Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: 127aNFaDlMDpz6iEXHrapVwkYLMdETl6aebWpt3PV/M=
Subject key identifier: E8:B3:53:E7:4E:EE:01:4E:4B:F2:EE:3C:BF:FD:4F:51:1E:23:8B:1D
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 019D284D452A88F65608DE6F2AA8EBE916A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 0BC8
Signing time: Thu 26 Mar 2026 04:00:45 +0000
Manifest this update: Thu 26 Mar 2026 04:00:45 +0000
Manifest next update: Fri 27 Mar 2026 04:00:45 +0000
Files and hashes: 1: 2e8QyLYMT4HWwfUGaImHeP_tGTY.roa (hash: s9h03bDzb0Cy0LO5kY73K6dn/N9HUik5sgJSj+kQ3k8=)
2: Y28Wd-rLHaf4YfijKKoceP6pCO4.roa (hash: T4TEmypQSq/p5gS6mPa8ZhWCLwbTNsBlfya0BmZTPbQ=)
3: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: NPA+QqfBvalWA8kii8cksgHoGHLGPkh4+FH4auwB2VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:45:2a:88:f6:56:08:de:6f:2a:a8:eb:e9:16:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: Mar 26 04:00:45 2026 GMT
Not After : Mar 27 04:00:45 2026 GMT
Subject: CN=e8b353e74eee014e4bf2ee3cbffd4f511e238b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:34:64:40:6d:0d:c1:5c:ac:35:60:01:b4:
6f:4e:b0:c0:74:1e:70:a9:8a:69:99:b6:31:12:fa:
d1:ff:25:35:f3:ad:ee:07:6d:97:68:d9:5b:47:35:
7b:ef:93:48:05:9a:c8:b4:93:b2:d2:65:65:f6:d2:
26:4a:b7:18:c7:50:b2:70:4b:10:a4:6c:3a:13:22:
6c:85:69:92:9f:d4:73:25:cc:09:95:55:01:86:3c:
97:1a:d0:ed:1a:94:f9:a1:7b:80:da:74:06:7d:83:
ba:8e:e8:60:03:cc:ab:0b:80:45:07:a8:a7:32:c3:
08:79:a3:c3:62:c1:e3:16:2e:05:07:9c:8e:1a:65:
07:c0:81:4e:70:57:c0:9c:28:c2:59:c5:c0:f3:40:
6e:79:22:13:4c:2d:70:a3:cb:66:e0:82:fa:e9:c4:
65:30:ab:ec:13:9f:7c:14:d3:a0:fc:39:73:b5:ee:
f9:06:a5:02:14:f6:52:f9:92:c8:d3:c2:c1:2f:d7:
35:be:c1:ff:b1:b1:59:15:05:5b:22:5d:da:09:46:
ea:70:bb:42:61:00:e3:94:7b:63:81:eb:40:8a:1a:
44:3c:70:fa:d3:6f:4c:d8:c4:f9:88:89:7b:89:c8:
8c:0a:a1:04:83:f7:e5:89:91:f3:92:71:be:9f:ab:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B3:53:E7:4E:EE:01:4E:4B:F2:EE:3C:BF:FD:4F:51:1E:23:8B:1D
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:c8:7b:3a:1c:7c:56:9e:bf:65:d2:f7:47:7c:62:1f:cd:26:
7b:17:1d:90:b8:b7:d1:fe:7c:b3:24:87:05:3f:c0:70:cc:11:
cd:7d:22:47:81:80:e9:4c:c2:cc:8d:a8:65:78:6b:49:70:f7:
01:bf:8a:26:b2:a9:98:98:23:12:5f:c6:87:2e:20:63:df:16:
68:3b:d1:69:f3:1d:eb:4b:1c:38:bf:5d:03:a9:30:14:69:07:
cd:cf:e4:b2:fa:22:b3:26:8b:00:c2:71:ed:d4:98:c8:bd:83:
b5:79:bf:18:d6:bc:0b:42:b8:09:35:ea:b7:41:57:04:46:06:
0e:a6:19:47:f0:08:e8:95:39:cd:2e:24:27:ae:51:e9:64:76:
84:80:62:0b:da:6c:6f:c2:d4:1d:92:11:19:8e:0b:7b:1a:50:
bc:d0:dc:33:66:7e:b2:da:e6:b0:f1:b6:b1:07:28:1b:9a:51:
ca:8c:ae:82:da:c2:21:b9:1b:35:8d:db:90:cf:0c:6f:43:ec:
92:f7:75:79:f3:62:33:05:fc:20:ff:6b:2f:b7:bc:6c:ee:6c:
c0:15:a7:a1:5f:f3:99:19:cd:23:d7:ac:87:0b:ca:2e:35:c5:
56:d9:93:b4:f2:d3:2d:98:cb:4d:02:8f:3f:19:53:1d:de:49:
cb:c6:e5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:56 2026 by rpki-client