Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
File: faSamu8hhOwLtu8P3pAcWyhBumQ.mft (raw, json)
Hash identifier: OeVdjHin/+NVadw9H/OzNRG41QHzYtvOQnSiDT0N1VU=
Subject key identifier: 24:96:9E:62:3C:FB:AD:FC:C3:3A:30:B0:CC:19:54:0C:B5:02:3B:E2
Authority key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Certificate issuer: /CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Certificate serial: 019D265FF4932CBD51BEC3738DDA8A6FF54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
Manifest number: 1074
Signing time: Wed 25 Mar 2026 19:01:55 +0000
Manifest this update: Wed 25 Mar 2026 19:01:55 +0000
Manifest next update: Thu 26 Mar 2026 19:01:55 +0000
Files and hashes: 1: CZ_vg2yMDqKVCYRK8Qle7EmywbM.roa (hash: I6MzdrErUPSCD0sk16myqhgh6+H1xFM8zE2Mja1DH0A=)
2: faSamu8hhOwLtu8P3pAcWyhBumQ.crl (hash: sCpkUdotVg58HUQEba9hLVlMH/J1jdapIj5h5TsE8L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f4:93:2c:bd:51:be:c3:73:8d:da:8a:6f:f5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Validity
Not Before: Mar 25 19:01:55 2026 GMT
Not After : Mar 26 19:01:55 2026 GMT
Subject: CN=24969e623cfbadfcc33a30b0cc19540cb5023be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:23:0a:66:aa:ca:3b:39:bc:c8:58:bd:89:3f:
28:df:c0:b1:70:31:8d:a6:05:64:94:53:cb:57:99:
63:73:78:15:13:5c:2e:90:08:a2:af:7f:ba:5a:a1:
04:ca:fe:ac:17:98:cf:7f:2a:8f:61:e5:6c:1c:8f:
cb:7f:47:0a:99:d5:12:5d:da:09:c5:b5:f8:16:54:
f7:2c:6d:7b:4f:bb:1f:33:3e:e1:c7:7e:e1:bc:df:
b6:74:e7:d6:fe:b4:c3:d2:40:b4:b9:b3:80:d8:5f:
39:58:6c:e0:03:df:e9:b8:c5:20:84:71:91:99:d7:
70:07:da:df:82:11:47:7d:8d:43:e3:03:b1:26:00:
0c:8b:e3:65:93:02:c8:7a:82:7a:f7:77:91:82:d6:
5e:81:ab:45:e4:54:e4:4b:2f:6f:87:1e:ea:ed:e8:
6a:74:fb:56:f0:a5:99:1e:60:50:29:12:1b:c7:ac:
8f:08:0e:fb:f8:78:89:bd:b7:24:63:76:e6:da:2d:
9a:3f:8f:a5:a8:07:9f:43:22:84:72:2f:88:8b:d7:
72:b7:9b:cd:72:3c:73:8a:a6:6a:3f:82:e2:53:70:
91:f2:9b:8f:27:5b:c4:c8:5d:b5:ae:bd:fd:58:91:
a9:5a:e2:bc:5a:a5:d1:1d:fc:09:d9:4d:54:34:d6:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:96:9E:62:3C:FB:AD:FC:C3:3A:30:B0:CC:19:54:0C:B5:02:3B:E2
X509v3 Authority Key Identifier:
keyid:7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a2:af:46:63:42:41:7e:db:8c:84:23:e0:cf:77:f2:33:1b:
d7:84:db:74:2a:05:a4:8e:84:fa:95:55:26:a0:18:9d:53:65:
eb:8b:d4:0a:cb:59:e4:ba:b9:45:97:ac:48:4c:6d:d9:31:f7:
0b:d3:53:3c:ac:19:4a:88:6c:aa:da:49:69:25:bc:3d:90:df:
ca:77:54:df:f0:41:9f:ab:fb:1c:c5:5f:90:68:37:01:55:96:
19:05:cd:b7:ff:e8:28:36:8d:79:02:73:16:18:61:4d:e8:3e:
fd:20:dc:ec:6f:9e:f9:7c:18:4b:f8:17:9e:02:86:b9:40:2b:
f9:25:7e:2a:55:fe:c5:70:40:3c:26:cb:40:5d:58:68:41:07:
72:bd:34:93:ad:77:b1:83:24:91:ee:86:24:6b:f3:3f:c0:cd:
02:b8:27:3b:88:dc:05:e6:3e:19:3b:71:3a:5f:5c:62:67:00:
00:12:26:5a:f6:17:2d:da:85:02:8c:85:dc:e8:03:cb:5d:66:
82:d4:cf:f9:ff:18:e7:44:41:1d:dc:21:13:6f:e1:e4:e4:07:
1c:f8:42:d8:18:c6:6d:a1:af:ac:f5:79:53:07:56:d7:f1:c6:
54:5f:7e:2b:54:53:51:7a:c1:ce:10:4d:b5:2a:fa:9a:dc:3b:
8d:a3:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:33 2026 by rpki-client