Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File: f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier: jL8ocdPLcL1EQlq+8ypWcbMNu6epO1xMj3/8i96KIUA=
Subject key identifier: 1C:16:36:68:5A:80:8E:DC:E4:87:76:9A:D9:1F:84:7B:6E:35:EE:D7
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial: 019D2BF2DF39D2AB3A0378AE7260015AE99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number: 06E2
Signing time: Thu 26 Mar 2026 21:00:30 +0000
Manifest this update: Thu 26 Mar 2026 21:00:30 +0000
Manifest next update: Fri 27 Mar 2026 21:00:30 +0000
Files and hashes: 1: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: Ev77LcN7k1m9KhluwkEN8Ingb0UQVUPGSbh45inkUBI=)
2: pXDB3JZOfxhx6kB_B6yjlms4hgg.roa (hash: 7CjufhrAy5+5Le+UMiFmAE/OHHfY94923x+MRoCs0Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f2:df:39:d2:ab:3a:03:78:ae:72:60:01:5a:e9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Validity
Not Before: Mar 26 21:00:30 2026 GMT
Not After : Mar 27 21:00:30 2026 GMT
Subject: CN=1c1636685a808edce487769ad91f847b6e35eed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:9f:36:a6:59:81:f5:21:9e:41:ea:24:4f:
13:32:5e:b9:ec:1f:e2:26:bf:5d:83:da:25:01:bc:
97:85:f9:42:1b:bb:49:d7:97:d4:76:e0:e5:9d:cb:
f7:74:8c:4b:14:22:67:d4:00:a4:b3:46:13:b5:11:
98:51:bf:44:27:d2:0d:ff:a7:60:46:1e:63:c5:32:
0e:71:9b:25:60:be:15:a0:c7:e4:ad:66:d2:a7:46:
9f:86:24:ea:60:7f:33:ea:68:a5:b2:03:89:6a:db:
f5:17:c5:a6:e8:b4:d1:38:d4:fc:21:2e:02:41:9a:
9f:7b:59:cf:e0:3e:af:49:67:e3:62:25:d5:b1:d0:
2f:36:b8:86:b0:4c:79:64:63:da:50:5c:88:a4:d2:
e9:d3:e9:39:2e:6b:e1:63:af:a9:d3:79:37:1a:84:
ae:59:b8:a1:e2:2a:24:dc:3f:45:5f:c5:57:1d:05:
a7:1d:85:47:bc:5c:d8:be:ce:81:34:4f:fe:06:34:
d8:76:cd:da:67:47:37:24:0c:00:22:1a:e0:60:84:
6f:b3:cd:19:10:15:63:55:17:b5:64:3c:43:1e:84:
9d:c0:d2:7e:07:5c:55:2c:c6:56:a1:21:7b:fd:14:
4e:ab:87:01:37:dc:61:01:47:c2:30:16:5d:40:9b:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:16:36:68:5A:80:8E:DC:E4:87:76:9A:D9:1F:84:7B:6E:35:EE:D7
X509v3 Authority Key Identifier:
keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b9:24:f7:66:ea:f7:e2:b7:d9:30:0d:1a:d5:05:a0:96:5c:
78:c3:a1:7a:ec:3f:13:87:df:b8:78:05:f4:ac:a9:9e:ae:44:
24:12:fe:6f:d1:16:e8:b5:4c:b2:b0:87:53:2c:1e:5b:61:c1:
b9:25:18:e8:b2:37:e8:23:0f:94:08:82:15:46:ea:05:1a:04:
c5:36:a5:f1:a0:e8:eb:21:3c:e2:4b:2e:90:58:f0:87:e8:99:
dc:26:f6:11:1d:b8:1f:d3:f8:61:56:64:59:2a:73:08:81:be:
58:aa:ae:ae:df:b5:1a:7e:09:43:5e:4a:ba:12:9d:5c:77:83:
e3:d0:cd:65:4e:dc:61:28:e5:15:ee:49:36:56:70:a1:95:8c:
7e:3d:93:60:26:00:67:b4:9a:b2:ca:5a:52:51:c1:c6:3b:1d:
8d:6d:92:df:67:3d:b5:1d:fd:a1:4b:2f:6f:a1:d1:b4:37:00:
25:f5:d3:28:42:bb:7c:e4:5a:69:cc:23:23:52:54:80:24:e1:
f0:e0:0d:eb:69:ec:80:fe:4d:74:d4:07:0b:0d:b5:fa:d4:90:
6f:a9:f9:4c:46:63:32:c1:8f:58:51:ca:2d:14:bd:38:19:9a:
cc:35:d9:d2:c0:43:a5:7a:cf:aa:62:90:08:b8:af:ca:5a:aa:
45:80:b1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:44:34 2026 by rpki-client