Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File: fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier: 1uKHnTjYR7cwhq3Vg3FYJipyinWteGPfCZZkChNik14=
Subject key identifier: D2:D8:69:45:13:42:5C:0E:50:CC:A3:E6:5A:EE:84:0E:2F:B1:21:C1
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer: /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial: 019D28843054CC0371ABB4E96926A6BDDB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number: 0960
Signing time: Thu 26 Mar 2026 05:00:44 +0000
Manifest this update: Thu 26 Mar 2026 05:00:44 +0000
Manifest next update: Fri 27 Mar 2026 05:00:44 +0000
Files and hashes: 1: 70GrOh32dQLUqU95-AO2TD0BpWg.roa (hash: JinzzeihpLTiA6O6jFrNum74gOx6URavCLmJpxWV2cM=)
2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: ACA4ZHk9kMNKTPckmEVLZRBIxFddx9Dd+q3vG/PZ3Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:30:54:cc:03:71:ab:b4:e9:69:26:a6:bd:db:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Validity
Not Before: Mar 26 05:00:44 2026 GMT
Not After : Mar 27 05:00:44 2026 GMT
Subject: CN=d2d8694513425c0e50cca3e65aee840e2fb121c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:ed:ab:d8:d3:26:e5:b6:71:1a:db:c4:23:
c7:9b:9a:41:9d:81:c1:22:35:63:cc:97:5a:dc:6c:
0d:88:68:cc:7a:69:b4:77:15:44:06:b9:9c:ad:bc:
4b:ef:a7:8b:28:4a:53:16:60:6c:e7:ac:7a:61:91:
89:75:30:bb:5c:7a:e1:88:f0:bf:eb:d3:a7:6d:f7:
f1:97:f5:44:5b:dc:8c:71:4d:86:24:4f:62:17:cd:
fb:ee:fd:3c:bb:75:f2:5f:37:d3:c7:fe:ff:e9:7e:
94:68:ea:cc:01:c5:f1:ef:77:8c:02:72:0e:6d:41:
c1:82:98:07:34:5f:41:be:d1:e2:ff:a7:03:06:a6:
2f:3d:2c:db:0b:e1:bf:31:38:a0:db:1c:77:cc:86:
94:b4:24:88:04:d3:ff:3d:0f:9a:80:c6:e4:04:60:
2e:05:8f:8a:f2:d8:ab:fb:61:39:11:e6:65:45:fa:
37:49:75:d2:c2:0e:56:6b:f8:b4:dd:6b:86:b4:57:
90:ac:ae:4c:0a:b5:14:15:18:0d:93:a9:84:d7:b1:
fb:d9:af:c7:cc:2b:15:cb:cc:89:27:30:1d:77:58:
0e:01:21:44:70:ee:ca:35:41:da:97:04:f0:11:eb:
e6:2f:dd:04:5f:4b:4c:91:73:ee:91:72:3f:03:68:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D8:69:45:13:42:5C:0E:50:CC:A3:E6:5A:EE:84:0E:2F:B1:21:C1
X509v3 Authority Key Identifier:
keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:36:eb:3c:81:82:00:4d:7b:fd:f6:9f:74:da:26:ac:9c:cb:
03:02:99:f3:00:65:ff:21:f6:65:43:9d:0e:51:d6:8c:e5:55:
67:f0:2d:57:40:be:0c:ec:3e:b6:4f:16:dc:ed:91:73:a8:eb:
f5:d3:ec:33:20:2a:48:51:b0:a3:eb:57:c5:48:99:73:0c:04:
5a:fd:b2:c9:01:63:ce:62:70:25:00:57:48:f7:7d:fe:a3:e0:
16:45:21:9f:af:05:9f:40:20:96:83:35:de:e0:3f:66:16:d2:
15:0d:e8:8d:f0:85:e1:55:c3:c8:2e:12:58:89:51:11:71:0a:
56:7b:d2:76:a5:23:db:84:73:b4:c2:a9:66:5a:fe:d1:b9:cf:
a3:2b:e9:be:e5:66:89:35:6a:c6:ff:0b:b3:33:20:fc:f9:70:
03:0c:a5:1d:ca:f2:99:23:0e:e1:ee:06:77:ee:24:64:af:09:
c3:d0:c7:1a:09:ee:a3:52:00:fe:44:43:8d:23:6b:3e:8c:9f:
bd:dd:93:4a:30:53:a5:19:bb:93:71:f8:93:36:67:49:fa:bc:
d1:24:57:c3:b8:99:95:df:ad:3d:2b:53:06:bb:45:76:72:c1:
ce:b1:6f:a7:1f:e2:d3:a2:ca:4d:b6:a6:04:a2:be:97:00:e4:
21:91:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:27 2026 by rpki-client