Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
File: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft (raw, json)
Hash identifier: kNHb33xer+/Z7bxGkNmw5dO5AcdzWuUdfKPLde5ESbw=
Subject key identifier: 30:9A:04:A8:4A:E7:0D:73:95:38:47:8F:B2:5A:1B:14:9D:BB:1D:72
Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
Certificate issuer: /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Certificate serial: 019D28F32B58C76CD6D3A39D8D4B14BFB072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
Manifest number: 12D3
Signing time: Thu 26 Mar 2026 07:01:58 +0000
Manifest this update: Thu 26 Mar 2026 07:01:58 +0000
Manifest next update: Fri 27 Mar 2026 07:01:58 +0000
Files and hashes: 1: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl (hash: lLvibUP0ASpvTTPYxq9afOA9170F3kmFkPz/YDfij0s=)
2: 3WjchZn0ZaVWap-kBJDqG0_K268.roa (hash: mSek/wANUBuae6L6B5/5kvCQ+lsoN15OARfOIY4PvDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:2b:58:c7:6c:d6:d3:a3:9d:8d:4b:14:bf:b0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Validity
Not Before: Mar 26 07:01:58 2026 GMT
Not After : Mar 27 07:01:58 2026 GMT
Subject: CN=309a04a84ae70d739538478fb25a1b149dbb1d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:7f:8c:21:93:1d:8d:bf:a8:36:2d:18:35:
fe:76:2b:48:ce:19:b4:81:2f:2c:04:a8:52:05:8e:
1c:98:5a:9a:01:c3:1a:5e:f7:da:a3:45:1a:28:b6:
14:af:36:9f:d3:4f:92:80:89:45:63:80:0a:72:2d:
f1:52:cc:ae:fa:48:9f:be:20:68:03:b1:ea:d4:ed:
10:da:20:a2:14:bc:41:76:ae:df:ca:80:f4:2c:79:
fe:fe:15:47:0e:66:e5:c7:df:8c:3d:90:47:d0:8b:
b0:83:c7:60:1c:02:b6:53:3d:d9:24:eb:85:04:53:
5d:b1:db:16:03:e7:1f:72:ff:09:4c:cb:f2:88:10:
16:08:f5:30:0f:ac:71:43:a5:50:03:ed:93:24:12:
ce:39:59:28:45:b2:40:af:32:b9:55:4c:03:40:99:
fd:89:cc:7d:60:d9:af:48:16:7a:4d:38:dc:ed:5f:
d2:5c:0b:2a:17:6a:f6:98:86:e5:96:34:0b:e0:dc:
ae:df:e6:2f:a9:c6:a9:56:f9:4b:9a:05:3a:f5:4a:
c6:c1:30:d2:50:9a:9d:79:4e:e7:5c:17:3b:5c:a1:
7f:bf:42:96:c4:c3:d8:88:5f:10:64:30:ab:7a:34:
70:76:74:e5:67:51:7d:27:49:35:df:4c:58:b1:d2:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9A:04:A8:4A:E7:0D:73:95:38:47:8F:B2:5A:1B:14:9D:BB:1D:72
X509v3 Authority Key Identifier:
keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bd:43:a2:41:6d:3b:d0:1d:34:34:3d:f0:83:6a:af:e8:b8:
94:de:62:db:a1:18:73:02:5f:3d:c2:75:80:23:e3:ae:49:45:
5e:31:37:96:6f:fe:bc:3a:f9:86:b7:df:5f:9b:bb:a9:9e:6c:
b3:42:78:0b:f2:8e:07:a5:fe:5d:e4:ed:7e:3d:1e:d1:a5:53:
d5:22:49:b2:8a:84:4c:45:1c:7f:6f:ab:d7:5e:09:4b:72:64:
98:07:82:34:14:5e:0c:f1:9d:b8:c6:78:9a:06:ca:49:9a:bf:
fc:e2:83:70:b0:57:d0:89:b4:5a:83:e1:0f:9a:b1:fe:3c:a2:
cf:bf:b1:f1:df:0f:26:ef:3e:43:e6:10:48:ef:cb:9a:7c:12:
db:1a:11:6c:ec:6f:9c:c2:64:4e:a4:5e:d3:6d:b0:86:a4:7f:
08:24:e8:5e:27:85:d2:f9:d1:6e:2e:cf:d5:5b:3b:94:63:a9:
b7:22:25:e3:f0:6c:5f:c6:af:d6:a1:21:8e:31:36:22:c2:35:
91:a4:d5:25:bd:5f:74:11:8b:ab:91:9b:14:2f:de:28:21:db:
ec:cd:a3:40:89:92:54:b1:36:08:51:f4:c0:57:3c:42:14:92:
fb:4d:48:8d:a0:fe:cd:75:d1:b4:bf:96:2f:a1:49:67:27:9b:
31:48:96:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:57 2026 by rpki-client