Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File: FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier: XNJ9KnmBBQxJ5UqTFTT//LI418EafPhEATU2/h0b614=
Subject key identifier: 0C:8C:E2:27:F6:20:4C:AF:3B:AA:A8:57:33:06:76:E1:9F:1A:72:5F
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer: /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial: 019D28F267614DC526A8D640B6D18EB15D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number: 078C
Signing time: Thu 26 Mar 2026 07:01:07 +0000
Manifest this update: Thu 26 Mar 2026 07:01:07 +0000
Manifest next update: Fri 27 Mar 2026 07:01:07 +0000
Files and hashes: 1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: kLcRigVslR7ogO03zNFV3J+agELxDOh2HgeSOCOhGCU=)
2: aPjK_e6JWAnpVJTimjzF8YUqBy8.roa (hash: CxFxcDSyGy+oCI+MZq7LPshirwWX4b3dsefQvQRFoI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:67:61:4d:c5:26:a8:d6:40:b6:d1:8e:b1:5d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
Validity
Not Before: Mar 26 07:01:07 2026 GMT
Not After : Mar 27 07:01:07 2026 GMT
Subject: CN=0c8ce227f6204caf3baaa857330676e19f1a725f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:9c:cb:0c:a9:b9:13:f3:46:71:b4:6d:59:
42:69:e9:c3:39:4a:79:10:0e:6d:51:e1:fe:80:35:
c4:2b:0f:04:11:0c:c3:8a:1a:bd:48:6e:b0:70:75:
92:26:16:21:5b:8a:03:f9:f1:91:c4:b9:c4:c1:31:
35:ee:55:b5:c2:07:d6:5d:e7:4f:d4:5d:03:1e:79:
b2:ab:ba:71:14:11:e2:72:be:4f:40:e8:9e:ab:83:
56:be:5c:ba:5b:fe:44:64:0a:fc:dd:46:2e:6e:e3:
1b:d7:1a:66:c2:ef:6f:90:52:ee:75:a2:d4:5f:70:
5c:4c:87:bf:1c:48:a0:de:d2:1e:c5:5c:1f:9f:cf:
f1:0a:4f:f9:d2:d2:d5:49:32:9b:c2:7a:07:01:73:
7c:1f:33:d3:b4:78:d0:3f:b8:dd:6f:54:f3:60:a0:
3e:62:1b:56:c4:d1:0d:3e:ea:bd:5e:7b:67:9a:87:
f2:6e:2d:6e:1b:d5:ca:39:0c:7a:e9:88:52:9b:63:
95:59:15:9e:7a:43:98:42:39:7d:d9:d1:b6:f5:58:
97:ec:4f:cb:da:1d:87:b3:03:db:46:03:08:18:60:
05:86:fa:4b:d1:49:07:36:85:b0:f2:43:59:9f:47:
17:d4:4e:4d:43:38:50:07:92:84:38:e3:c5:63:3f:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8C:E2:27:F6:20:4C:AF:3B:AA:A8:57:33:06:76:E1:9F:1A:72:5F
X509v3 Authority Key Identifier:
keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e6:4c:af:36:48:3c:9c:2f:25:86:6e:f6:c6:28:fb:f5:a8:
d8:b6:39:bc:c3:c9:fd:4c:f8:35:ab:e5:a8:b7:69:30:fc:d0:
15:1e:c6:ab:21:2f:78:e2:99:f4:45:db:82:f9:86:18:18:e4:
22:9c:4f:00:6a:79:db:9a:a2:66:fe:62:33:4d:ac:ba:15:30:
7e:23:f3:c4:85:55:4e:90:a6:66:09:2b:9a:a6:fa:64:9f:38:
c7:00:8f:7b:19:b4:e2:37:e8:4b:c8:14:eb:5e:54:70:44:af:
12:6c:0e:45:79:48:1a:b0:83:05:f0:7c:6c:4d:9a:17:7c:34:
83:11:62:92:be:d4:1b:9c:41:7b:71:42:1c:44:f7:bd:45:31:
12:28:8c:ac:54:51:b6:c5:e0:e1:17:ef:d9:ce:6b:c5:55:2a:
8f:bf:31:61:cd:42:8a:61:d1:b2:40:8f:08:31:cb:b8:8e:36:
dd:f5:94:4e:28:18:53:85:82:d5:91:75:5f:62:55:21:fe:0f:
ce:8a:f0:94:5f:75:4c:04:78:e4:d3:78:92:c7:b2:9e:d1:b9:
67:de:e9:2b:36:0f:63:7a:e9:67:fc:26:12:fb:78:e8:20:64:
cd:76:d4:28:11:9c:97:42:33:c7:c2:9b:f5:13:0d:99:c2:ae:
7e:b2:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:54 2026 by rpki-client