Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
File: 03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json)
Hash identifier: o9MhbJnHtN8quZa1U5qoc4NhUYAUfqj02hx7MzBl2B0=
Subject key identifier: 21:08:EA:75:22:53:49:ED:3E:DC:32:65:F6:81:95:56:20:65:23:33
Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Certificate serial: 019E1C1006E1E68D1F338DEACA6A164645C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
Manifest number: 0750
Signing time: Tue 12 May 2026 12:01:12 +0000
Manifest this update: Tue 12 May 2026 12:01:12 +0000
Manifest next update: Wed 13 May 2026 12:01:12 +0000
Files and hashes: 1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: xopdFjB3/BTMecDi4K015ySETu5UERx7uvLWEXOzsgE=)
2: H20JQocMFrDfWdVutaPCrCC7li4.roa (hash: gZcsKxQMJ6dZalTlYBUSf2/QY+Hj8zaB/GmOyCIp1vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:06:e1:e6:8d:1f:33:8d:ea:ca:6a:16:46:45:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Validity
Not Before: May 12 12:01:12 2026 GMT
Not After : May 13 12:01:12 2026 GMT
Subject: CN=2108ea75225349ed3edc3265f681955620652333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:06:28:dc:5f:40:fc:d8:ae:c1:53:c8:19:
d2:a4:86:fb:77:96:ab:6a:13:25:5c:30:f4:d6:f5:
4f:eb:67:b2:2b:a0:5f:71:51:1f:18:32:e4:12:0f:
8a:ad:eb:b4:26:9c:db:76:ac:c2:4a:92:55:23:79:
c2:be:ee:6d:7e:2f:22:07:9e:71:80:39:92:50:45:
cb:e2:d1:eb:4e:65:ca:f2:05:e8:65:49:16:9f:8d:
f6:10:a8:99:92:6a:18:96:02:72:75:08:92:35:bd:
b8:94:60:68:5b:d7:79:98:55:dd:9d:b0:e4:12:b0:
84:44:b9:f2:61:9b:1f:d7:42:7e:5c:b6:83:12:65:
22:04:2c:f5:42:5e:b3:d3:7d:9e:a8:23:32:7a:16:
fe:d5:13:99:07:a5:9b:c1:8d:42:64:b7:eb:75:b7:
f1:99:2d:db:89:f7:f3:f7:12:5f:dc:50:c8:3c:8c:
da:c4:4e:48:fa:9e:b9:b0:56:c6:45:b3:18:c8:16:
6b:cc:f3:8e:53:0c:ed:98:28:c1:77:f5:46:b6:6a:
27:00:51:f8:45:24:20:37:02:86:ba:aa:aa:18:b8:
71:f1:ec:c3:e3:a6:e1:c7:90:96:57:c1:1a:13:29:
ef:da:da:a1:d3:3a:fe:14:94:1e:cc:de:e8:a2:c6:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:08:EA:75:22:53:49:ED:3E:DC:32:65:F6:81:95:56:20:65:23:33
X509v3 Authority Key Identifier:
keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ba:f4:33:fb:03:a7:21:58:51:b8:23:12:e9:2f:d1:fb:c9:
e2:7f:04:af:f8:ec:c9:b0:a1:3a:2c:a9:21:f7:41:62:89:d2:
50:59:1e:55:51:c8:83:77:f4:c7:5b:1b:bf:14:0b:7b:49:a1:
d7:6d:1d:13:e0:b0:1f:15:2a:62:50:57:12:da:53:b0:f1:50:
67:c9:dc:4a:99:7a:e1:f4:3a:ee:ea:34:6f:4f:85:e7:09:7d:
a3:ee:7f:dc:1c:6d:72:bb:86:6a:68:02:e1:9d:b7:bd:9e:37:
84:a3:38:63:d2:da:13:d2:0a:dd:a7:fb:8b:6d:d6:87:29:26:
61:ef:ce:b0:d5:54:12:3b:e6:dc:c5:b2:0d:05:d8:22:cb:5a:
7e:47:ca:9e:67:66:c1:1b:e5:95:e2:b9:d0:46:59:50:0b:c2:
2b:a5:2d:af:b6:0b:a8:9d:da:99:2a:80:42:6c:dd:8c:d3:e8:
d4:c2:a8:3c:bb:b5:53:2e:90:4d:92:59:98:7b:a8:9b:8c:85:
67:4c:87:ad:dd:25:e6:88:27:c7:16:83:54:03:77:66:f0:27:
91:f4:8b:0e:b7:a3:5f:63:eb:e6:78:a9:3b:7c:98:3f:14:38:
a3:ae:90:72:fc:74:67:78:d5:20:92:69:72:6a:14:5d:be:85:
45:e2:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:49 2026 by rpki-client