Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
File: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft (raw, json)
Hash identifier: KkETC4s47pj+1yUiFb413IRo2uPf6Vf9bI1h+v0CSFU=
Subject key identifier: A5:30:66:01:C6:60:F2:5F:E1:23:9F:77:26:89:7A:11:8A:13:B5:DB
Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
Certificate issuer: /CN=7fefebd15fbc651487acaf67424f4783d43eb420
Certificate serial: 019D2772713C31792CE8790E99EA1FAD83F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 00:01:44 +0000
Manifest this update: Thu 26 Mar 2026 00:01:44 +0000
Manifest next update: Fri 27 Mar 2026 00:01:44 +0000
Files and hashes: 1: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl (hash: RvOmdf1jxNy/ns1Qr/CokZOPy4SqMiZSytzwPADuY/I=)
2: nbgsIdOFr6eSTX9n5mSxnK56XVU.roa (hash: BbmjDJDvgmASQXcqB1mf/02nh+XMUKFVlhCTg+r8w7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:71:3c:31:79:2c:e8:79:0e:99:ea:1f:ad:83:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420
Validity
Not Before: Mar 26 00:01:44 2026 GMT
Not After : Mar 27 00:01:44 2026 GMT
Subject: CN=a5306601c660f25fe1239f7726897a118a13b5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c7:f6:c4:ef:78:d0:88:63:50:ad:82:b7:71:
c0:d0:36:a1:67:f3:87:88:52:11:dc:59:22:e0:e2:
24:ce:f6:ac:0c:83:2d:92:da:66:ae:33:bb:34:0e:
1b:ff:e6:49:71:75:ae:65:08:30:df:b0:ff:f1:e1:
3d:98:de:13:3a:05:24:a8:67:ef:4c:77:4b:f3:13:
f8:7d:07:da:a5:77:a7:95:9c:ca:8e:55:5f:a6:45:
2f:23:cd:51:b1:e4:c3:8f:a9:f7:6e:94:20:5d:09:
af:3a:0e:01:e1:cb:30:7a:8e:de:a1:63:84:77:4f:
45:72:64:73:c4:b1:ff:99:3b:da:6a:8b:94:0c:ec:
02:9f:b6:01:0c:ab:af:d3:ef:4a:b7:c0:7a:81:79:
f9:a7:e2:29:66:74:ca:f2:68:bd:d4:0c:47:c8:d8:
20:01:f3:21:93:c0:c6:b1:54:39:74:11:ef:90:45:
f2:dc:67:91:67:a0:64:43:9b:90:10:ed:7f:6b:cc:
b6:b5:86:75:4a:40:e5:66:ea:48:f7:46:60:53:66:
f8:d5:8b:68:60:a2:35:eb:5f:90:f5:5d:53:bf:ba:
5d:72:58:f5:c9:c1:77:12:4b:44:2d:6f:82:3d:a7:
73:d9:4a:1f:a3:7c:b2:0e:ca:9e:c1:0a:40:13:68:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:30:66:01:C6:60:F2:5F:E1:23:9F:77:26:89:7A:11:8A:13:B5:DB
X509v3 Authority Key Identifier:
keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c2:73:36:89:25:29:60:76:30:4b:d5:e6:e4:c2:f2:df:ee:
5b:00:09:36:00:47:fd:0e:88:b2:bb:3f:2b:c8:68:9a:40:2a:
d0:0e:d6:99:8b:8e:7b:d2:e8:1f:26:d7:d4:a0:2d:4b:c9:de:
e7:ad:d3:fe:ad:af:b6:3a:7b:c7:8a:c6:d1:b5:6e:5a:66:e8:
b5:c1:27:4b:65:19:34:68:d1:30:a6:aa:8b:4c:f3:46:67:83:
27:b8:04:f2:bf:42:62:8e:a7:79:3b:bc:75:c7:e0:b7:6a:a4:
9e:39:52:a6:16:b4:52:74:eb:f7:6a:20:46:d1:90:ac:39:dd:
f6:79:32:5c:69:28:1b:77:76:d0:76:91:e5:3b:cb:08:06:db:
0c:1d:fd:c5:f6:5d:ac:f4:67:36:00:9d:34:ff:72:09:16:31:
22:d3:81:ca:f1:1d:7f:52:eb:88:f9:c3:f9:25:6e:c4:31:1b:
26:d2:0b:dd:db:02:52:95:02:fb:6b:07:a3:2d:95:25:d7:d8:
7b:03:89:ff:84:f5:18:d0:db:b5:89:b6:e3:6b:28:d4:da:fb:
da:51:e4:e2:eb:8b:28:a8:7e:f7:4c:cd:a2:ea:b0:29:f3:1d:
03:00:7e:77:ee:78:cf:9f:e8:5e:f4:b6:20:c9:a9:ac:b2:0f:
12:e4:ee:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:56 2026 by rpki-client