Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
File: fmT8p3Ppn2rcgao85cY2I-4rHdc.mft (raw, json)
Hash identifier: 3y41dx1xIFxCzYHjEvRqtnhkJYM6HTGIGVZNlmFqwUs=
Subject key identifier: C6:4B:DB:88:51:85:A7:D0:80:C9:97:84:51:17:20:59:D3:B9:74:A0
Authority key identifier: 7E:64:FC:A7:73:E9:9F:6A:DC:81:AA:3C:E5:C6:36:23:EE:2B:1D:D7
Certificate issuer: /CN=7e64fca773e99f6adc81aa3ce5c63623ee2b1dd7
Certificate serial: 019D2884B2D72224FFEA17B4395B36C5C2F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
Manifest number: 0190
Signing time: Thu 26 Mar 2026 05:01:18 +0000
Manifest this update: Thu 26 Mar 2026 05:01:18 +0000
Manifest next update: Fri 27 Mar 2026 05:01:18 +0000
Files and hashes: 1: fmT8p3Ppn2rcgao85cY2I-4rHdc.crl (hash: uj8UiioN0TaDcdiS7/ffGqhQDi041KlMHGcZhhyWfLk=)
2: y_GQcAQDbkFTHL71hHYsT9LG7hc.roa (hash: 2J6Fy5jG8JnfTzvk3RxBPKppQZeZ6SvRqxBPKKzZurU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b2:d7:22:24:ff:ea:17:b4:39:5b:36:c5:c2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e64fca773e99f6adc81aa3ce5c63623ee2b1dd7
Validity
Not Before: Mar 26 05:01:18 2026 GMT
Not After : Mar 27 05:01:18 2026 GMT
Subject: CN=c64bdb885185a7d080c9978451172059d3b974a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:43:63:1e:34:c5:ab:a5:aa:27:de:c7:9e:
f1:9f:1e:0d:5f:60:67:42:cc:e6:d6:1a:ea:4f:87:
ed:6c:98:00:4c:72:f7:d4:5b:ba:31:bc:86:91:3c:
7a:f9:0b:64:a1:16:b4:31:e2:e4:38:8c:29:da:69:
1f:6b:fe:34:6a:68:7e:36:6d:70:c1:27:62:7d:3e:
bc:92:94:7a:fe:93:1f:31:6a:3a:a1:0b:27:9f:6c:
86:4a:10:65:0f:37:ff:de:53:85:00:47:c5:7f:77:
b5:9e:c5:b7:29:10:fa:a4:4f:5c:2e:ff:57:7a:47:
ff:18:6c:d1:bc:7c:c0:0d:21:fd:7c:f7:19:b9:e8:
3a:b7:62:70:65:ea:30:b4:2a:9e:fb:d0:e8:fd:dc:
02:be:fc:be:19:44:ed:2c:7d:30:9f:ca:98:d3:2b:
01:99:b4:16:2f:1b:ea:83:59:d8:62:80:6c:f4:31:
b3:ea:5b:5b:c0:7d:5c:58:bf:58:c1:de:37:f5:46:
48:a8:79:c4:7e:82:fe:5f:fb:c4:a0:77:16:10:42:
8f:68:62:83:a7:de:f2:84:c6:9b:09:a7:f4:fa:f5:
13:a6:9b:f0:af:8a:fa:10:cb:73:66:34:eb:8a:b7:
79:dd:e2:a0:5a:c6:60:36:00:e5:0b:e0:b5:70:63:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4B:DB:88:51:85:A7:D0:80:C9:97:84:51:17:20:59:D3:B9:74:A0
X509v3 Authority Key Identifier:
keyid:7E:64:FC:A7:73:E9:9F:6A:DC:81:AA:3C:E5:C6:36:23:EE:2B:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmT8p3Ppn2rcgao85cY2I-4rHdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/480d36-d1fd-4eeb-b9b8-c52dfb289843/1/fmT8p3Ppn2rcgao85cY2I-4rHdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:7e:15:4c:20:3d:13:65:16:3e:16:68:b1:74:fd:51:0f:06:
05:6e:0e:03:86:65:f5:da:de:7f:b0:00:a6:28:44:f4:2e:08:
a2:59:7b:e9:c6:17:8b:6e:95:2d:bb:95:eb:60:c1:08:09:41:
70:d0:62:69:f4:10:75:ce:50:80:e2:e5:0e:ac:ce:db:73:70:
f0:d7:9d:e4:33:23:e0:55:a0:13:a3:3d:23:03:50:08:fd:ce:
f7:eb:fa:1e:82:4e:5a:81:c7:8f:1b:1a:35:a8:dc:77:4e:ba:
1a:dc:b1:ba:c7:56:a4:25:c9:01:45:b1:c7:27:88:e6:bf:81:
19:3f:d3:38:15:d1:07:13:c8:a1:59:4c:9c:3f:57:bc:1c:74:
61:18:b4:fe:24:53:17:23:18:0f:f8:75:ae:93:e3:7b:67:81:
6f:b4:1f:cf:e2:9f:cd:7a:c3:63:b9:16:8c:8d:5f:37:a2:32:
89:6a:49:d7:14:b8:be:0a:75:c2:20:f1:0a:5a:69:53:ce:8d:
d3:3e:2f:7f:de:2c:40:51:7e:85:12:f0:5a:52:27:7a:eb:aa:
7b:2a:ba:84:51:91:88:f7:b6:8e:a1:37:a9:3d:9f:42:21:d4:
80:97:ec:82:86:2c:21:78:5e:7f:84:bc:6a:6a:af:7f:2a:c8:
77:93:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:32 2026 by rpki-client