Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: T+ui/BNPbbOxi5oi1KOTvel2HYPvbq+fpIcQ0Ed2vUs=
Subject key identifier: 74:2F:12:58:73:85:2E:CF:0A:4F:AC:D9:D9:6D:6B:8E:80:E8:F0:4A
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 019D2AE10D5D5D8F8FCF001B05FF91746A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 16:01:25 +0000
Manifest this update: Thu 26 Mar 2026 16:01:25 +0000
Manifest next update: Fri 27 Mar 2026 16:01:25 +0000
Files and hashes: 1: Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa (hash: 6wCn2sStp7lMoBisyxoOVg7CQrVyP+8JEmZ6TdkNK6k=)
2: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: /CJ53WJcw4Enyx4dpodA+8eVUM9ykxC3albDFo4JGG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:0d:5d:5d:8f:8f:cf:00:1b:05:ff:91:74:6a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Mar 26 16:01:25 2026 GMT
Not After : Mar 27 16:01:25 2026 GMT
Subject: CN=742f125873852ecf0a4facd9d96d6b8e80e8f04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:74:76:96:d9:bc:1f:3a:ba:f6:9f:bc:e8:
73:7b:87:2d:f2:c0:4f:73:a7:c9:00:f6:65:21:3c:
64:37:c6:75:cc:70:44:1c:05:1c:52:66:13:5a:0f:
88:0e:b8:7a:43:12:4b:38:72:bd:3f:fd:84:67:a1:
9a:85:91:98:ed:c3:66:23:71:d6:8e:70:46:8a:45:
41:e1:7f:cb:be:dd:67:eb:ca:3e:b5:73:e0:c0:5a:
30:5c:b3:a0:6e:2b:55:ee:5f:23:40:0d:c8:ab:84:
5a:e9:6d:0e:2a:75:a6:b4:f5:49:18:e4:f5:54:ac:
fb:8e:cd:c5:f2:45:80:1c:c1:40:81:da:95:2f:10:
7e:eb:4f:76:ac:33:9d:aa:35:cd:d5:36:60:67:5a:
5f:4e:fd:0b:09:55:15:3e:41:84:21:93:2d:d9:1d:
c5:7a:ce:25:e7:ad:17:b5:db:27:77:f2:5b:22:3a:
59:01:67:73:87:d9:3a:38:e9:b9:bb:cd:18:45:f5:
c0:79:1a:60:95:06:1f:24:30:6f:f9:79:01:4f:07:
a4:f8:7d:5b:9a:77:df:3c:af:c5:05:f6:cb:ca:55:
2e:dc:c5:18:9e:3e:0d:82:d2:2a:e1:0c:ed:fc:84:
a7:72:d5:f9:76:ae:64:61:a3:87:b3:c1:33:d9:dd:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:12:58:73:85:2E:CF:0A:4F:AC:D9:D9:6D:6B:8E:80:E8:F0:4A
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:51:23:92:7d:79:02:2f:87:ab:a3:9e:ea:34:36:31:74:18:
52:e5:39:20:fa:c1:d5:21:9e:f5:5c:e4:12:83:6d:45:ee:d3:
12:b6:fe:f4:4f:31:9b:65:ba:3d:77:8b:d2:0a:78:be:b3:56:
8b:3e:08:85:43:58:29:72:ba:d1:a0:1b:27:ed:5c:79:f8:d6:
81:c4:9c:e9:7d:f7:82:7c:06:b3:9b:33:04:46:0f:cd:72:f5:
2d:34:d6:57:59:0d:11:27:54:1f:26:29:d7:19:0c:b6:74:1c:
58:34:40:c5:16:87:3d:1c:96:20:82:30:15:05:a9:6e:a5:a4:
5a:d0:e6:5b:c4:7e:51:76:13:6b:99:e4:cd:e9:d2:6b:ba:58:
3b:ec:05:2c:f1:87:1d:5d:a7:25:cf:e0:4e:e3:a9:10:73:9e:
a7:5f:94:5c:b6:3e:09:35:3f:6b:ea:0a:b1:6b:00:bc:fd:b2:
77:d0:06:d8:c4:44:46:86:7c:df:ca:4a:5f:88:71:cf:c9:f0:
3a:17:99:b4:c3:ce:d0:38:38:5a:b4:e9:95:0d:6b:f0:7b:90:
fe:b8:c0:3a:a3:49:76:cf:54:66:e1:a9:be:31:7d:25:fd:a6:
8f:73:43:47:d3:6a:f0:59:ef:fd:4b:f7:cc:5b:dd:07:ef:4b:
21:19:80:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:00 2026 by rpki-client