Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
File: Urq202DpPZj86eeIjlZL1GTonoo.mft (raw, json)
Hash identifier: ioGRLbPHEl2HCBxNiWODeH5xKlENo7BL8nk4lSUXpas=
Subject key identifier: 32:FC:75:E7:36:C6:8C:FD:81:8C:AC:3C:79:FC:35:2D:F7:DA:33:6D
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Certificate issuer: /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial: 019D2696335F16B8FA0FD2C2DF39115AC45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
Manifest number: 0FAC
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: HmMFuzQNmbuZacVxvlbBqRTgz2I.roa (hash: dzW9UbNndqVVsySGnumWtM53MKNfGkprvjPA4eQ4mlc=)
2: Urq202DpPZj86eeIjlZL1GTonoo.crl (hash: ILn9YbmGq/xi2uUkHsQQZbO/MkLLcvVgeC9RHA/irWE=)
3: tO5f34WcoDArj17_Kk9xK3LJajY.roa (hash: d5gEfnb2Ch2gcnS6kpVQ8XNJ465jpkE6vmZy39qjV3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:33:5f:16:b8:fa:0f:d2:c2:df:39:11:5a:c4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=32fc75e736c68cfd818cac3c79fc352df7da336d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:03:75:01:eb:15:c3:20:ac:ce:e8:99:e1:
d5:44:1a:55:03:fc:be:c7:4a:ea:88:54:fc:1d:63:
ed:ce:b3:55:c2:1e:f0:6d:f6:a0:72:e0:9f:fc:cd:
8d:cb:0b:c4:79:1e:08:80:b6:82:97:2e:e5:e0:b1:
9a:95:61:96:0e:70:0a:9f:bd:7e:90:e8:25:08:a3:
ae:fd:fa:9f:5b:d8:8e:cf:3b:aa:01:27:f2:89:ae:
94:8f:6a:4f:05:35:1b:12:c6:e8:6e:f6:39:f4:87:
c8:38:dc:8d:bb:2d:57:f1:e3:38:0d:bb:09:25:e1:
df:61:17:fc:a3:21:94:e5:57:67:e4:01:2d:c2:29:
2d:f2:7f:d1:55:73:fd:2c:1b:70:e2:12:42:04:5f:
cc:40:a7:0f:10:84:0a:a4:68:54:54:65:61:ba:e2:
d1:43:7e:0b:56:aa:02:df:80:7a:26:44:64:a8:bb:
2b:7a:ed:b6:3a:5a:c4:d0:11:8d:32:03:8e:c1:d6:
89:97:7c:eb:2c:5e:e6:09:38:c2:36:62:23:f8:fe:
3e:2b:97:fc:de:88:59:b9:f4:6a:d6:dc:59:66:58:
03:34:16:da:c8:8f:75:34:aa:28:fc:17:2e:bd:63:
5d:39:1b:be:46:65:90:fb:1d:de:04:b0:d0:d0:ce:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FC:75:E7:36:C6:8C:FD:81:8C:AC:3C:79:FC:35:2D:F7:DA:33:6D
X509v3 Authority Key Identifier:
keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:36:ba:58:e3:43:94:dd:61:b7:a6:f2:17:a9:5d:99:d7:48:
46:0a:26:a6:d1:4e:aa:f0:88:d1:34:1f:ad:b3:38:85:dc:a0:
3d:8d:12:a1:39:12:41:99:52:5c:3c:39:88:b2:e1:d2:56:d3:
8d:03:41:78:c3:92:f3:2a:d3:5c:1c:ad:24:2f:95:74:f4:31:
b0:40:3f:9f:02:e9:dc:33:73:bd:f3:4c:14:7a:0b:f4:57:ec:
ce:9e:89:23:1a:da:be:1e:d6:7e:42:25:fe:ea:18:52:02:18:
5c:21:45:31:db:c8:e0:1d:9c:bf:61:d3:da:bf:2d:d1:17:19:
02:4d:4c:14:11:21:f5:fd:26:13:90:7b:26:15:4d:de:75:e8:
6e:99:c1:00:63:54:0b:a0:74:9f:f4:be:9b:30:8e:bb:c8:c8:
1c:d7:af:6d:a9:10:76:33:a8:45:ba:a8:3e:ee:e8:7c:af:0f:
b8:34:f1:2c:03:41:16:49:49:d2:94:07:fe:8f:b8:c3:3c:74:
04:51:9b:7a:72:0f:37:10:4d:79:31:81:b2:fd:57:c6:d0:37:
54:f5:e8:ef:11:75:62:93:47:f4:56:22:6c:00:ef:57:b3:7d:
0c:59:de:94:3a:05:58:26:6d:35:c2:a0:b2:db:22:b5:db:9c:
26:21:ba:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:22 2026 by rpki-client