5:36:0e:6d:a5:98:ef:56:b0:5c:c8:
5d:4c:c2:b9:98:62:f1:69:71:31:ac:72:82:4d:f3:
78:a9:96:3c:0c:36:df:d7:75:4b:47:26:f1:83:d6:
73:8d:9e:5f:a6:66:56:38:5b:a7:4f:4a:c9:f7:fc:
43:0a:60:3f:f9:57:4d:ce:61:fa:41:a2:7b:a3:97:
b3:44:78:e7:2b:7e:86:b7:29:8b:ee:6e:2e:14:68:
2e:2f:fa:51:98:4a:28:df:20:6f:c8:a2:a1:36:34:
25:14:9d:9a:bc:fd:82:6e:e6:9d:64:07:e6:00:ef:
06:0b:9e:54:38:2e:ad:95:a5:39:23:8c:36:4f:fe:
e4:27:e0:16:dd:1e:de:a7:d1:b1:fe:41:5a:24:0e:
1b:a0:ec:8c:f6:f8:af:57:e0:df:be:9e:d7:e2:69:
c3:08:fa:41:1f:06:cb:5b:df:6a:39:17:f6:e1:54:
ac:d1:e3:7d:5b:7d:4f:30:a4:6e:5f:28:02:3e:e3:
87:e7:7a:a1:db:2f:be:ce:15:bb:fa:a0:d3:4f:69:
3b:22:a7:f4:04:76:7e:fe:58:2d:ab:b7:f9:28:87:
75:85:57:24:b5:47:83:20:99:d8:9f:5e:9b:6f:56:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:96:CC:B3:01:C5:55:A2:F7:74:4E:EE:2E:BF:74:72:D8:C4:07:29
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:77:e1:19:1c:f6:c2:ed:05:24:61:0e:8e:78:9b:3d:b2:48:
fc:96:80:9f:2b:43:fb:1c:8e:6b:36:7f:1d:57:b2:43:1f:ee:
66:77:2c:35:1d:1b:c8:41:a7:4b:bb:10:18:fe:b0:9e:86:6a:
aa:44:31:aa:31:9f:20:da:5c:b7:4c:d0:00:0e:63:35:65:b8:
c6:f4:54:0b:a5:02:9d:63:a0:c3:b1:da:f9:a8:41:68:b7:b4:
3c:4e:27:83:92:43:61:eb:35:c2:29:10:c4:fb:8e:54:de:27:
cd:b3:f3:d9:2d:3f:10:59:ab:f1:c0:ab:dc:8f:aa:38:51:2f:
51:4a:a5:18:25:58:49:32:c0:d9:8b:3a:1b:d1:48:0a:5c:39:
f0:64:9b:92:97:62:b5:d2:ac:ba:e3:71:36:ee:5c:d6:5e:02:
ba:47:48:55:b5:06:e3:c1:ae:41:c6:03:2d:a4:d4:ae:c9:90:
31:5a:ab:d1:61:9f:76:0c:db:9f:51:64:9b:a4:4f:81:07:e8:
9c:5d:04:65:9d:17:9f:31:01:cd:1f:5c:08:9e:b8:33:4b:05:
5b:5f:08:ae:48:07:4d:ce:4b:61:39:c2:56:84:dc:1f:8d:64:
aa:63:c3:a3:92:5e:6b:ef:65:b6:61:92:eb:84:e5:cb:84:06:
d0:67:7a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:53 2026 by rpki-client