Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: 6T9PauHHLP7L09RmtkoZR/aVcaJN30xS5qF4c1IE5s0=
Subject key identifier: 3F:F0:C9:85:79:42:1D:AC:A2:42:45:50:48:1C:41:9F:72:F8:5B:F8
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 019D2816F6E71CC37CA82FB0872D987AF94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:26 +0000
Manifest this update: Thu 26 Mar 2026 03:01:26 +0000
Manifest next update: Fri 27 Mar 2026 03:01:26 +0000
Files and hashes: 1: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: 8nJYxObPODGl9EwnQzx1odh8FknUfpxkKQRGHzx/MiY=)
2: uTfCO2CQvjnwzxgvmE8a-0Q3PkE.roa (hash: uXLhOjnuwZec+7he1bSLRYP9Be1CjyK6Z98Hp44cEVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f6:e7:1c:c3:7c:a8:2f:b0:87:2d:98:7a:f9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Mar 26 03:01:26 2026 GMT
Not After : Mar 27 03:01:26 2026 GMT
Subject: CN=3ff0c98579421daca2424550481c419f72f85bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e2:71:7d:3e:0b:58:aa:64:df:16:4b:14:c2:
94:59:29:7b:05:ce:22:af:2b:d8:1e:f9:df:30:0b:
73:8c:1b:5a:f9:b7:d0:e7:91:17:10:33:98:78:28:
7c:b6:97:a6:8f:86:51:94:bf:af:0f:eb:b0:57:fb:
a0:0c:30:52:cd:83:46:11:60:36:c0:e1:6b:e8:bf:
c1:4d:5f:e8:fe:af:e0:db:ce:ed:78:83:a2:23:1e:
be:84:3b:a7:f6:8f:35:cc:69:86:81:7d:92:25:08:
b3:9e:e5:d9:0d:4b:70:4e:ed:0b:f5:a0:01:2f:30:
61:b6:f0:53:a9:91:97:9e:fa:f9:a9:c1:ed:06:1c:
ff:3b:7b:c7:21:37:f4:52:e1:f3:b7:bd:db:2f:64:
d4:99:11:47:92:b1:f6:7e:de:0f:19:01:02:d9:27:
46:ba:ce:ff:fc:28:9f:5c:7a:d0:f4:19:05:c9:18:
ef:03:26:a2:e6:74:3f:7c:ce:6a:c7:b2:41:7b:54:
2c:1c:c6:d8:22:dd:a5:0b:7b:a7:27:b1:cc:35:17:
18:17:7f:2a:69:04:58:a0:0d:3c:70:d5:df:2a:75:
e7:41:6b:f3:16:e8:8e:99:58:5b:ce:2f:17:34:fd:
ee:35:1a:1c:73:72:a9:78:85:35:d5:22:27:70:5c:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F0:C9:85:79:42:1D:AC:A2:42:45:50:48:1C:41:9F:72:F8:5B:F8
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c6:36:02:78:38:9e:68:e6:e9:7d:f1:12:4e:42:e6:a9:f2:
79:5a:10:27:99:49:92:ce:79:a3:7e:87:35:9b:b1:47:b0:65:
44:eb:91:60:ab:77:4a:10:ec:2e:7f:04:47:a3:87:bd:69:28:
69:04:3c:96:b9:57:c2:6f:a7:a6:4c:57:ca:44:cd:b7:f3:2f:
4a:4d:38:45:22:1b:d0:3c:72:14:2c:8d:0a:cd:e9:f7:a8:bc:
b0:b3:d8:78:3a:fb:11:fe:af:80:cf:38:03:34:b7:70:0d:d3:
4b:2f:a4:e6:f8:7b:b3:81:b4:4a:f1:af:2c:ee:7b:3f:4f:fb:
5e:be:e4:be:87:e8:81:e1:b3:d1:a5:07:14:9b:1f:5f:4a:2d:
5b:2d:9a:5f:6b:1c:86:4b:26:cb:89:2b:81:0f:0b:78:9a:34:
9e:b8:1f:ce:79:ed:33:6b:b1:a9:50:a2:80:07:fc:6e:1c:7d:
53:d1:4e:7a:15:ce:39:f8:25:f0:06:b8:ef:26:a7:8f:4d:dd:
d3:32:85:d8:34:21:8d:f4:14:74:55:42:ec:4f:db:9c:3e:29:
42:ed:54:de:f7:56:dd:4f:09:0a:59:f0:a3:5b:17:e2:4a:45:
c4:68:dd:e2:13:75:32:15:d0:1e:28:92:9b:ba:0b:55:3d:d5:
4e:a1:73:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:54 2026 by rpki-client