Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: UgWb3p6l/R40dUy+7Z22r2iiaDTfMk0C4xZXc6h/s2U=
Subject key identifier: 4D:9B:FF:26:A5:5D:06:E9:93:7A:0C:8C:97:0A:6B:44:AE:DF:E8:0E
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 019D2A3C5CFF1CF1C4FB9939FD206C1E792C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 13:01:32 +0000
Manifest this update: Thu 26 Mar 2026 13:01:32 +0000
Manifest next update: Fri 27 Mar 2026 13:01:32 +0000
Files and hashes: 1: D76OthKlE46ZLM9sdNaSig1Ng6I.roa (hash: pYj/tdJI8tEjZZC6XXCFhJYt0bHwBpZtynKtpFqoszk=)
2: PTI5qNiMxJTaYsRviRjCASyPtOI.roa (hash: PgMrdxB9fQmJxz2ju9KDJjW/D8w0BstDoOfXkw+BC8M=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: BgVvMQeGhYQ5kJqcizpze8Fg6YmzB+R16YR5rXC3dXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:5c:ff:1c:f1:c4:fb:99:39:fd:20:6c:1e:79:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Mar 26 13:01:32 2026 GMT
Not After : Mar 27 13:01:32 2026 GMT
Subject: CN=4d9bff26a55d06e9937a0c8c970a6b44aedfe80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:2e:33:13:59:33:3c:08:e0:b3:e7:30:bf:
81:25:b2:8d:3c:1a:c7:44:e0:a1:45:d8:fa:b0:bc:
a4:97:e7:02:a8:4b:0a:82:34:74:27:e8:bc:7d:97:
97:82:ff:40:ba:dd:6a:5f:9b:2a:84:b2:51:84:60:
a6:f5:2b:4a:2d:10:aa:cc:92:3d:74:3f:8d:aa:47:
ec:27:e5:08:55:22:07:06:f8:7d:b5:d8:d9:ec:37:
e7:4a:e0:2c:8e:a2:b8:0f:e9:b4:05:e3:5d:7b:21:
00:3a:43:0f:e3:b3:c3:27:23:25:7c:c6:4c:56:15:
cc:a4:c4:94:30:4e:42:7e:2b:bb:b9:c6:ae:3a:2b:
6a:85:9b:a2:4c:1a:7f:73:fd:d6:7e:12:cf:8a:88:
f9:99:d6:98:eb:fd:62:63:69:ed:79:9f:1d:94:c6:
65:06:0e:93:2c:21:e8:53:7c:d3:b9:28:40:b1:82:
9d:1e:de:44:bb:1a:27:57:36:88:10:3d:61:c1:15:
d9:e1:54:04:c8:c3:5a:63:1a:9e:4c:d8:41:2a:11:
c0:f5:db:11:9d:ff:d7:7c:f6:97:a2:c1:f7:90:b8:
47:84:f8:e9:84:62:f5:93:75:fe:4f:4d:5f:2e:18:
20:68:a9:da:c0:5d:a7:3b:89:78:24:5d:07:cc:ec:
35:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9B:FF:26:A5:5D:06:E9:93:7A:0C:8C:97:0A:6B:44:AE:DF:E8:0E
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:45:b8:7c:ce:d8:0b:b4:35:74:a9:f7:03:94:a4:1a:e6:79:
5d:c9:ee:97:0d:bd:59:c6:59:94:e7:a0:8f:28:0e:70:78:74:
9a:35:de:5d:35:26:f7:66:a3:af:03:2f:11:8a:9a:7e:de:69:
2f:18:92:9f:70:c8:ce:d3:09:01:ec:69:e4:05:66:08:59:1b:
8c:b8:cc:21:c4:f0:60:cb:de:0f:a8:ca:57:20:23:d2:f0:75:
e9:97:42:85:52:cd:4f:fc:e4:59:99:c3:03:80:09:69:3f:12:
df:e6:4a:7f:2c:42:8e:48:64:5c:56:30:22:58:50:f3:7c:af:
11:18:a7:58:68:53:3d:a5:d1:fc:90:5a:09:0d:c0:cc:5d:b5:
fe:63:73:39:5f:f4:cb:da:1c:a4:e9:14:a0:c3:e3:ab:8f:f1:
96:c3:9d:91:0b:69:d8:d9:e3:34:f5:e7:49:49:58:e5:09:55:
e2:ce:42:10:82:16:b5:e6:38:da:ea:38:01:d6:fa:45:03:28:
80:85:f5:27:d8:5f:ae:6f:e6:d2:83:5b:f0:d1:ff:3e:30:92:
ff:e5:bf:f1:76:9b:63:21:25:18:07:9c:9d:8f:a4:b7:4f:19:
08:74:31:36:37:0b:f8:f3:f4:f3:bc:ad:bd:cb:48:4f:dd:d8:
00:94:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:33 2026 by rpki-client