Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: BeI7IGEgOoNCBtwkXubU78uiwoPXkBau2Nf0N/2P72k=
Subject key identifier: 98:F5:88:E9:84:FB:C4:1E:46:6B:61:DB:A7:0D:FF:B1:54:E2:12:69
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019D284E26B6D8FC078AD8A49F7C0FC06AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 172E
Signing time: Thu 26 Mar 2026 04:01:43 +0000
Manifest this update: Thu 26 Mar 2026 04:01:43 +0000
Manifest next update: Fri 27 Mar 2026 04:01:43 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: hjEFxl2xwNT18A0ZNO7BHPy/cCdS/9abUmaqLFqQ2aA=)
2: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (hash: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA=)
3: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (hash: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:26:b6:d8:fc:07:8a:d8:a4:9f:7c:0f:c0:6a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Mar 26 04:01:43 2026 GMT
Not After : Mar 27 04:01:43 2026 GMT
Subject: CN=98f588e984fbc41e466b61dba70dffb154e21269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:70:21:9f:45:fd:c3:8f:69:05:43:03:00:b1:
3b:38:a0:ea:97:4d:e3:60:60:38:95:ce:a7:e2:db:
4f:36:9c:b2:a3:98:37:36:85:e1:7a:ba:34:cb:5b:
0c:ce:17:28:43:e5:09:ab:5c:fc:e1:46:cb:b6:4e:
7f:4c:38:2d:9c:20:16:1d:61:bb:20:fd:33:93:9c:
cd:29:df:6e:b4:2c:29:8c:17:62:12:75:f3:77:a5:
85:3a:97:a2:aa:7d:d3:27:e5:55:b0:7b:3d:76:a8:
c5:e7:59:f5:89:83:fe:67:c9:06:c3:13:82:fa:7b:
6a:5a:d4:7a:f0:91:15:4e:7a:65:b4:ae:96:54:6a:
90:e9:dc:3f:9a:6d:8d:1d:21:45:76:fa:58:db:1e:
34:07:83:4c:94:ca:7f:28:a8:ac:87:e4:f0:9b:6e:
a2:11:e4:36:cb:75:bf:81:8b:91:d9:b6:81:61:fa:
2d:e8:6b:e7:59:15:d5:fa:b4:97:fb:c4:7a:6f:55:
a5:b7:06:26:a7:5e:92:b6:00:b7:c3:66:b5:91:2e:
cc:0a:8c:90:8b:2e:91:b1:67:8b:ab:44:1f:71:c8:
4f:41:7f:3e:a6:33:ac:c7:88:27:62:d1:16:95:d6:
7d:69:ea:68:b8:be:96:5d:2b:c4:ba:55:28:91:dc:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F5:88:E9:84:FB:C4:1E:46:6B:61:DB:A7:0D:FF:B1:54:E2:12:69
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a3:d3:b5:db:45:61:ce:11:bc:6e:a6:8d:f7:06:08:27:5a:
57:4e:88:8c:72:ba:98:fb:f1:d9:50:3b:99:41:07:d4:69:6c:
76:f1:1a:dd:43:0c:0f:68:0d:09:a5:02:b4:f1:2d:79:dc:9f:
52:42:72:7a:56:81:cf:a2:7e:a2:57:f9:e8:a1:cb:5f:0e:e8:
76:4c:27:80:37:e1:3f:ae:87:b1:33:14:95:33:33:95:16:8b:
92:36:9f:92:4a:bf:61:72:48:57:b2:98:43:e9:19:6d:cd:3c:
33:0e:f2:71:f7:b1:a7:e0:88:d1:9c:29:ee:10:38:c1:e5:24:
b3:d1:85:80:8f:88:1a:12:79:31:2f:2f:8d:a3:d6:fa:d2:70:
d1:a4:59:48:e1:4f:45:ca:89:cd:77:ea:c8:ff:6d:32:cd:f4:
10:4d:33:ae:a2:15:97:8a:95:27:28:a5:fc:b9:20:9a:b2:b1:
0b:5e:9f:64:73:60:f2:10:d5:92:e9:db:c7:9a:8f:5a:41:c3:
e1:b1:95:e4:47:8a:46:80:bc:ae:9a:80:65:f7:59:d0:4c:1b:
cd:d1:a4:70:aa:d5:21:d1:f2:e0:5b:b7:fc:f0:f8:93:f0:40:
99:f6:07:5a:be:9c:1e:50:fd:d3:71:d9:4c:25:e7:07:6a:7c:
21:c6:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:08 2026 by rpki-client