Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: IJshOBOqYT2tUufT1AodBO/8vQjKs6zV09Xb91JhghU=
Subject key identifier: FD:E2:91:D1:20:EF:69:BD:CE:6F:8E:F9:3D:04:29:70:E0:0A:B3:C8
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019F905A5CAA8AB3EAAC3A9DA093B5A82B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 186D
Signing time: Thu 23 Jul 2026 19:01:08 +0000
Manifest this update: Thu 23 Jul 2026 19:01:08 +0000
Manifest next update: Fri 24 Jul 2026 19:01:08 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: yfNV4bU/z4yakthZOFElF8tEQbJe2PAQ86DwKuXw1Jc=)
2: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (hash: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA=)
3: zpJa1e3p8Nx2xQVletmQoHuwL-M.roa (hash: TwIoWuqhABejA0q7pW6fBUbQVK72kOlxxREFC8KT6Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:5c:aa:8a:b3:ea:ac:3a:9d:a0:93:b5:a8:2b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jul 23 19:01:08 2026 GMT
Not After : Jul 24 19:01:08 2026 GMT
Subject: CN=fde291d120ef69bdce6f8ef93d042970e00ab3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ec:2a:da:b0:85:fa:ae:94:53:f2:35:7b:37:
3c:13:73:38:c0:ca:29:87:2f:ff:cd:11:af:f9:71:
76:c4:e2:21:51:a5:05:25:f1:56:17:ad:96:51:66:
21:d0:62:e8:9e:91:8c:58:11:45:c5:fd:77:38:c0:
d7:34:a0:eb:79:b6:4c:9e:44:e6:7d:86:85:50:b1:
fb:15:4c:65:c1:15:b4:a4:92:4a:85:3c:73:a3:ed:
fc:6c:4f:8d:59:f4:a6:53:66:48:1d:96:bb:3c:a3:
c1:4e:0e:f5:18:a4:08:7c:bd:45:dd:b7:68:07:0c:
4d:55:55:db:b0:9b:9e:f7:90:db:d7:54:40:1e:48:
e0:8d:eb:da:31:4f:77:e8:ce:f0:95:9e:05:ed:a9:
38:6f:13:c2:1f:f7:92:d2:bf:ab:6f:27:72:8c:1c:
59:5a:fa:49:4d:a5:3e:f1:6d:95:c5:22:b4:5b:88:
80:4a:77:1d:70:cd:b8:99:51:a7:18:63:55:95:b2:
11:6f:74:6e:44:33:b6:f8:82:6a:28:95:5f:9a:50:
22:a8:50:1d:1a:54:b4:16:af:3e:36:92:eb:5c:db:
4f:fe:e0:f0:4a:d4:69:d1:f6:8b:69:22:9a:76:73:
ad:0c:b8:97:15:be:ba:ab:32:8d:ac:89:91:ff:cc:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E2:91:D1:20:EF:69:BD:CE:6F:8E:F9:3D:04:29:70:E0:0A:B3:C8
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:35:e3:de:2d:93:9d:61:2a:49:ad:dc:f5:54:2e:fa:20:ea:
b6:f3:c2:5f:83:45:5a:4f:9e:f2:82:0e:46:7f:ec:b6:86:4e:
eb:02:b7:c3:c4:fb:f9:c0:17:6a:1a:4f:eb:b3:fd:04:c2:9c:
2a:4c:2a:ce:99:af:c4:43:39:e0:2e:ea:c0:d2:20:aa:36:be:
ec:0a:8c:f5:ff:76:be:51:27:f6:6c:7b:9e:4c:c4:68:54:69:
c3:2a:57:7d:25:40:9a:a7:03:ef:9d:6f:a0:45:f9:26:b1:9c:
22:93:0d:9a:fc:11:d0:f5:e4:9f:a5:78:b0:01:6d:63:21:a4:
56:10:71:15:32:28:a6:99:9f:80:85:b2:36:79:40:96:e7:5e:
ad:27:00:ec:6c:fb:54:22:89:2b:d3:32:ab:9e:47:c5:54:51:
fb:aa:ee:c2:ce:59:de:84:bc:9b:7d:18:b5:b9:31:74:a6:6b:
fb:2e:55:26:4d:59:35:48:a0:24:fe:6a:88:32:37:20:78:b0:
0c:ff:5a:93:a5:7e:e5:34:52:b0:2e:20:52:17:5f:e9:8d:dc:
fa:a2:e5:9e:86:80:1d:c2:da:b9:7a:96:8a:ef:03:19:a2:e1:
53:81:35:07:15:01:35:9e:fa:73:cf:11:90:77:72:e1:21:36:
eb:fb:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:42 2026 by rpki-client