Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier: WJjNr141JXOmQCZvjdotmAGxwRVQPA2P7fkuSp+lSfw=
Subject key identifier: DE:B0:36:CD:35:F2:32:7B:36:01:3E:D3:5C:57:BA:7B:EB:A7:E1:0D
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial: 019D27DFD75A973AD95858C6F74BF10CABE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number: 0818
Signing time: Thu 26 Mar 2026 02:01:14 +0000
Manifest this update: Thu 26 Mar 2026 02:01:14 +0000
Manifest next update: Fri 27 Mar 2026 02:01:14 +0000
Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: YMdA314MNffjJ7b8Qy/chkBSpd9FJewdeHyWZBAapNc=)
2: zegCreMAsWuVQ_WHgf--0l2ZG3E.roa (hash: hG7GTDgQ0+UKynRc4qSwZNfDUaAY6uCRSrC2M4o4Fvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d7:5a:97:3a:d9:58:58:c6:f7:4b:f1:0c:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Validity
Not Before: Mar 26 02:01:14 2026 GMT
Not After : Mar 27 02:01:14 2026 GMT
Subject: CN=deb036cd35f2327b36013ed35c57ba7beba7e10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:06:e2:af:64:ec:00:46:38:fc:44:bf:28:
76:34:11:28:7e:79:11:97:07:32:61:e7:c9:16:02:
c3:b5:dc:4c:69:c8:58:95:de:60:a6:d2:56:c1:b8:
4d:36:11:4f:15:b5:2f:92:a6:a5:ae:60:5d:33:22:
32:a9:91:7c:de:30:a3:23:8f:93:d1:c0:03:4a:05:
cb:76:3a:7a:cd:14:d1:ed:f9:6e:13:69:2a:5b:ed:
34:bc:d9:d5:ab:e6:14:58:90:f3:a1:03:1c:1f:ae:
90:4a:71:97:c5:c7:4e:4f:4c:e6:b7:d5:94:db:98:
10:d6:26:ad:6b:e7:50:bc:2b:05:d1:f6:de:45:4d:
a0:1c:13:75:a0:e9:84:cb:f8:eb:44:f3:e5:49:27:
0f:23:35:a7:64:6e:70:30:d4:e3:79:da:f5:10:f4:
a2:c5:da:ed:f3:c7:36:b5:ac:31:38:a4:d8:ae:f6:
23:d3:b3:8d:aa:1e:8a:55:db:7a:1f:b5:72:e5:ec:
18:23:fa:43:61:c4:63:dd:af:b3:a6:2e:f5:66:cc:
d1:9b:55:76:3c:50:2e:ba:a1:c4:60:6e:85:12:21:
6e:42:ce:52:e1:da:e5:39:1f:a0:47:eb:54:51:ed:
2e:ff:bc:f8:80:04:3e:e8:29:9b:a7:ee:07:e1:2e:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B0:36:CD:35:F2:32:7B:36:01:3E:D3:5C:57:BA:7B:EB:A7:E1:0D
X509v3 Authority Key Identifier:
keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b5:ed:89:11:c5:7f:c1:f2:64:32:7d:9a:a2:10:91:6c:f6:
f5:35:1d:34:2e:b2:b5:b4:17:00:53:4f:64:17:be:b8:9b:4a:
65:aa:82:e4:7c:6c:f1:6b:c4:59:ea:91:2a:df:3a:7d:4a:a6:
df:fc:8c:68:95:f7:8e:4f:8b:9f:c2:99:2c:7d:40:50:48:71:
3f:ce:cb:9b:ed:f5:7e:1a:65:1d:fc:85:84:9c:1c:67:80:ff:
68:71:a9:cf:17:30:dc:e8:fd:be:38:51:d9:0c:c3:48:0e:d6:
1f:dc:25:64:11:c7:0e:b9:34:8e:5a:18:b8:33:5b:44:4e:6a:
12:0b:33:ea:01:bd:ec:90:71:74:e8:f7:e3:7b:6f:4f:b0:f9:
d4:3e:dd:71:a4:42:ef:b4:1d:92:17:da:ae:6d:5b:91:46:01:
e4:ef:c2:ab:e7:c3:c5:67:79:38:d8:58:cb:56:7c:a4:33:99:
a0:78:22:14:5a:2a:c0:d5:db:6a:c4:e3:dd:a1:dd:a9:6a:cb:
52:bc:dd:b5:e9:82:44:9f:a5:2a:aa:3e:f8:26:91:11:9b:72:
e5:71:a2:28:ee:b2:8b:df:ab:fb:76:b8:c9:a4:6c:a0:3d:08:
eb:80:89:74:25:da:7f:62:b9:07:f6:e1:1f:a5:f5:6a:60:f6:
9e:8f:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:48 2026 by rpki-client