Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
File: FEz3GmQFf4aSkG29men2hEB9boA.mft (raw, json)
Hash identifier: 5I0McJAKfC0kp/im2EvdZZMsU1qH+q9H4gNNB8vfiaA=
Subject key identifier: 84:2D:BA:3B:72:3C:27:D1:9C:E0:D4:75:53:A8:0E:D7:9A:19:C1:EA
Authority key identifier: 14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
Certificate issuer: /CN=144cf71a64057f8692906dbd99e9f684407d6e80
Certificate serial: 019D2816CA1A33F5FB63FD33FE2F156B1270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
Manifest number: 29
Signing time: Thu 26 Mar 2026 03:01:15 +0000
Manifest this update: Thu 26 Mar 2026 03:01:15 +0000
Manifest next update: Fri 27 Mar 2026 03:01:15 +0000
Files and hashes: 1: FEz3GmQFf4aSkG29men2hEB9boA.crl (hash: JTr+OzuH0EWaQVYyng73YTjupcD8Bg1N/pPg5I6+r4M=)
2: V7cyqG-pYyAMULVUem9DUD4mh5Y.roa (hash: NfpPyZF7G0X8PIMTTllt/U0ECaL4KgW7SFDL7u8msig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ca:1a:33:f5:fb:63:fd:33:fe:2f:15:6b:12:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144cf71a64057f8692906dbd99e9f684407d6e80
Validity
Not Before: Mar 26 03:01:15 2026 GMT
Not After : Mar 27 03:01:15 2026 GMT
Subject: CN=842dba3b723c27d19ce0d47553a80ed79a19c1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:11:d3:d7:68:f5:f9:b7:1f:5f:b5:93:25:
1e:05:b0:45:0c:40:5a:2c:93:a2:aa:67:50:83:24:
f3:ea:eb:bf:ae:4d:89:32:ca:d2:11:ca:ae:f9:82:
28:f6:a4:d7:58:b0:5e:30:53:f8:35:95:2a:9e:cf:
f0:8f:d8:85:a4:92:68:35:16:7b:95:cd:09:66:23:
af:9d:c2:4f:2d:08:94:0d:bf:f8:98:5b:c1:06:fa:
e7:7f:83:e7:41:0f:c7:9a:f4:69:90:41:0a:79:82:
a7:7a:d0:dc:10:49:40:86:c2:f9:82:c7:26:73:e2:
70:81:27:1b:80:f7:5f:7b:96:ed:31:47:67:d0:fa:
72:e8:07:0d:ae:e8:49:3d:9a:0e:15:a3:38:94:61:
f6:18:0c:b1:42:b7:95:bf:bb:0a:3c:d3:74:40:67:
90:4e:ff:40:e6:53:4a:3f:3c:e5:04:d1:86:1f:b5:
d9:13:9c:45:e2:83:0b:5b:b7:2c:fe:c8:f6:ec:18:
fa:7c:32:99:eb:23:d2:8f:b1:89:6e:45:f9:04:f2:
79:df:c5:29:15:f5:92:32:f6:f8:03:02:00:3c:ec:
89:0a:f8:12:a3:3c:83:a6:7b:f6:5f:95:df:52:7e:
36:82:df:76:c7:1a:06:fc:43:ad:b8:2a:b4:18:75:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2D:BA:3B:72:3C:27:D1:9C:E0:D4:75:53:A8:0E:D7:9A:19:C1:EA
X509v3 Authority Key Identifier:
keyid:14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8b:3d:b8:ed:39:83:4d:06:6d:9e:2c:7b:89:15:8a:77:85:
cd:6c:2c:1b:ae:a3:7d:14:22:36:f9:a3:03:b7:d8:29:a9:44:
74:6e:32:73:77:9e:c4:5d:1a:cd:d9:76:c9:71:66:b5:a2:25:
ae:da:1e:a9:e0:18:b8:63:80:a4:9d:c5:ad:21:7e:ca:82:52:
30:14:79:0a:d9:cb:8f:7c:b8:e2:90:7d:ff:4e:e2:f3:69:c4:
77:f6:4c:81:bc:c9:b7:be:97:1d:5e:38:88:2e:5b:2c:bb:24:
d4:d5:57:d3:e1:c6:08:31:55:65:f1:a7:4b:1d:bb:55:62:d9:
1c:49:68:d5:6a:5f:8b:5e:49:95:39:bc:d9:89:45:63:e8:86:
98:34:05:6b:90:7c:7f:74:20:b9:6d:a8:db:d0:73:d8:f2:74:
a4:cf:48:58:0a:6f:8f:35:dc:3b:25:95:91:88:c6:6f:e3:a6:
0c:29:5e:26:49:43:73:5d:10:1d:f1:78:5f:43:e1:e7:89:de:
fd:06:29:1c:b1:78:84:ee:5d:16:68:71:f4:81:4e:07:dc:8d:
63:9d:6d:dd:30:16:d0:2c:57:65:45:0f:c3:06:f9:7e:50:71:
7d:e8:e2:7f:2a:4f:55:3c:35:ae:ba:aa:1f:75:3e:45:c9:de:
6f:9f:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:00:55 2026 by rpki-client