Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier: ui12qmTGWCTmBtPJ+Er1TYZv5/FwKVpiS5XvcCni+RQ=
Subject key identifier: 29:7F:35:D0:3A:38:89:60:55:FD:1E:78:60:6B:A3:17:39:5A:3D:6B
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial: 019D2D3C5A2B13292727E72388C456D3353C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number: 155C
Signing time: Fri 27 Mar 2026 03:00:22 +0000
Manifest this update: Fri 27 Mar 2026 03:00:22 +0000
Manifest next update: Sat 28 Mar 2026 03:00:22 +0000
Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: WWIOWiC0QTl4aQTI/wVuyKi+BHNm0hlEHzk3+SU+W1s=)
2: pnSX4g2lmq0K8FTBTKkZmOyOugg.roa (hash: V6XhkHNDk99HDBU8c9gDLWqCQBMIvpkfeeSqTLRceRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3c:5a:2b:13:29:27:27:e7:23:88:c4:56:d3:35:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Validity
Not Before: Mar 27 03:00:22 2026 GMT
Not After : Mar 28 03:00:22 2026 GMT
Subject: CN=297f35d03a38896055fd1e78606ba317395a3d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:59:0f:0a:73:78:72:b9:1b:79:cf:95:ff:
d4:92:53:a9:a4:53:a9:ab:db:f9:4a:a5:b1:40:74:
76:23:24:5a:3e:5e:0f:42:21:e2:66:1f:30:17:d4:
cc:f8:e1:5f:8b:c6:f2:c0:69:e2:42:5b:71:fd:a2:
55:0b:c5:ee:29:41:a4:77:0e:06:de:c9:ab:46:4c:
35:7f:52:24:e0:6a:cb:e3:9d:9f:06:de:44:f1:b4:
46:14:fa:ec:9b:19:63:63:d8:2a:98:66:0a:ca:35:
2f:0f:52:c3:22:36:32:c6:32:4d:34:fa:71:8e:72:
b3:01:db:4b:cf:c3:c1:65:be:bc:62:c7:d0:8e:1b:
3c:5c:79:f6:7f:b1:df:3b:9d:81:b4:7a:79:71:89:
4b:22:54:eb:55:50:ec:0f:ac:0a:d9:e8:d7:ae:08:
90:8f:4a:64:9b:7f:04:84:4a:74:c8:a4:df:ce:6a:
81:aa:16:8a:ed:1d:ee:ef:15:7e:45:86:17:c7:85:
7b:53:2d:b6:d8:b2:be:fc:ce:dc:95:ff:ee:25:87:
d2:3c:52:17:82:87:78:a2:71:a0:cb:97:23:9b:5f:
23:f5:28:c2:90:48:60:85:40:12:c2:bd:87:50:15:
43:d9:c3:a3:d9:59:b8:5a:57:91:12:ee:c6:d2:5e:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7F:35:D0:3A:38:89:60:55:FD:1E:78:60:6B:A3:17:39:5A:3D:6B
X509v3 Authority Key Identifier:
keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:62:1e:4c:33:a9:df:2d:79:f4:c1:75:37:2e:34:1f:18:1c:
0f:92:b5:77:05:9e:10:8a:9e:63:8b:55:28:5c:a4:32:d6:69:
68:0f:ad:72:c4:a9:0f:ce:39:89:bd:cd:25:d7:2e:92:73:37:
1e:c9:ad:a8:b0:8f:a5:cc:bd:3f:85:93:b0:fe:9c:d0:90:1d:
2f:51:36:e9:5d:51:28:06:be:83:97:b6:f3:65:0f:05:51:92:
72:56:21:b5:7e:22:bf:53:1b:af:0b:f1:d1:82:a0:97:94:1d:
13:d4:b1:fa:b4:06:83:3b:47:9f:14:68:b9:d6:44:8f:a8:2c:
02:2e:dd:c3:7f:a0:39:9a:4c:fa:c2:54:e4:d8:af:0c:ae:4a:
29:fc:fc:21:9b:43:9a:ca:7c:f0:27:ca:b2:d8:2c:49:17:4c:
84:dc:7a:ec:71:80:40:7f:1b:4b:5d:75:b0:e2:bc:0e:9e:9d:
b0:3e:16:cb:bd:69:16:6d:fd:98:f4:7a:50:a0:7f:97:97:97:
28:42:a3:ff:e1:a4:c7:de:38:02:c6:36:31:92:e8:3d:61:58:
0a:6a:3c:75:a1:70:01:eb:d6:33:77:04:99:44:a1:e1:49:d4:
03:aa:11:ad:73:5e:1c:b7:77:47:57:bc:a8:61:4d:07:d1:85:
0e:86:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:52:24 2026 by rpki-client