Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: BQ4wA5amLcvJd9OyDuwsh/6IlLjHgaXVk0QyPujYy5I=
Subject key identifier: FE:38:28:AC:32:77:99:85:23:1A:BD:37:C5:42:34:68:9A:F5:BE:17
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 019D27728303C038715CC7E659F953050DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: ELCDYTv3WHzsKB02ZeWjPVSl8bs.roa (hash: 5NNB0UawGRF+n/YW9EFq+myT4uZRZ/4c2by4eferMo4=)
2: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: BFaZO5dlb96Qg0moNj3C+ssCyz1zuuSXyg2dW9l8n9A=)
3: wntuteFp_hWVEVUhXXzIfGeZGYg.roa (hash: COpIba0jOKYphmoFlVevEYtGvAQbqGOdq7aV51RcCa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:83:03:c0:38:71:5c:c7:e6:59:f9:53:05:0d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=fe3828ac32779985231abd37c54234689af5be17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:d3:77:04:18:4f:36:06:ec:d9:f8:9c:d1:
5e:65:c2:d4:3f:34:8d:6e:c3:a2:0a:10:0f:44:ed:
6c:fc:ef:08:3a:28:85:9f:c8:0e:c2:24:bd:61:28:
e4:1f:dc:15:4c:8d:24:79:fa:b3:67:4c:2d:33:0f:
30:0b:8a:86:55:5c:f7:dc:71:ad:7c:56:91:33:82:
bb:2f:f1:14:ef:b3:5c:e4:0a:d8:d1:08:7e:20:de:
59:da:98:45:fe:bf:9a:2c:4d:0a:1e:1f:18:42:f0:
3b:78:a0:9e:c4:7f:9c:82:8e:43:1c:9c:32:bb:31:
35:96:08:11:64:b9:60:cd:59:98:5d:32:7a:a1:bf:
4a:b5:d4:2a:5c:66:99:cd:ee:df:bb:c9:fe:99:fe:
5a:3c:d0:6b:2c:b8:7d:d4:5f:27:4a:84:03:68:e5:
86:e0:47:44:28:ba:b2:c8:4c:1b:5e:cb:f9:ff:4b:
d4:bb:6a:44:a4:5c:fe:13:55:41:9c:6f:88:7c:f8:
68:4b:89:cb:37:2d:12:71:bc:90:4a:72:24:0e:a6:
e4:6b:f4:09:de:a9:78:89:49:fc:4d:1b:f1:8a:71:
07:e9:15:03:54:00:05:0d:9e:8d:ea:99:ea:40:91:
3c:f5:b6:ec:45:d4:1c:e7:9a:2f:a0:a6:8a:c4:59:
f3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:38:28:AC:32:77:99:85:23:1A:BD:37:C5:42:34:68:9A:F5:BE:17
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:71:18:c9:8d:89:a8:08:16:32:31:25:90:27:d5:13:e0:7d:
f5:5a:9b:11:27:91:ca:dc:d5:75:45:2a:0d:0f:eb:73:b6:d5:
42:2c:1d:67:b0:cb:03:3b:e1:99:0d:64:11:fd:16:fc:6a:a2:
82:1a:c0:2e:b8:0d:b2:a3:61:66:b0:23:03:d6:6b:00:6e:f2:
25:7d:fd:74:60:de:d9:4f:59:54:30:04:36:a1:c9:94:86:ed:
79:a3:a8:c4:7f:2b:e0:19:08:43:6d:94:4a:aa:0e:23:aa:ef:
9b:5e:c8:6e:d4:f8:b0:29:27:d3:2b:d8:22:ec:55:0e:36:bb:
af:89:92:34:7a:51:75:b1:09:02:2b:7b:e3:ca:ee:d5:2b:7f:
f9:07:6f:33:1e:c1:ea:28:17:c6:c1:d4:14:a1:a2:39:9e:62:
07:c2:07:9b:9a:17:f0:9b:72:8a:0c:d2:75:6d:82:d8:b1:e4:
f4:fc:12:70:7e:cd:ce:f1:00:0f:2c:ad:a0:9a:42:95:33:6e:
37:17:51:f6:96:44:ac:67:2f:52:c2:16:ff:e7:26:d7:59:92:
e6:64:b4:56:12:c0:64:19:99:20:0c:b0:52:23:f9:b1:a7:18:
4c:ad:1f:ae:de:f5:f6:c6:a1:1f:fb:8e:7e:41:d6:eb:8c:78:
c6:62:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:58 2026 by rpki-client