Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: wxNLJSqUgXbZ3fVD7dv0T/SBA5t28lOJMblBwPYdFjg=
Subject key identifier: DF:FF:58:E8:A8:B8:53:F9:86:93:D3:43:BB:4A:3A:1F:1F:94:01:A1
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 019D25F1BB363968057094C1F5B3E20FF36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:01:32 +0000
Manifest this update: Wed 25 Mar 2026 17:01:32 +0000
Manifest next update: Thu 26 Mar 2026 17:01:32 +0000
Files and hashes: 1: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: yyBVCvbERXeWSP3LdmuNl7qz5VP2+LPaniGKwpRpVeE=)
2: ltCY0LbA7g04AeojWAPe920Jtrs.roa (hash: j5WamdPrlkidU1jh7KsMKpw2rhoydKcyJk2/fHehOzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:bb:36:39:68:05:70:94:c1:f5:b3:e2:0f:f3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Mar 25 17:01:32 2026 GMT
Not After : Mar 26 17:01:32 2026 GMT
Subject: CN=dfff58e8a8b853f98693d343bb4a3a1f1f9401a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:fd:c1:21:96:a4:1d:22:b0:23:87:dd:fd:36:
20:14:55:a5:72:f3:4f:0e:69:71:47:f6:a5:a0:80:
ea:8b:a3:28:99:d0:01:44:b0:00:48:fa:6d:a4:02:
f4:60:b3:ee:d0:76:f5:c7:5d:49:1b:8f:6f:b2:1c:
a7:6f:26:1b:ef:fe:42:a5:2b:e9:00:72:be:aa:d7:
c9:3b:24:eb:1f:a7:a7:6e:40:6e:90:3d:94:d9:9b:
52:5a:43:d6:e4:b8:df:cc:c2:e1:4f:55:56:7b:58:
fa:23:75:55:88:14:46:db:a6:17:73:cd:29:86:17:
7c:dd:7c:18:b8:5d:4a:47:cd:f8:10:02:30:04:c3:
d6:a9:7d:e8:ac:36:bc:e4:ef:f3:3a:59:8a:f2:c6:
95:e1:12:cc:39:09:83:bd:26:59:72:df:77:60:8f:
44:96:0f:db:28:ae:03:85:a1:ea:c6:40:5c:ba:f7:
c4:26:58:56:bd:ab:d1:f7:f1:d8:94:22:39:95:c5:
b4:31:58:69:28:47:99:9e:73:4e:eb:7a:ce:2d:d6:
4f:6b:93:4f:95:78:a0:03:75:2f:05:5a:a0:9f:14:
23:e9:5e:fa:c0:a6:da:64:c5:16:ec:11:61:45:94:
0c:6a:92:e5:19:1c:9c:b3:56:93:e3:e2:ae:d0:70:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FF:58:E8:A8:B8:53:F9:86:93:D3:43:BB:4A:3A:1F:1F:94:01:A1
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f0:8b:19:af:e2:22:30:53:19:08:3a:a9:ca:be:32:72:84:
a1:72:b2:4a:8f:7a:27:a9:51:14:20:d9:bf:44:24:87:1a:94:
65:00:dc:a7:f7:b1:2f:86:36:b7:69:87:ea:c6:77:15:ad:91:
9b:38:9b:bf:33:04:29:d8:c2:82:f2:ae:65:d1:31:a5:2f:29:
ac:9f:6e:ca:c4:47:db:06:cd:c2:7c:b7:f1:eb:01:c0:f5:c2:
99:f9:86:59:e8:db:de:c1:25:76:f2:7c:8d:15:97:d7:26:40:
3c:93:dd:32:3b:22:a9:61:26:92:9f:8c:da:68:8c:9c:2e:b4:
db:96:08:a9:d3:7c:7c:3d:3c:49:ce:1d:07:6d:25:ef:af:22:
86:26:62:7d:3e:9c:01:cd:a2:b2:9c:79:f4:04:38:45:bc:c2:
5d:73:ef:ec:62:50:f9:17:41:cf:66:11:ad:96:f9:46:48:b0:
4b:bd:57:d8:f2:16:b3:f0:0c:fe:a6:74:ea:6e:a6:fd:75:2b:
8f:c0:35:ae:71:c2:77:0d:db:2c:6f:71:97:2b:6f:93:62:ec:
9f:56:0c:71:16:8f:b9:da:55:d2:7b:f6:66:4f:6c:a4:5e:50:
2e:e0:00:4d:ed:da:7c:4f:a9:72:7d:a6:e9:0e:e5:b2:4a:2d:
32:17:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:25 2026 by rpki-client