Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: +VID6J8kbDndL+C6xjiBaKPSSoCW6ufwWxPdROb+1qc=
Subject key identifier: 20:50:43:2D:A7:72:5C:3B:76:03:A9:04:E1:5D:62:26:72:C1:BA:F4
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 019D26CD4F441B5457F5D1683F60D2542DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0FD9
Signing time: Wed 25 Mar 2026 21:01:22 +0000
Manifest this update: Wed 25 Mar 2026 21:01:22 +0000
Manifest next update: Thu 26 Mar 2026 21:01:22 +0000
Files and hashes: 1: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: W7kAKMnUE2UO0jYxGH42X3uAd+wNLgqTXAHWPJonork=)
2: aZfqaIa_bktc0XTanoEHKkOjRso.roa (hash: mjs8YYHIWn4rHP7Qb2KDD/bwrim/6L1hngAF7LoemgM=)
3: p-AfH-TKOfnhGj7blmBf1Eou-vY.roa (hash: zP2xRRGKuJXHvcRgKn99qh8Cqni6s2W90yR9ji222a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4f:44:1b:54:57:f5:d1:68:3f:60:d2:54:2d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Mar 25 21:01:22 2026 GMT
Not After : Mar 26 21:01:22 2026 GMT
Subject: CN=2050432da7725c3b7603a904e15d622672c1baf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:2b:01:a5:21:8e:34:d4:db:f8:70:17:a4:
41:fc:22:ad:ab:65:db:36:58:04:11:b8:7a:90:5b:
69:b8:d1:1d:38:c2:54:3d:a4:1d:43:76:c4:a2:e1:
fc:0e:19:4e:1f:f7:de:08:a0:bb:94:25:86:06:d7:
94:c7:2f:22:ed:9c:7f:aa:29:63:4b:7c:6c:6f:ca:
57:82:c5:3d:fd:05:dd:e1:ee:19:d9:c4:5f:11:70:
ad:51:55:a8:57:9f:54:f2:b0:e9:4a:08:d1:7d:c0:
53:85:e8:51:94:60:89:83:33:71:31:e7:51:3a:07:
3c:c4:ed:48:50:4a:66:48:e0:3b:bb:32:f5:57:13:
57:5c:61:98:ed:6b:f0:12:77:26:90:49:90:c4:42:
f2:1b:df:f6:6d:03:79:14:5c:6a:ac:03:f2:bf:03:
52:05:28:99:fe:69:7d:08:ae:9c:18:49:fb:0a:87:
ff:75:f3:62:c8:9d:66:29:91:0c:35:be:c6:f9:3d:
1b:59:e7:5e:27:23:20:7b:75:7b:67:8e:37:44:44:
42:c4:cc:29:d5:33:43:6a:84:f5:68:c3:f1:e2:e0:
2b:50:57:bb:97:10:26:3a:93:34:5d:eb:10:c3:4c:
62:f0:c5:7a:3b:10:31:e0:7d:34:68:5d:7e:c4:90:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:50:43:2D:A7:72:5C:3B:76:03:A9:04:E1:5D:62:26:72:C1:BA:F4
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7f:90:98:4c:2e:66:f6:56:42:3d:e4:8a:6e:5e:bd:6f:07:
13:dd:cc:49:54:f0:b8:7b:04:bb:85:3a:e4:27:88:b6:93:50:
65:a0:b7:f6:6c:ac:d1:cd:7d:60:63:d9:87:ca:88:0a:74:f2:
1b:12:84:a2:20:db:0f:85:33:cf:b0:63:d2:ba:13:82:28:b1:
0f:ac:05:3b:43:cd:4e:ab:43:95:f5:c8:73:4c:37:f9:cc:22:
f5:10:62:53:07:9b:87:c4:ad:51:a4:be:81:cd:8c:25:29:18:
14:5c:50:54:c2:9e:9b:6e:26:3c:3b:32:0f:67:e7:f8:cb:ed:
8a:d9:9f:5c:ab:87:d4:dc:09:18:c0:91:b8:e8:8d:92:53:b2:
e4:d5:cb:d3:13:00:28:27:3f:d4:f2:a2:b4:7b:0b:d2:e4:d0:
ae:61:b3:d1:62:21:02:3d:de:c4:40:a4:e7:9a:9f:9a:1a:85:
ef:29:5e:70:85:9b:9f:03:27:0d:d5:cd:ba:da:e6:21:13:8b:
59:f1:92:fb:5d:49:58:1f:ef:18:ac:47:cc:7b:11:9b:bb:30:
dc:73:6f:b2:8e:c0:ed:b4:6e:ab:65:14:d3:ac:fc:73:9b:d4:
d9:96:54:6f:bb:e8:a3:a7:b6:64:72:c1:69:25:2e:ae:2d:c2:
9e:91:39:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:29 2026 by rpki-client