Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: 3vN+0q2IjdEGXzXkv3+8vzqehf2aO9hN0mqI5JDfb7Q=
Subject key identifier: FE:B8:A1:6D:A2:60:37:8B:1B:7D:3D:38:C4:82:1C:8E:62:1A:86:D1
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 019D2816CA19F3731F437448F982617816AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 1408
Signing time: Thu 26 Mar 2026 03:01:15 +0000
Manifest this update: Thu 26 Mar 2026 03:01:15 +0000
Manifest next update: Fri 27 Mar 2026 03:01:15 +0000
Files and hashes: 1: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: 5H8sqihbVMjLlTu96IOLmkUuGML5E35JDfEtPDv/yV0=)
2: bKdz8rFHyrzAIFA57TIT19mDKGc.roa (hash: 22Fu9At8wBjrLfQsilSYa4ZG0swleKB41MAi2nrwzHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ca:19:f3:73:1f:43:74:48:f9:82:61:78:16:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: Mar 26 03:01:15 2026 GMT
Not After : Mar 27 03:01:15 2026 GMT
Subject: CN=feb8a16da260378b1b7d3d38c4821c8e621a86d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:e8:e6:a6:b4:44:84:0b:8c:ff:e7:72:a0:
f3:e8:2c:ae:1e:e0:45:a9:eb:1d:03:52:f2:1c:a6:
79:0f:db:6e:e1:b3:41:71:06:0c:30:1d:e9:07:db:
f0:a6:ee:28:42:be:98:32:75:e7:00:a5:fc:eb:12:
52:fe:70:37:20:71:b9:9d:65:f8:62:bc:d3:dc:55:
16:77:40:94:76:54:81:99:17:c4:01:37:50:89:27:
7a:32:12:e1:55:3e:f4:b2:04:c9:fa:c0:66:41:9e:
aa:0b:3a:5a:fc:cb:87:d4:b5:91:b0:67:43:a9:eb:
34:98:16:06:a3:de:8a:30:3f:79:df:ca:7c:4b:7c:
3b:cf:8f:fa:fb:af:a2:f0:df:da:d4:f6:50:d0:45:
95:27:d4:9a:45:1e:52:07:71:fd:7e:eb:25:23:d5:
b5:c1:a5:88:5f:b8:88:2c:ab:62:6b:7f:3e:86:e8:
17:dd:83:cc:33:72:8e:e1:e8:3b:85:c5:61:60:10:
04:88:a6:76:7d:38:96:f8:e8:fc:49:7a:bb:a3:65:
18:08:e7:af:cd:11:ea:19:76:06:16:51:c8:33:5e:
7e:1f:12:50:18:30:2c:67:16:f6:ec:c1:bb:b0:0d:
89:fc:b0:fb:1a:83:0b:51:33:aa:33:0c:72:d9:ca:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B8:A1:6D:A2:60:37:8B:1B:7D:3D:38:C4:82:1C:8E:62:1A:86:D1
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6b:c1:19:cc:af:88:bb:dd:ad:5a:fe:1c:5c:96:9b:e2:cb:
60:4c:b8:e4:31:1f:89:ca:b1:e1:1b:74:54:71:84:c4:04:b2:
ab:5d:13:96:7b:5f:d9:44:59:0e:bc:ff:e9:f8:04:85:37:13:
fd:fc:1a:65:6a:60:63:8d:43:a5:80:33:03:cb:e9:a7:b3:3f:
4a:6a:75:71:64:b6:1f:aa:5b:d9:ca:9a:8e:c2:ca:b5:1b:5d:
a8:e8:1b:cc:39:8d:05:44:4c:50:85:89:23:0a:3b:53:67:8c:
68:38:1f:e3:ca:7e:c2:ea:2b:c3:f2:53:b2:30:5a:b9:cc:5f:
05:d9:9f:40:0c:e5:97:2b:dc:73:e7:96:4b:fa:aa:04:a7:ae:
07:36:95:c9:33:9a:53:0d:96:97:7d:dc:e5:10:5c:47:d9:cf:
44:54:2e:3d:a0:a1:06:ba:26:f9:2b:3f:52:5a:cb:e0:12:49:
53:f3:53:a8:75:97:27:bf:af:f5:4b:8c:f6:88:47:5a:2b:9c:
01:19:30:06:38:46:6b:bd:54:b9:9f:8e:59:f4:1d:0f:48:57:
48:b4:09:0d:2f:2e:aa:80:e7:ef:08:e6:81:97:40:35:19:f3:
8a:e8:52:bc:2f:35:45:f1:5b:fb:45:f1:a9:4f:22:44:90:00:
15:d9:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:17 2026 by rpki-client