Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File: f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier: rYdwYkJCCJI0xeyMPtZn1o4Efe1E5J/LltVdcXo7gms=
Subject key identifier: 46:8C:3D:B7:50:7A:24:F4:F9:2C:3A:1E:CD:40:7D:73:F7:5B:F6:33
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 019D29CDC04EEA734F75B5F3FEEB96D0CCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number: 189D
Signing time: Thu 26 Mar 2026 11:00:43 +0000
Manifest this update: Thu 26 Mar 2026 11:00:43 +0000
Manifest next update: Fri 27 Mar 2026 11:00:43 +0000
Files and hashes: 1: 1-m6k8GA9p4ZvRRt_IEBX1hvXSqw.roa (hash: ampjSRymUyQsDP6vuBsTUVzHhqhSNIFHHc8gno3VuVk=)
2: 1-vjFWmfG0701a1RWTVQR-wPwzPM.roa (hash: 7mCdtNCbIcMrpoX0PSQXD/jut52p6bBvzWyqRVVXaOs=)
3: FGWSmCiFor0nTfWbxjmzYP_XTWE.roa (hash: SoNbcAzZOAbsaX1DWlnc7rcsM5HKeRW27Hbeu6b+U0I=)
4: U5mnoIrhi2-xwQ0MbfRjL_85uWo.roa (hash: MKGyp4HJxPM8RFddtv+Sf1HDZ8q6UPmk/UuasqpHff0=)
5: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: SQCya2yNsPRGPVOB0ryNBhg4DLME4JMRIS3eDpQQ49A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:c0:4e:ea:73:4f:75:b5:f3:fe:eb:96:d0:cc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Mar 26 11:00:43 2026 GMT
Not After : Mar 27 11:00:43 2026 GMT
Subject: CN=468c3db7507a24f4f92c3a1ecd407d73f75bf633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:03:11:4c:4b:b6:40:2c:be:b3:71:82:7c:
21:79:a4:51:48:0f:90:89:f5:6d:7c:ad:ba:32:21:
2c:6b:79:88:78:8b:4a:c8:0d:69:2b:0f:22:2d:d3:
6a:76:10:53:28:0c:15:e5:68:5a:d3:15:dc:f0:71:
c3:b7:a4:5c:ef:d3:44:36:a6:24:cf:e5:f2:77:cb:
68:6c:e9:8b:b4:3a:04:e8:0a:a8:bb:ec:1f:cc:af:
23:f8:fc:cd:65:eb:2d:75:42:6b:7b:d8:fc:29:b8:
55:b1:13:56:8d:64:15:b3:94:7e:93:d0:b2:1f:3b:
96:51:63:cd:e2:8e:15:80:5c:33:32:2b:bc:56:92:
6d:33:9f:49:4c:00:a7:1f:75:23:41:23:5f:ff:8d:
3e:1b:34:49:24:59:24:1f:ec:0d:74:ad:48:1c:49:
f5:dd:70:3b:29:7b:d8:da:70:b9:e2:40:18:a9:6b:
38:c4:09:3a:59:a1:83:4e:45:44:1e:2b:dc:d8:1f:
15:04:98:4a:cb:0d:9c:21:51:2d:5e:4c:c5:52:18:
0e:a1:b7:b9:46:23:a5:dd:02:57:b9:28:0c:a8:3b:
5a:76:a7:e5:bc:c3:f4:fe:21:b5:de:39:c5:e8:a1:
80:27:ee:b0:87:5e:29:57:82:5d:e3:e9:2d:3a:c2:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8C:3D:B7:50:7A:24:F4:F9:2C:3A:1E:CD:40:7D:73:F7:5B:F6:33
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c8:ae:0c:43:e8:c7:98:75:4d:37:a8:e4:35:dc:3b:f8:5c:
47:f2:49:56:45:d2:41:32:bb:73:19:b6:48:8c:59:13:83:21:
71:a2:04:32:99:7f:22:48:1d:10:77:6c:4a:cc:49:b3:46:f6:
85:29:16:14:c9:f1:94:39:29:f8:cd:70:97:65:45:97:fd:5d:
68:8c:7c:9f:ce:6e:47:83:99:52:f0:d4:bd:50:5e:1b:8a:e1:
e6:ff:ca:f7:62:13:78:60:47:8e:60:60:ba:be:28:25:c3:80:
12:df:f7:04:14:c9:4e:7f:19:ad:85:4e:d9:79:84:4b:4a:d3:
bd:ee:3f:29:f9:7e:e5:d1:7a:bd:fb:ec:bb:19:20:c5:a7:f2:
3e:de:27:70:4f:8e:21:9b:29:f4:8d:34:3a:35:e0:41:96:ee:
3a:52:39:d6:85:dd:e3:cd:86:c9:65:77:d1:e1:18:9d:51:a6:
b5:72:7c:63:d0:e6:1e:7f:4d:97:d1:e1:71:06:4b:40:bc:ad:
eb:7f:92:f8:23:b4:28:4d:24:46:e4:e9:be:0b:21:2a:15:3c:
b9:b9:28:4d:84:9c:cc:ff:58:8a:43:26:b3:80:ce:1e:d1:7b:
c0:20:7d:8b:4c:ec:7c:22:54:79:d0:bb:9c:4c:6c:64:fb:30:
17:3c:c1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:22:46 2026 by rpki-client