Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json)
Hash identifier: VqhfGHr+Ha7NGqxhQhz14257QFQeGTkcbfl7uONgEyU=
Subject key identifier: 30:8D:CD:37:8B:86:D9:05:B9:78:95:83:BC:79:9D:B6:A7:A0:98:95
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 019D265F0F15267A9DA2384CAF5AA427903C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:00:57 +0000
Manifest this update: Wed 25 Mar 2026 19:00:57 +0000
Manifest next update: Thu 26 Mar 2026 19:00:57 +0000
Files and hashes: 1: 4_Zg75KgBPP6BBMIFU4oYXsmHJE.roa (hash: 99GMcdSiV+hIImiUcGfIB2OPx0b9crsIvHTa4c9Qx/8=)
2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: dn02erFEEyeBYmw87kKe/yw3uPXQBpKqVtbTnb1icoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:0f:15:26:7a:9d:a2:38:4c:af:5a:a4:27:90:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: Mar 25 19:00:57 2026 GMT
Not After : Mar 26 19:00:57 2026 GMT
Subject: CN=308dcd378b86d905b9789583bc799db6a7a09895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:42:d1:f0:c3:7c:28:47:fe:a7:ec:6c:de:
8e:61:72:51:41:31:7d:5a:2e:be:ab:c0:ec:67:cc:
1f:c0:86:53:29:29:c0:6c:28:2c:93:e7:ff:35:3e:
95:1f:8b:ac:ec:28:72:40:cd:35:b0:9e:95:ff:08:
28:6c:63:56:c1:7d:68:b5:a9:e2:6b:ad:ee:36:2e:
bc:ce:69:38:90:a7:2a:a2:50:e8:26:00:a0:df:1c:
f2:e6:50:98:10:f8:5b:b0:8d:5e:b9:37:38:0a:ec:
dc:20:15:77:03:11:8e:23:88:e8:7a:1d:4f:1f:74:
b9:44:63:11:1b:16:48:74:12:53:f4:ec:f1:b2:a2:
dc:7b:4b:49:ca:9a:59:08:a6:e9:b0:b2:9b:9d:41:
f4:36:62:45:83:b6:2c:92:72:43:d3:f4:d9:3b:cc:
9b:ed:dd:6f:dc:d5:cf:01:64:05:6c:ab:82:b0:37:
ab:30:7b:33:30:b5:b9:16:7f:98:42:3d:82:00:8c:
59:d4:29:32:7e:3f:a6:7b:53:a7:67:7b:ec:b6:92:
61:ca:63:5b:ca:f1:d7:77:02:95:ce:8a:fb:dd:14:
9d:d9:2d:24:2b:64:a7:90:39:f2:03:25:29:cb:93:
d0:34:07:ed:61:12:f1:e6:38:c0:79:87:20:25:c3:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:CD:37:8B:86:D9:05:B9:78:95:83:BC:79:9D:B6:A7:A0:98:95
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:89:d5:d1:66:8b:28:67:4b:9f:d1:10:3f:e9:03:97:01:73:
47:ba:69:13:2e:55:17:92:68:c3:24:9d:ba:20:e3:5b:78:f8:
80:a2:2b:73:6e:55:25:c0:cb:e6:ba:fc:6d:7f:e2:08:72:79:
92:93:2f:a2:5b:b4:53:c0:25:a4:c0:ca:15:ad:c5:07:0c:d2:
cd:b0:bc:1c:9f:43:09:3f:b5:35:5a:d3:d1:4c:2a:af:b0:f5:
64:ab:29:f5:53:53:aa:9f:7f:64:a6:88:91:d1:71:93:38:fb:
31:e7:41:75:18:76:a0:2a:36:11:06:7c:d6:3d:10:a6:29:3f:
db:39:bb:3d:0a:53:d5:e7:89:be:8e:fc:79:de:d2:2d:2c:87:
c4:e1:b9:42:8e:24:5e:b1:a3:ce:dc:91:23:1a:86:cf:76:85:
dc:28:f1:87:2f:77:29:36:ee:7c:91:76:73:d9:5b:33:e4:25:
db:23:b3:d9:9d:60:e0:45:8c:e4:00:2f:5f:99:a8:88:7b:44:
87:f6:78:3f:84:62:98:f6:e5:8a:e6:d5:5c:38:60:b4:a5:81:
02:f2:61:59:d2:17:9c:3a:3e:0e:0d:b2:82:d6:6d:04:4c:17:
10:f0:87:dc:16:c3:1f:df:ed:0a:60:a8:7b:30:7c:90:ba:58:
8e:84:85:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:42 2026 by rpki-client