Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
File: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json)
Hash identifier: EgBCjniNrZDIEEH1NUKxHY2oC/vHCVsnoIrTPGVmi6k=
Subject key identifier: E1:EE:2C:01:66:BD:F8:07:C8:3F:1C:3B:6E:E4:1E:A7:AE:6B:A4:4A
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 019D28BBC05F3C386079404D6476B5D00283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
Manifest number: 0EC4
Signing time: Thu 26 Mar 2026 06:01:26 +0000
Manifest this update: Thu 26 Mar 2026 06:01:26 +0000
Manifest next update: Fri 27 Mar 2026 06:01:26 +0000
Files and hashes: 1: 38oAPK8l1QAyS4-vjUH6OdfHPVE.roa (hash: HEbM3ygSfjq8vR4KrtNmnwA7caa3UAN1JiQwsCGLoxg=)
2: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: jkFZfxgHcATpJlPEb6M+5gbv5jCEt5i5vTDbfYaCrtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:c0:5f:3c:38:60:79:40:4d:64:76:b5:d0:02:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Mar 26 06:01:26 2026 GMT
Not After : Mar 27 06:01:26 2026 GMT
Subject: CN=e1ee2c0166bdf807c83f1c3b6ee41ea7ae6ba44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:e1:ce:39:b5:fe:72:52:58:b9:db:a2:0a:
c3:95:83:78:52:b7:97:00:e4:1d:83:54:d3:8f:7f:
fb:27:d5:b5:eb:be:32:8b:0e:11:eb:a5:c4:60:11:
52:66:f5:70:50:7a:47:b6:30:d5:42:fc:41:d2:38:
68:e4:73:41:01:21:df:ca:7a:ed:bb:60:6a:fc:6a:
9f:82:95:1c:46:9d:f6:68:d8:70:35:83:a1:33:7e:
57:46:fd:95:9d:b6:82:34:c8:7c:a0:f7:a8:a6:c3:
34:f5:ff:9d:5f:97:9b:e0:16:3d:99:0a:9c:7b:85:
c4:64:3f:ff:f4:64:12:10:5b:c0:f3:3a:63:39:42:
1c:7d:42:cf:15:37:85:ef:59:48:22:5f:c3:3e:d9:
25:54:60:67:c6:b6:93:03:60:ad:ae:5f:b6:e2:4f:
97:e1:06:bb:33:e8:be:ff:e2:0b:ae:73:87:b0:f2:
2d:e2:60:08:d6:fb:a8:25:bf:de:b1:1e:25:02:ad:
6c:87:85:be:1c:26:db:90:05:a1:fe:6d:ca:b0:99:
78:28:2f:79:ac:98:d0:45:3b:45:01:9e:72:28:9f:
b7:eb:8a:88:41:51:ce:90:f5:5d:e5:77:04:0d:de:
51:f9:6c:54:8f:f5:39:78:77:29:2c:f0:b5:a6:7a:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EE:2C:01:66:BD:F8:07:C8:3F:1C:3B:6E:E4:1E:A7:AE:6B:A4:4A
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e2:92:74:e3:35:fb:05:f1:5a:48:54:bb:2f:45:21:5d:c0:
01:86:b1:b6:63:aa:6e:3b:0b:8e:29:4d:ce:f5:de:57:bc:fe:
d8:68:60:75:a3:ec:1b:46:96:b1:91:de:17:10:7f:a6:4a:b9:
f8:6a:20:cd:33:2e:40:32:a5:46:1c:cb:f2:0b:f0:82:15:28:
5d:38:31:74:d5:21:08:67:c3:01:43:bb:61:0f:5d:e7:fc:88:
5a:4d:02:c2:fb:52:39:b5:f2:b7:b7:16:a7:3c:02:89:4a:e2:
5e:aa:9b:27:9d:fb:4c:4c:e9:77:69:64:c1:7f:f7:b7:04:3f:
f7:80:4b:79:95:05:22:a2:b8:30:d3:1b:ff:88:06:50:16:16:
91:95:fa:05:ca:b4:d5:f4:bb:ba:a6:01:03:dc:94:ea:43:c1:
c0:b7:28:80:51:e4:26:76:ec:f6:94:ab:76:8d:1f:ad:1c:79:
73:2c:42:a9:e7:3b:f5:ba:7f:38:33:06:fb:11:c3:09:1e:82:
50:af:9d:7b:91:70:86:75:6a:1a:a7:34:3c:47:a2:ac:c4:93:
10:1c:d3:02:bf:99:88:5c:6a:0f:8e:c1:64:cf:dd:60:4a:e9:
ee:64:6b:e0:74:26:4a:ca:3f:0a:3f:5c:fc:31:62:e8:7d:5e:
0e:ca:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:55 2026 by rpki-client