Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: HBW9FkQRxIEPJPPLcS2F3nlmgfnOuqKIEEqMaNLU9Vg=
Subject key identifier: 3D:B3:FB:24:A9:BF:49:EF:9F:29:DF:13:CF:7E:BD:E3:B9:A8:30:99
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 019D26CD675EC177952A656B0C041AE77BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 083C
Signing time: Wed 25 Mar 2026 21:01:28 +0000
Manifest this update: Wed 25 Mar 2026 21:01:28 +0000
Manifest next update: Thu 26 Mar 2026 21:01:28 +0000
Files and hashes: 1: JuhHdC_-wskYknvP7LIY1ggd8So.roa (hash: Qx3w+8OYL4pNm6xzXbZj9QOdHwp0WRkNESd9pe1uoik=)
2: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: p4afIWWxANkUUFAqpvZ3em3s9jTbKaHdQsbppF3vT2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:67:5e:c1:77:95:2a:65:6b:0c:04:1a:e7:7b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Mar 25 21:01:28 2026 GMT
Not After : Mar 26 21:01:28 2026 GMT
Subject: CN=3db3fb24a9bf49ef9f29df13cf7ebde3b9a83099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:bf:e1:30:18:35:4c:c6:25:de:8e:73:ff:
f9:f7:52:9a:ea:09:bc:e4:2c:75:fe:e4:1a:70:79:
9c:b9:d1:d7:9e:66:06:93:d6:44:6b:53:b5:93:de:
b6:a9:0d:50:6b:de:27:16:60:44:cb:26:40:88:3f:
ff:bd:90:94:4d:1c:f5:fb:5c:5c:e7:aa:5b:4d:be:
cf:8d:30:61:85:1f:24:68:15:ee:83:4a:87:56:99:
1c:cd:74:49:6d:59:75:1f:f8:9f:a4:26:73:7e:23:
e0:bc:b0:bd:bb:49:5c:be:40:80:30:7c:97:77:ff:
74:cf:85:a7:c8:e2:87:36:20:24:ee:fe:c2:a9:f5:
fb:41:c4:e9:c2:45:c2:23:39:72:fe:38:e0:e1:24:
12:5c:53:8d:1b:2b:99:29:e7:52:14:fc:61:3e:5b:
b5:cc:17:ee:7c:9c:0f:8e:f5:54:2c:8a:10:47:f2:
3b:9d:1e:17:2d:f7:bb:0e:02:ef:cf:7e:d8:92:df:
77:47:be:b2:56:55:22:71:22:38:fe:9f:98:45:07:
29:de:bc:33:87:39:4d:fa:7f:6d:a9:f6:8d:16:93:
cf:0c:52:e5:bc:a6:5d:2f:23:d0:3f:7b:6f:da:28:
f1:9b:e1:1d:f0:e5:24:99:be:ae:89:e2:b2:c1:c5:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:FB:24:A9:BF:49:EF:9F:29:DF:13:CF:7E:BD:E3:B9:A8:30:99
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6c:3d:0a:36:42:9c:7a:da:8d:ef:27:02:2e:54:8d:20:30:
2c:07:4d:50:0b:f1:a3:e6:9c:23:37:b1:9a:90:61:db:cb:e7:
61:a6:a3:3e:d6:50:bf:86:90:57:51:3b:c6:17:eb:fa:d5:be:
c1:6d:78:61:2b:69:4d:f5:48:8c:9f:3a:05:19:a3:34:43:ce:
32:8b:a6:bb:07:81:88:9a:e4:af:6e:27:84:c7:ce:b7:22:e2:
a9:55:21:3b:b5:76:38:67:ce:21:88:d1:0a:7d:a6:75:91:27:
a2:42:9a:8e:37:ca:03:aa:b7:67:53:0d:79:d8:0d:0f:67:93:
05:01:2c:10:80:27:e9:b1:ba:14:d2:ce:b1:fe:21:23:85:a7:
d0:95:2a:9d:31:ec:96:20:4b:76:29:d6:c9:21:69:4a:2f:50:
07:51:53:02:39:f0:7d:c5:0a:db:35:cc:c0:ee:e3:df:16:7a:
17:f6:99:96:1d:16:7f:48:8c:26:1f:10:0c:84:d2:ec:a2:ff:
67:23:e1:03:9b:f9:85:04:5f:db:d4:53:a4:67:1d:28:59:5e:
ff:de:66:4a:24:b2:52:f9:5e:3c:5b:99:df:eb:7f:ab:4c:37:
7c:06:c8:9f:46:27:0a:0d:e6:a6:6e:a3:dd:7b:64:cf:df:6a:
f5:b1:f6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:09 2026 by rpki-client