Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
File: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft (raw, json)
Hash identifier: t6kRpBWCTYnUxm6Cuk+SwbAygLe+Ejav1sCLML6MkGg=
Subject key identifier: 8A:53:4F:DE:D1:D6:6C:9D:FB:B0:67:FE:57:03:BF:BD:3E:6F:14:EC
Authority key identifier: 7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
Certificate issuer: /CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Certificate serial: 019D265EF003E112A3219069351705BFD306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
Manifest number: 1115
Signing time: Wed 25 Mar 2026 19:00:49 +0000
Manifest this update: Wed 25 Mar 2026 19:00:49 +0000
Manifest next update: Thu 26 Mar 2026 19:00:49 +0000
Files and hashes: 1: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl (hash: SvSNdy+wVK9VNk9R7EJ8VAI27JKf5C+hdb5gc4lSplk=)
2: yk4NlmsnyBCHJU5rRWtCYUNukhY.roa (hash: RTQQ5QrcW0bLs5QDvpSA/0ZM/8To3uVOT0sFVQ3EI/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f0:03:e1:12:a3:21:90:69:35:17:05:bf:d3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Validity
Not Before: Mar 25 19:00:49 2026 GMT
Not After : Mar 26 19:00:49 2026 GMT
Subject: CN=8a534fded1d66c9dfbb067fe5703bfbd3e6f14ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:60:d2:72:5c:34:3b:b9:40:ae:93:79:d4:
0d:42:6d:79:58:23:3d:4a:99:56:c4:ad:5a:ba:67:
1a:6f:5d:24:93:41:21:e5:73:41:54:4a:cb:07:3e:
a3:2e:a9:e9:14:c1:d5:27:6d:57:ab:8a:74:83:da:
c2:08:3e:ce:63:d2:6a:b7:4e:07:1d:4c:4a:2f:79:
eb:c9:15:17:54:7f:49:af:03:66:da:ae:35:4f:2e:
33:82:18:94:92:5a:20:0d:99:93:f6:26:26:73:84:
c0:a7:a2:5f:12:22:4e:fa:77:d4:0b:39:fa:fc:2d:
6d:b8:bc:6b:ca:1d:3d:a6:d0:fa:ef:69:ce:0f:e7:
4c:1c:b1:1b:91:32:93:2f:49:82:62:8c:53:2e:7f:
88:d6:b1:e0:9f:d1:3e:03:08:9f:ed:0c:fe:59:ef:
c5:0f:d8:d2:d4:87:de:21:12:d3:aa:3d:f8:a5:70:
fa:0a:10:91:6f:24:c5:af:7f:fb:e1:5a:29:8b:7f:
cc:cf:42:7c:80:54:94:3e:3b:ff:28:44:f9:2d:53:
61:2a:3d:7d:d1:c1:2d:87:b4:ed:3f:4c:e5:21:84:
a2:ab:28:9f:16:8a:bf:64:34:9e:cd:ac:59:45:68:
20:0c:dd:71:e7:0b:2e:a2:9c:ef:63:40:9b:aa:d4:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:53:4F:DE:D1:D6:6C:9D:FB:B0:67:FE:57:03:BF:BD:3E:6F:14:EC
X509v3 Authority Key Identifier:
keyid:7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:de:c3:f2:09:30:8d:75:0b:21:0b:7f:25:a3:34:20:9d:47:
f3:f9:22:8b:bb:d0:06:74:a6:30:11:2e:1a:91:54:09:4d:62:
72:30:b0:21:2d:ba:84:02:b6:74:01:6e:f6:a0:82:4c:60:8a:
dc:0d:c7:c7:38:72:45:5e:4a:79:ee:7b:92:ee:c3:0c:4e:da:
59:49:ad:35:22:21:25:cb:43:89:fc:17:41:16:ba:3a:15:5a:
a0:be:b5:1f:3c:48:3f:5c:cf:c8:2e:ad:eb:b2:f3:bf:6a:5a:
83:39:35:a7:77:79:82:90:56:a3:bc:35:f2:da:f1:e8:2c:b8:
bb:8b:00:03:9d:9d:3c:5a:67:5d:92:dc:66:87:c6:9c:dc:39:
03:be:4d:e1:2a:36:d7:e0:76:ad:71:d7:8e:cb:1e:2b:d7:14:
14:36:fc:48:b3:0c:12:5d:fc:48:c1:a0:4f:ad:8e:10:bf:e4:
2c:4b:f1:ac:01:45:79:b5:24:2a:4b:5b:60:9b:13:06:9e:13:
f3:d8:bb:ac:18:d7:5b:f7:ef:53:8c:49:d5:c8:fd:01:fa:c3:
3b:ec:de:54:89:86:86:74:2b:f9:42:7e:64:74:fd:12:ee:c1:
34:d2:db:39:65:26:9d:af:6f:77:96:66:0a:67:49:e4:2f:99:
34:ff:21:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:58 2026 by rpki-client