Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
File: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft (raw, json)
Hash identifier: w8xi121+9TnWevq2I4ic2RAuWkd6hFJLFzhClaWEFTo=
Subject key identifier: CB:FD:A7:89:CC:A3:E3:13:27:7E:1C:81:FC:95:48:8E:54:94:34:BC
Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
Certificate issuer: /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Certificate serial: 019E1E356521365217224E02730723F9A410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
Manifest number: 1352
Signing time: Tue 12 May 2026 22:01:16 +0000
Manifest this update: Tue 12 May 2026 22:01:16 +0000
Manifest next update: Wed 13 May 2026 22:01:16 +0000
Files and hashes: 1: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl (hash: UnupFtbtHxNR8BcwXfmSDtu/rvwEd/dB63RRCXs41Yg=)
2: 3WjchZn0ZaVWap-kBJDqG0_K268.roa (hash: mSek/wANUBuae6L6B5/5kvCQ+lsoN15OARfOIY4PvDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:65:21:36:52:17:22:4e:02:73:07:23:f9:a4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Validity
Not Before: May 12 22:01:16 2026 GMT
Not After : May 13 22:01:16 2026 GMT
Subject: CN=cbfda789cca3e313277e1c81fc95488e549434bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:f6:36:97:b1:49:0a:fe:45:ea:c9:7c:7e:
8e:f0:b0:10:9c:1d:56:a6:3d:b6:71:86:c0:72:ab:
c0:f3:3c:94:4e:be:27:20:bc:0a:ec:d5:20:9a:e6:
c3:5c:95:b9:e2:26:2d:72:c6:21:cb:87:bf:1d:7b:
26:d9:2f:35:18:fc:fa:42:b9:1e:9b:dc:67:35:bf:
27:74:18:4c:a0:b9:05:92:9a:b5:d1:d2:27:23:41:
36:61:86:dd:29:81:05:fb:60:85:80:9d:7d:41:ab:
6f:03:24:6c:2b:2c:08:64:71:46:74:1c:cd:19:ef:
05:99:84:da:41:70:24:06:d1:70:a7:44:a7:36:d8:
6e:79:f0:3b:b2:50:a4:74:58:c8:4b:27:af:82:5e:
d9:5c:d9:5e:16:67:3f:b6:7a:86:cc:5f:a6:b0:e7:
df:07:7e:92:18:54:f4:f4:92:db:41:bd:6d:3a:4c:
6e:77:11:0e:1e:63:e6:6c:91:a1:48:af:cc:f5:78:
df:6c:44:7d:6f:11:21:01:11:02:4b:68:6c:90:9e:
44:8d:69:96:0e:07:10:7c:18:3a:58:01:89:0b:b4:
a3:2f:32:3b:d6:58:5f:02:7b:0e:4b:9b:0f:aa:ca:
1d:70:43:a2:7c:4a:ed:48:59:d1:1c:46:25:b5:af:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FD:A7:89:CC:A3:E3:13:27:7E:1C:81:FC:95:48:8E:54:94:34:BC
X509v3 Authority Key Identifier:
keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6d:d9:8b:d0:ac:e3:d4:d3:75:da:f7:af:b0:2a:1e:73:45:
c4:12:20:d7:2a:fa:4c:20:61:c1:98:79:43:4e:05:4b:1e:b4:
cd:63:dd:d3:13:85:65:09:70:42:56:fa:11:73:59:8d:0d:c1:
a9:dc:59:46:33:30:cf:fd:81:e9:a8:d0:49:f8:c9:b5:aa:c3:
c0:6f:74:72:38:eb:0e:14:59:23:a5:3f:2a:44:02:e3:54:8c:
dd:e1:1b:4e:07:40:d5:5c:ea:15:d9:5e:e0:1d:b3:0d:e5:d3:
d9:74:68:69:3a:33:f8:d9:49:50:61:10:3a:35:29:52:d3:76:
20:5e:ba:23:7a:a4:f3:97:45:b4:8a:fd:3b:b4:22:9c:bb:69:
1c:12:f1:7d:07:5b:ed:fe:b0:29:54:9b:51:ae:21:f3:7d:b5:
14:a7:e9:7e:71:bc:cb:63:e2:a4:8f:74:7e:0c:82:27:b6:00:
84:cc:5b:c8:21:4c:d9:d0:ef:a2:b0:c9:c3:97:97:c8:59:c4:
79:ac:e5:9e:5a:ee:37:16:66:b7:6a:7f:4c:96:ec:c5:6e:bd:
b1:c6:4e:ee:88:04:f8:f6:dd:5f:2a:80:72:31:84:d1:93:cd:
8f:3b:7e:ad:91:39:e1:3c:35:30:d2:f6:97:e0:d9:42:28:a9:
2d:c4:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:10 2026 by rpki-client