Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier: 04nhZ+CCQH3Z2PusAJoDLCDedsjYIGMLxz6x3NbTzcQ=
Subject key identifier: 02:9C:15:37:86:92:85:59:3D:8F:53:0C:0C:65:4E:BA:F0:9D:42:EF
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial: 019D265F1D13438D7C14A527C2AE7B2D4AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number: 0398
Signing time: Wed 25 Mar 2026 19:01:00 +0000
Manifest this update: Wed 25 Mar 2026 19:01:00 +0000
Manifest next update: Thu 26 Mar 2026 19:01:00 +0000
Files and hashes: 1: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: orsrzuhA/kr3Oiv2uWjqWJnBcLHWJ26BdD5bCFOuM1A=)
2: UWFOafME42L6O6C8tCsylQ1qM5Y.roa (hash: kTp8dPuulE0KVt0WY/U+hGiw2jKgDTK8kmDYSbikY3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:1d:13:43:8d:7c:14:a5:27:c2:ae:7b:2d:4a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
Validity
Not Before: Mar 25 19:01:00 2026 GMT
Not After : Mar 26 19:01:00 2026 GMT
Subject: CN=029c1537869285593d8f530c0c654ebaf09d42ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:2c:9d:74:f3:1e:cf:2a:6b:24:1a:d1:a9:
7d:39:d4:49:1e:61:de:f5:09:13:bb:fb:20:fc:57:
ea:b8:6e:c4:a0:65:2e:65:62:37:b2:6a:d3:39:5a:
ae:73:a5:bc:0f:bd:92:f2:02:0f:5a:3c:97:72:4c:
0d:fa:36:e3:73:a4:d0:a3:a5:e6:48:f3:5d:68:af:
cb:d4:ea:92:2e:2d:a2:f6:6b:45:df:13:3f:21:bc:
e3:0c:48:0e:3f:99:e0:c8:8b:ef:c1:de:73:bc:20:
c9:3b:82:17:21:26:54:a7:cd:28:84:a6:81:e8:24:
59:a0:be:9e:3e:32:82:2c:c9:af:25:f4:90:94:98:
4d:77:b8:e4:d9:45:a8:1f:4f:fd:84:54:00:8c:d7:
84:cb:b1:78:aa:58:50:f1:a5:b5:8a:66:d6:63:8a:
8d:22:06:8c:6c:b6:6b:c9:0c:a7:7a:92:69:63:4b:
b9:1a:45:bf:d5:23:26:60:95:d9:f0:06:26:3a:aa:
7b:af:15:72:70:72:16:1d:4c:50:b0:ea:98:bd:88:
9b:63:80:5b:81:f0:73:f0:a1:04:d8:97:60:4d:d7:
4c:59:37:36:c6:e9:92:68:ef:f1:9f:f1:36:a0:b0:
14:d8:a5:41:86:2b:2f:cb:d6:55:ab:f5:10:b9:52:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9C:15:37:86:92:85:59:3D:8F:53:0C:0C:65:4E:BA:F0:9D:42:EF
X509v3 Authority Key Identifier:
keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:66:27:88:29:8e:63:0f:38:3e:70:6f:b6:5c:d4:8c:9c:30:
17:8f:cb:0d:21:9e:fa:a9:2b:97:a0:b6:1b:50:86:67:8c:20:
6b:f2:d3:c7:36:cc:a4:6b:f9:cb:d5:41:fb:69:07:14:90:fc:
b9:8b:2f:20:0f:45:9b:20:4b:02:50:49:d4:7c:59:19:7e:6a:
e6:35:a7:0b:9d:ed:3a:f7:8e:8c:c2:b4:80:2a:f6:b4:5b:f1:
9e:df:9c:60:2d:06:34:83:5e:81:9d:c7:5b:87:e2:11:cb:b8:
7c:12:79:8d:cd:6e:21:a1:30:51:c1:79:f6:03:60:41:62:22:
01:b0:47:c4:69:73:e6:ec:49:14:d2:29:53:62:f3:48:9a:b5:
fa:2c:d6:b9:8c:13:a9:40:9f:a6:5e:a0:35:77:65:22:08:bb:
e0:01:ef:eb:72:98:23:0d:ef:a1:cf:42:9d:1a:d4:31:d1:10:
47:98:ff:54:0e:fa:98:17:67:26:5a:1b:c8:d4:38:a8:6d:b1:
a1:b0:ce:db:f2:a4:80:6c:ab:9b:e1:a8:6a:d0:5e:7b:92:d9:
82:e0:35:21:26:cd:50:39:65:9c:e2:82:bc:4f:1e:4b:77:59:
8f:f5:2b:27:24:fc:48:fe:80:69:b1:ff:e8:08:52:f9:5b:0d:
4d:c9:8e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:20 2026 by rpki-client