Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
File: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft (raw, json)
Hash identifier: go8UWARjYDvK3AB6KprpVOiyygG8w8283CmFpfDOsl8=
Subject key identifier: C3:64:D1:BE:29:33:0A:2C:DF:EA:28:7A:77:CD:89:5C:CE:79:96:F6
Authority key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
Certificate issuer: /CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Certificate serial: 019D2996D980B2634EADBDD99B8F7831BA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
Manifest number: 012D
Signing time: Thu 26 Mar 2026 10:00:45 +0000
Manifest this update: Thu 26 Mar 2026 10:00:45 +0000
Manifest next update: Fri 27 Mar 2026 10:00:45 +0000
Files and hashes: 1: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl (hash: GvSZ2tCOqcdjiCZOq7/kGX02TENFfZGG5go44azsamg=)
2: WpzJEd65jg1k9FCh0sQW8umMMfA.roa (hash: PuNyfpISewPH4mNqXsD+xLFU8GYwjzfSIZCXja26VFo=)
3: ccdFrTh3VHUoyOT1nnX0rj2puX8.roa (hash: pTRpbV+9+EAGdM0aQTffw7AYRR2qz6vM+MiP328gvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d9:80:b2:63:4e:ad:bd:d9:9b:8f:78:31:ba:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Validity
Not Before: Mar 26 10:00:45 2026 GMT
Not After : Mar 27 10:00:45 2026 GMT
Subject: CN=c364d1be29330a2cdfea287a77cd895cce7996f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a3:6d:22:89:67:b4:e0:38:d5:a2:0e:12:ce:
61:c0:bf:43:bf:33:55:73:a2:24:a4:88:1d:b6:72:
5a:a1:ca:f2:68:81:ab:6c:d2:81:5e:80:c8:80:6d:
cc:34:a9:53:a5:0b:51:c2:a4:a5:49:69:07:63:18:
41:1f:d4:d2:c8:6d:e2:ba:af:db:95:a5:72:96:24:
d5:b0:bb:09:40:e2:12:21:51:bd:28:43:b6:e8:54:
6f:5c:b9:b2:0e:15:e0:eb:10:52:49:d5:75:39:13:
05:b2:48:0c:15:32:d5:ff:78:01:9c:9a:8e:42:74:
b4:0e:93:d3:21:f3:17:91:57:62:c8:88:ee:f5:bd:
58:48:ea:80:a7:80:1e:1b:ff:e2:95:4a:52:22:4d:
82:9c:8c:ab:6d:1a:aa:f3:c6:98:91:ee:70:f7:c6:
4f:32:23:4d:5b:6d:9c:0c:f3:ea:29:41:9f:a9:54:
c2:b2:a1:43:1f:5e:71:43:78:33:c3:a7:b3:3a:f4:
70:9f:5e:db:16:81:f0:4c:b9:86:7b:94:37:62:b5:
19:7b:1b:b2:4d:8d:33:19:a2:ff:2c:ec:73:0d:08:
37:50:30:fd:1e:5e:d8:1e:0c:c3:9e:0b:5e:0b:15:
d0:de:66:e0:7c:59:f8:59:c2:6d:6d:b1:36:48:b2:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:64:D1:BE:29:33:0A:2C:DF:EA:28:7A:77:CD:89:5C:CE:79:96:F6
X509v3 Authority Key Identifier:
keyid:FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:25:f8:09:b3:c6:9a:d1:bf:ca:02:12:ee:8b:61:5e:46:dc:
ed:85:39:2c:d2:55:02:c3:d7:fd:d6:58:0a:1a:d2:78:27:77:
81:40:36:56:88:d7:f7:b0:43:63:e7:65:d9:68:41:77:3d:05:
e6:dd:34:07:99:99:46:72:1e:a7:47:f4:f2:42:df:36:5b:96:
07:19:e7:6d:c2:8d:04:f6:4e:37:bd:7f:04:50:0d:1d:3e:30:
aa:48:75:14:0c:3d:b7:b8:1b:a9:72:1d:73:8d:3d:f6:37:ab:
de:d4:e8:2b:2d:eb:76:76:5c:62:45:8a:de:fc:6e:53:54:c4:
93:c1:df:70:ae:49:14:a0:55:0d:50:7e:0c:f4:fb:6c:cd:cf:
de:c3:fe:b7:dd:36:fd:67:ed:f7:6a:f4:01:52:44:93:a3:e9:
99:b4:17:c2:77:0b:6d:7e:fb:1a:4c:81:9e:02:18:cd:41:3b:
8b:d9:b2:fc:e7:60:5e:3e:0d:5c:f6:33:ca:4c:bb:3c:c1:db:
bf:e3:f4:2c:52:ed:8b:6c:f6:7f:f3:db:a9:8b:c7:b4:23:25:
ba:10:08:96:60:b7:be:59:5c:e6:73:54:c4:0d:a2:51:3a:6d:
01:56:b6:8a:70:75:84:fa:a9:ac:5f:c9:63:50:f1:e8:0c:36:
c5:d7:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:57 2026 by rpki-client