Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json)
Hash identifier: zgpdGoeF9NBMqPdsos5aMhurN/Vomko0IY59ZrBY5Iw=
Subject key identifier: 8D:15:11:32:F0:11:9E:03:BF:D5:BA:48:5D:A9:CB:88:AA:27:3E:96
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 019D2961B4BED8BF8207C43DBCD78422DCC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
Manifest number: 10A2
Signing time: Thu 26 Mar 2026 09:02:42 +0000
Manifest this update: Thu 26 Mar 2026 09:02:42 +0000
Manifest next update: Fri 27 Mar 2026 09:02:42 +0000
Files and hashes: 1: Gtwjc7NNuv58O6hnKDqBYDJmyRQ.roa (hash: LK5oiJ5hBo2z5XWsMY/8RHb1LgIogizoQEzKylCXOUQ=)
2: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: hWF0hEb3SolNHsgEDw0llHvaGrhu00i1NuI+e0AnDVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:b4:be:d8:bf:82:07:c4:3d:bc:d7:84:22:dc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Mar 26 09:02:42 2026 GMT
Not After : Mar 27 09:02:42 2026 GMT
Subject: CN=8d151132f0119e03bfd5ba485da9cb88aa273e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:65:9e:c5:63:dd:cb:cb:9e:a1:28:29:5e:
dd:b7:e8:46:a8:d6:2f:f7:0b:dd:50:58:13:ab:d3:
93:bc:23:d8:fb:23:2c:5c:d5:86:f2:53:88:c8:a4:
d6:eb:7f:51:19:69:75:2f:62:33:00:2b:69:c1:97:
5e:be:30:9a:78:fc:85:cf:80:32:70:32:20:06:bd:
f3:c3:37:fa:de:dd:b9:b2:ac:5e:50:db:cb:73:00:
65:44:82:c5:66:94:3b:b6:ef:95:7b:1b:7a:1e:a8:
02:27:e6:3a:b2:76:ee:c4:e6:93:7f:da:2e:08:04:
2d:f4:8f:4d:fc:f9:68:aa:dd:62:32:8f:f6:d1:e1:
5c:49:a4:77:ee:6a:02:f1:bc:a7:6e:32:70:a3:f7:
47:e7:23:9c:50:dd:66:f9:22:3a:29:2a:44:7f:da:
aa:d6:d3:37:41:c3:61:8e:f3:a7:49:88:c7:15:ca:
47:25:d6:2c:57:54:d3:a7:83:ad:d6:af:21:92:3e:
d5:30:3d:4d:c6:e0:b9:3f:df:02:3f:2b:d9:09:05:
9f:01:c0:f2:22:c8:b3:96:4e:a3:8d:43:9d:bf:f1:
ee:1a:55:bf:1d:12:81:83:71:f1:0d:01:40:bf:6d:
b1:86:12:19:be:d8:d6:97:d2:9d:fb:3e:1a:97:be:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:15:11:32:F0:11:9E:03:BF:D5:BA:48:5D:A9:CB:88:AA:27:3E:96
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:30:88:c3:a7:00:ac:44:bd:22:58:94:a2:2f:e3:c2:2a:c4:
eb:7b:96:1e:98:69:94:54:9f:68:be:71:c0:af:a9:6e:c7:b4:
15:43:25:87:61:27:df:4b:ca:37:df:dc:a2:a9:ba:79:44:17:
90:bc:0b:d3:da:f0:e9:e3:0f:fc:71:73:7c:1b:91:81:e3:7d:
18:43:0e:84:fb:39:b2:5d:74:00:15:2d:29:8e:40:0d:7f:ec:
16:59:1d:14:cf:33:19:2d:3e:86:de:62:e9:e1:5b:2f:84:da:
52:a0:f5:5e:c3:b2:ad:7c:c0:91:9a:91:6d:48:01:48:f9:b4:
41:86:45:4c:15:29:51:8f:93:08:c8:d0:cb:a3:ba:05:34:5a:
d2:ec:5d:28:f8:e2:56:a9:07:29:6c:2e:12:c3:2e:b6:52:f1:
4b:c0:61:31:ee:fd:f9:19:06:23:86:5e:2a:df:b1:42:a0:93:
19:14:0b:03:2c:a4:38:2b:0e:ef:08:b4:b4:e4:c4:f3:cf:cd:
8f:37:3e:eb:e6:06:b7:fe:ec:2a:94:ca:c4:c7:ff:d7:97:08:
8f:69:f2:d7:1e:4c:05:a6:7b:e5:71:6f:c8:5d:4d:25:cf:fb:
cf:36:75:b3:3d:b6:fe:37:0a:3a:7e:67:49:3a:69:9f:20:61:
21:79:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:25 2026 by rpki-client