Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: DsQTw27wB4eRZyH+zn2uCov4wBj2a3pKeEzAWHDhvcY=
Subject key identifier: C4:0C:0B:27:9E:73:74:53:5E:1C:7F:32:54:44:74:03:66:1C:C3:7B
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 019D2C984EDC53D6CF873334C2D1C50FF67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 1162
Signing time: Fri 27 Mar 2026 00:01:12 +0000
Manifest this update: Fri 27 Mar 2026 00:01:12 +0000
Manifest next update: Sat 28 Mar 2026 00:01:12 +0000
Files and hashes: 1: MSIj_pvmmWV611TPzznzhVyMajg.roa (hash: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: pn1HilVxlgy7kDo5w/4PUpVhBwHeCuwRXnmqtSzNpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:4e:dc:53:d6:cf:87:33:34:c2:d1:c5:0f:f6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Mar 27 00:01:12 2026 GMT
Not After : Mar 28 00:01:12 2026 GMT
Subject: CN=c40c0b279e7374535e1c7f3254447403661cc37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:ae:73:ca:4e:34:e3:97:a5:3f:04:0c:38:
f5:37:d2:8c:e3:2c:a9:b9:3b:aa:7e:39:5c:b7:6e:
b1:98:f4:3c:5f:69:dc:f3:ca:0c:b3:49:aa:bf:3f:
65:60:eb:03:87:88:64:78:a8:a8:7e:b4:e3:78:13:
8c:70:81:2c:a0:42:da:ae:90:5c:6d:35:bf:48:86:
5d:5a:42:3c:e0:69:93:4d:d8:b8:e7:c4:bb:16:2c:
1a:58:07:60:f0:55:f9:27:b4:e0:71:c4:d8:c1:21:
8c:49:44:00:28:2f:73:3b:9b:3c:9a:cc:8d:20:ef:
fb:a5:da:df:2a:e9:ac:fd:73:4b:d5:43:67:de:02:
dc:6e:ec:66:00:63:38:9d:57:2f:74:bf:c5:7a:51:
bd:02:dc:40:7e:c7:02:34:b6:2b:b3:db:cd:95:37:
f4:b5:3e:e3:eb:d3:a9:af:df:77:47:0b:79:22:88:
a5:0a:5b:4f:89:93:13:0e:59:df:ee:79:54:4b:3e:
61:50:08:b8:24:56:e1:f5:a1:65:38:fb:b2:f9:e4:
35:86:e2:97:da:ea:4f:36:4f:1a:99:b2:ef:c0:1b:
49:4a:64:4e:c3:b6:ee:00:71:b2:bc:7a:8e:e9:de:
91:02:59:31:65:86:b7:e2:eb:f1:23:61:ef:93:b5:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:0B:27:9E:73:74:53:5E:1C:7F:32:54:44:74:03:66:1C:C3:7B
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4f:03:dc:45:95:37:8a:5d:62:2e:f8:99:c6:30:8d:80:ad:
c8:69:dd:66:4d:bc:5c:b2:cf:c2:d6:51:b0:67:d9:be:1e:b9:
f0:06:a4:7a:29:68:02:81:e3:d0:f9:97:c0:b0:99:6a:b8:e8:
d8:42:2d:c4:ab:52:a2:e4:5b:f8:bd:3f:40:16:0b:67:89:b4:
ca:d8:09:31:42:53:77:1a:26:e1:b2:59:89:b7:c8:94:49:a6:
e4:65:22:4b:56:21:5a:82:2e:ea:f4:23:77:7a:4a:86:eb:88:
e6:86:9c:f4:c7:7a:4f:ef:ff:a2:08:14:5b:a6:2b:1c:31:50:
e7:4b:e8:9c:52:69:4e:bd:cc:ba:81:be:17:33:af:67:3f:49:
c8:9c:ea:1f:8e:22:5d:8a:f2:5f:e5:9b:a7:42:f4:a5:ed:81:
00:2e:8a:9d:b7:18:2a:be:c2:69:35:1b:02:93:e6:2a:9b:96:
dd:68:97:51:7c:30:5b:ef:d3:0a:ec:b3:e3:17:21:16:86:23:
38:7b:75:31:34:8a:1c:26:18:f4:c2:cd:68:cf:f2:cd:d1:93:
ce:a0:46:25:56:5a:6e:6d:53:bd:f5:88:ac:47:f3:54:fd:12:
9c:40:56:0d:c9:97:d8:26:70:1b:5d:2a:44:fc:a3:c4:c2:d6:
13:f7:77:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:42:29 2026 by rpki-client