Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: rnxF4eHPd4x51iLEV4kDR9Yn0Ns+tcwTVihaWRohb/c=
Subject key identifier: AC:FF:24:3F:61:D4:8A:2C:9C:17:55:EE:68:BB:1D:57:79:6E:84:71
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019E1D90A06B8C4D1B2F3A7EF2E7941F6D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 17AD
Signing time: Tue 12 May 2026 19:01:17 +0000
Manifest this update: Tue 12 May 2026 19:01:17 +0000
Manifest next update: Wed 13 May 2026 19:01:17 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: yh5Q8dlHUuLYSPuF/jo7+ZH208rwlAVVzBKNURCuMGQ=)
2: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (hash: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA=)
3: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (hash: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:a0:6b:8c:4d:1b:2f:3a:7e:f2:e7:94:1f:6d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: May 12 19:01:17 2026 GMT
Not After : May 13 19:01:17 2026 GMT
Subject: CN=acff243f61d48a2c9c1755ee68bb1d57796e8471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:89:fe:73:70:95:03:b2:28:ea:0b:14:75:
e5:4b:45:6b:a7:b5:30:03:26:f1:28:a5:c8:cc:ff:
b8:91:c8:d7:65:2c:2f:8d:8f:7f:72:7b:10:83:90:
c6:a4:ef:0c:4c:d2:cf:37:0e:3c:0d:27:b5:fa:5a:
ae:7d:26:6d:78:55:77:85:00:f0:d8:8c:c0:0a:f6:
c3:8a:22:1e:34:91:f6:db:ed:c1:f2:09:db:b4:e7:
e6:4c:29:41:1d:42:7e:15:37:88:30:3e:25:11:fb:
aa:a8:e0:f5:de:58:c1:25:9b:9e:90:8a:8d:f5:d1:
00:00:09:4a:92:a2:f2:e8:cc:2e:55:9f:ce:a8:09:
6a:cc:40:c7:ac:d8:7a:4b:fc:57:82:93:c2:5c:a8:
6e:93:4f:a0:ce:8a:36:5c:df:6e:6c:5a:fe:82:c4:
51:38:e0:73:f2:64:23:58:75:83:5c:cf:bd:c2:27:
b9:a5:d9:c7:75:28:88:f3:ca:fb:80:6c:46:1f:c8:
80:18:0c:b1:03:4b:31:9c:67:6a:78:fb:b2:89:82:
19:d4:f1:40:25:5d:ed:af:03:1e:eb:a1:e6:7e:ea:
91:92:4f:0f:b5:75:8b:6f:60:8e:04:27:32:df:20:
30:f9:4a:55:5f:e5:b7:18:6b:97:ff:89:ce:88:a4:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FF:24:3F:61:D4:8A:2C:9C:17:55:EE:68:BB:1D:57:79:6E:84:71
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6a:3e:b5:b2:92:ae:a2:72:61:39:98:56:af:49:7c:bb:c9:
85:4b:e6:35:be:e6:a2:37:4a:f2:cf:7d:c6:31:87:f2:ee:2a:
9e:b1:b9:1d:3b:c5:4f:67:43:3d:55:69:14:1d:6e:24:57:87:
8f:c6:d8:a6:98:89:23:ad:32:33:8f:30:e3:0a:64:d2:8f:5c:
23:8c:6e:13:ad:bf:53:3e:6f:21:5e:06:ed:10:41:11:33:13:
27:75:64:69:6c:c2:ef:60:ad:28:dd:6f:ae:c0:f9:3e:6d:06:
13:0f:76:aa:97:05:10:31:26:0c:e4:65:b3:1e:6f:6a:27:a3:
be:c9:75:40:26:37:00:9d:82:2b:a6:80:e5:21:36:71:75:69:
0e:20:3c:fe:84:15:2d:89:0e:f4:97:60:5c:9e:3a:21:28:25:
0d:55:3b:96:7b:20:c0:87:74:dd:90:e7:bb:46:13:67:5a:82:
d4:7b:14:2e:b6:d1:e5:e1:b5:61:e4:98:43:97:3b:ed:92:80:
86:8f:16:11:9b:bc:c0:b9:8c:cb:7d:19:4b:93:88:11:39:bd:
fa:63:88:ff:5a:81:bf:23:26:85:c2:11:fc:26:27:2d:1e:df:
27:77:17:99:68:39:8d:b3:42:15:e6:44:64:85:43:29:71:e2:
c1:8c:73:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:57 2026 by rpki-client