Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier: 31Z7extswiAOxfHNuGnqiHeAJynXW42FURqihe69c/Q=
Subject key identifier: D8:94:6B:0C:F4:84:C0:D0:C4:3D:23:5B:0A:94:1E:06:92:73:4B:1A
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 019D262877323B71CD28B5C40CF690F9C6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:01:19 +0000
Manifest this update: Wed 25 Mar 2026 18:01:19 +0000
Manifest next update: Thu 26 Mar 2026 18:01:19 +0000
Files and hashes: 1: 3BxhZ35N8Qx2oPV8uifmlMo5dOs.roa (hash: bD1bjEPm+DLe/WM+85t8bSN4Tr3PbaJNuazlrJ3Q/3o=)
2: SoyEFopk-R4dS6W4GId_dIzG6Fo.roa (hash: 8Qh9O/rztM/wDJzj5wDIv0KZPNCBmgUCZ7Xbj18mMsE=)
3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: xY6DLuMNIYG0g44m0XzCBRPZ6rtUUXYrKPLQT9iirFU=)
4: zfvsegXog0j8iHhgS6fpZB-7wA0.roa (hash: bFu3gDNhMpBoThiANf0cCs15MmxVpxeF1StwYMxxHlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:77:32:3b:71:cd:28:b5:c4:0c:f6:90:f9:c6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Mar 25 18:01:19 2026 GMT
Not After : Mar 26 18:01:19 2026 GMT
Subject: CN=d8946b0cf484c0d0c43d235b0a941e0692734b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:fa:af:ab:b3:39:e5:6b:08:62:2e:e8:8d:
d0:a4:8d:7d:92:05:7d:e5:39:b5:6e:37:a4:8d:8b:
33:79:e7:a3:31:62:97:d9:df:b5:16:10:65:4e:4e:
50:28:b2:5d:35:d1:a4:e5:44:7f:72:6c:89:ad:d2:
52:cf:97:99:80:2c:33:28:ad:32:fe:73:ad:72:57:
cd:92:4b:31:19:6c:18:80:87:9b:8f:2a:82:91:bc:
a2:72:b9:d4:0f:b1:8d:26:90:4f:0b:5c:b1:72:72:
9a:df:dc:75:58:5f:82:67:fe:9f:3a:0c:76:ec:3a:
94:93:dc:ab:31:a6:d3:7c:7c:4c:91:d5:bb:c3:eb:
bd:72:92:40:d2:15:d0:4c:73:8d:46:e5:d9:e9:b9:
9a:3a:cb:25:7d:d7:f3:74:a9:54:7d:88:6d:7e:16:
84:e1:0e:8a:50:20:0c:55:93:c7:6f:a2:d1:26:cf:
b2:1c:56:97:fe:f1:83:c6:a6:41:14:4f:2d:08:4d:
22:67:a0:36:09:0a:92:86:27:7d:db:27:21:c2:36:
05:c6:df:a1:eb:8e:99:5e:d2:c6:fe:11:cc:31:ef:
c0:2e:d7:9e:6f:51:b4:a8:c3:1d:78:fa:54:4b:2d:
ff:36:ee:2f:48:cc:81:22:e5:f6:ab:79:df:d6:cc:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:94:6B:0C:F4:84:C0:D0:C4:3D:23:5B:0A:94:1E:06:92:73:4B:1A
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:de:88:fd:39:8e:81:6c:64:3f:07:fe:cc:74:94:82:62:35:
fe:de:8c:eb:53:57:b8:35:65:75:d8:b3:c9:b6:d4:d0:1f:6f:
a7:eb:81:79:a8:28:dc:f1:44:9d:63:64:a6:5d:2e:e1:cc:b6:
1b:3c:31:68:f8:fb:1a:95:4b:b4:e6:d5:73:3c:01:b9:56:4e:
52:a3:20:c8:2a:91:7e:77:54:c0:b4:c7:ce:4f:c9:aa:cc:4f:
d7:73:47:dc:0f:eb:64:3a:75:d9:80:f6:bd:38:ce:e7:6e:60:
a6:04:10:ef:f4:05:0e:69:26:e7:cc:c7:12:78:64:8d:c8:f1:
4e:81:6c:32:85:6e:5c:b5:25:6c:ca:9f:37:b2:f1:ab:06:15:
93:0a:cc:a9:4c:94:fb:f6:a9:f1:dd:cf:06:13:5e:cb:e4:c6:
8d:1c:6a:35:b4:21:71:fc:44:fd:0e:ef:ab:e8:40:76:b5:57:
f7:19:65:cb:35:59:db:c7:87:51:db:9a:2e:0d:7e:32:0b:7c:
fb:07:71:bc:db:de:84:37:4b:40:ae:57:06:11:3a:71:55:4c:
e5:f7:04:c8:2b:ce:8d:76:ef:e0:1e:fe:95:c0:0b:b8:60:99:
2c:53:69:bb:46:4e:38:37:d8:8a:dd:1f:ba:19:66:5a:b4:45:
b5:4f:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:52 2026 by rpki-client