Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
File: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft (raw, json)
Hash identifier: Truon+nnO4w9zmSoTjcmJVVKThIZHOBuOrVgtiTyipk=
Subject key identifier: F2:6C:D2:A9:49:96:48:56:70:10:81:00:A7:91:32:AD:38:F8:C0:72
Authority key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
Certificate issuer: /CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Certificate serial: 01A1DEA7B9359A02E80AC57F41578CE18E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
Manifest number: 039D
Signing time: Sun 15 Nov 2026 10:01:36 +0000
Manifest this update: Sun 15 Nov 2026 10:01:36 +0000
Manifest next update: Mon 16 Nov 2026 10:01:36 +0000
Files and hashes: 1: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl (hash: Uj1dzDblGNXGVzVT/ESBB9Rpj9AMgkFAMXtQhyVeh6Y=)
2: WpzJEd65jg1k9FCh0sQW8umMMfA.roa (hash: PuNyfpISewPH4mNqXsD+xLFU8GYwjzfSIZCXja26VFo=)
3: ccdFrTh3VHUoyOT1nnX0rj2puX8.roa (hash: pTRpbV+9+EAGdM0aQTffw7AYRR2qz6vM+MiP328gvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:b9:35:9a:02:e8:0a:c5:7f:41:57:8c:e1:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Validity
Not Before: Nov 15 10:01:36 2026 GMT
Not After : Nov 16 10:01:36 2026 GMT
Subject: CN=f26cd2a94996485670108100a79132ad38f8c072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:25:53:de:d4:e4:05:33:63:40:39:cc:3c:
f0:8a:55:f3:13:c9:6d:17:7c:57:14:50:8f:13:40:
f0:83:f9:a5:07:4f:7f:5f:32:d0:ce:80:b4:c8:c2:
c5:56:bf:b9:7c:89:63:e2:2e:10:17:a5:41:37:ef:
ac:5b:73:8c:51:ce:23:51:4a:33:bd:52:42:a1:41:
42:6d:32:15:90:0f:6c:d5:f3:ac:08:19:0e:3f:b5:
47:0f:2b:a1:6d:f9:73:a0:42:7e:33:6d:c9:b0:a1:
3c:c7:4a:eb:a2:56:fa:7e:20:06:5d:db:c2:48:12:
84:39:13:f3:68:05:2b:fe:c3:93:db:74:e0:d6:df:
fc:f2:2a:6e:c3:24:0f:ea:ed:25:a2:7e:c0:fb:d9:
47:d0:bd:55:b9:98:f8:08:12:cd:04:b9:c3:53:0b:
6a:80:27:ed:1c:00:d1:9e:34:0b:91:49:08:b8:e3:
ab:fd:6b:c9:07:ce:7a:cf:3e:a0:98:6c:2a:ee:92:
71:84:2a:eb:a4:9f:47:a0:5c:db:5c:11:b3:09:1e:
5f:c3:6d:15:81:b6:94:75:fc:a0:cb:6f:9d:fe:cc:
68:59:81:09:34:69:e4:71:88:68:be:5a:57:49:a2:
38:39:f3:02:e6:5e:f1:80:e7:c5:ce:6e:eb:1d:58:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:D2:A9:49:96:48:56:70:10:81:00:A7:91:32:AD:38:F8:C0:72
X509v3 Authority Key Identifier:
keyid:FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:41:a5:e2:ed:01:e6:5d:b9:71:b0:17:20:00:ec:b3:27:38:
42:e0:8d:b3:ab:1c:ce:fb:41:46:6a:a9:86:31:dd:28:de:1c:
6c:f1:c1:b1:91:29:09:af:f3:68:ae:2c:ea:db:62:8e:de:e2:
ca:da:b9:e1:1c:f4:3c:3b:dd:83:c6:4e:59:08:a6:70:56:12:
2c:af:ba:43:f7:47:03:9c:d3:24:d8:9b:a7:0b:65:32:32:e0:
a1:56:11:77:69:36:81:cc:95:ff:3d:25:12:f1:e9:a2:74:86:
bf:fc:e3:6f:7c:eb:98:f2:1c:eb:f8:8c:17:bb:f2:c7:0a:65:
49:71:8e:a6:1e:91:93:eb:2e:52:b9:aa:24:8a:92:11:e6:6b:
a4:1f:6c:fd:69:da:40:a7:59:1b:d2:eb:01:d0:4e:bc:fd:e6:
72:6f:1f:25:b6:ef:2a:33:4e:71:65:59:da:30:7d:e3:27:ad:
d7:5e:1b:ef:8b:7b:9c:64:26:85:05:0a:9e:91:6d:0f:35:06:
55:3c:04:0f:98:93:b8:2a:0d:57:9e:d2:f2:91:9f:23:67:95:
c0:f2:70:a2:0b:fe:e2:b0:fe:1b:05:09:ce:75:90:a2:c4:93:
50:0f:ca:83:7c:0a:a2:8c:91:2d:f4:65:c8:1d:79:d4:cf:88:
b4:f0:bf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:30:11 2026 by rpki-client