Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
File: fQIT4-fr5hcKNgCo465k7ZYsDjY.mft (raw, json)
Hash identifier: C3WR2cyZY83nRJ6GcsEd/oos+7QBn36vAEbb75d5HJo=
Subject key identifier: D5:08:28:FC:CE:AE:30:5A:9B:ED:3B:A1:90:0A:6B:5B:3F:E7:7D:E1
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 019D29CE3A238F9F474F3DC6E8A5CE7A9861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 11:01:14 +0000
Manifest this update: Thu 26 Mar 2026 11:01:14 +0000
Manifest next update: Fri 27 Mar 2026 11:01:14 +0000
Files and hashes: 1: 8mYnwPPngR-PMvu9tntxkQrpjBU.roa (hash: gs4c5pa5HsSzbr92Urun83Sz17ig55fUVnSLHCT6Pl0=)
2: NgInVtAHMreH53P9jHmt7vV8ROI.roa (hash: 3o6J8Rv7A+CtaTLXPKzNamZNxxA0DNgBYBZMGeJZkT0=)
3: ev61j1ETJKk5VTID5YU7MOsFe84.roa (hash: P+WHtpS/MvLBEjeUqUtw7IInlpfrcmeIpjpxR4JzIUQ=)
4: fQIT4-fr5hcKNgCo465k7ZYsDjY.crl (hash: oUNseIFCfmElNdMVCZE3KJ7XYTKutH9ndwdJpIQcUYM=)
5: fyWRANpRoqeTmMgwxxTBsFFZnMY.roa (hash: t4RXiNmmepJT85iqvMqKzSioWGcB44BZ3P+zt4egwH4=)
6: tctjfvEK8lIPOjwUvqqkMwO89Sw.roa (hash: 7VLR3lYq1THF3pPz4Meczlt3X6WQU5Q9fRxXqj/nnGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:3a:23:8f:9f:47:4f:3d:c6:e8:a5:ce:7a:98:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Mar 26 11:01:14 2026 GMT
Not After : Mar 27 11:01:14 2026 GMT
Subject: CN=d50828fcceae305a9bed3ba1900a6b5b3fe77de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:49:fe:b1:95:b8:19:1e:51:de:7d:83:d3:
b9:66:70:f9:d9:1a:bc:77:01:48:d4:3f:6f:40:f6:
e8:f9:6b:65:2f:2f:92:89:07:f9:4b:de:a8:44:7c:
c8:d1:9d:fd:bd:dd:4d:c8:57:1a:5c:36:e2:8e:c8:
6d:8f:b2:88:30:7c:12:2a:3b:33:03:fd:3c:75:7a:
ef:2a:71:ed:22:c0:73:b0:7d:7c:80:84:7c:2a:7c:
2f:a0:ce:90:9a:57:ed:c9:fd:b2:3d:26:62:d6:26:
cc:ec:4a:6d:6b:6f:5e:0e:76:8c:c8:e0:37:70:22:
5c:d3:a0:0c:fe:25:21:bc:d9:fd:5a:4a:c4:03:a8:
dc:4d:23:fd:c6:18:e0:2f:2f:89:48:26:8e:17:5f:
a7:ea:f9:c3:f7:b2:4e:c8:17:b8:33:01:72:33:74:
41:2d:b4:ab:4a:f2:13:f4:cf:6b:0a:60:34:d3:e5:
d6:35:3b:a4:ab:3c:80:49:38:37:bd:ce:4d:38:40:
8b:bd:ec:54:a2:bd:46:7b:70:1d:03:4a:1b:ba:6a:
9c:45:fd:4a:5e:41:35:6a:58:84:64:12:ce:7a:01:
6e:5d:b1:7c:3d:47:6c:6b:32:2b:56:b2:54:09:b7:
33:d1:9a:9f:19:ca:22:0c:61:74:c4:0d:80:df:fb:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:08:28:FC:CE:AE:30:5A:9B:ED:3B:A1:90:0A:6B:5B:3F:E7:7D:E1
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e0:8e:a8:97:be:95:ea:02:2f:61:9d:e4:64:98:40:d6:aa:
a4:2b:49:0f:fe:a2:3e:21:d4:0b:fe:c3:d8:3e:a4:cc:04:0f:
80:e7:df:7f:5c:47:0c:5c:47:e7:3a:d0:85:a4:4b:65:5b:aa:
01:42:51:b2:64:dd:c2:91:fe:39:f2:a6:ba:d8:78:39:c2:f3:
98:4f:8f:7f:15:74:1b:6a:8b:b0:5c:7e:fc:02:40:89:bf:07:
81:26:ff:ba:f8:a0:a1:78:da:28:af:8d:a7:40:a6:30:f1:90:
7a:fe:dd:2b:05:ac:f6:f6:3c:c4:c0:2c:47:ab:ab:5d:77:40:
59:2a:ab:82:da:bc:76:85:93:7e:cc:1c:ec:5e:72:7b:78:32:
21:7e:df:ba:37:8a:a4:bf:17:0f:cb:9f:45:f4:e1:65:64:72:
3e:49:b7:a4:83:62:31:90:fa:10:bb:04:12:17:59:2e:db:64:
93:7d:de:7a:72:02:d8:db:3a:2a:7a:ef:4c:2a:91:dd:36:17:
a9:53:30:cd:0f:de:3f:9c:ee:09:ad:92:e0:bf:cf:e5:16:c0:
92:39:8d:a4:c3:19:d9:fa:b0:d3:e1:30:c0:35:06:37:ad:69:
9b:5e:1e:c7:dd:3b:a9:37:f4:2a:3c:4f:ab:66:1b:fb:f4:6a:
a7:50:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:26 2026 by rpki-client