Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File: fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier: srxRqBc8UCLGhoTuaKYh2gN0BSYn3iuKGUJz8t8fTvU=
Subject key identifier: 38:BF:E3:3C:3F:80:4A:80:84:D3:F9:B0:5A:D4:1F:F8:B3:10:C4:C0
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial: 019D2C9871F4B8F5DBF8216AB9D5298CE796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number: 189B
Signing time: Fri 27 Mar 2026 00:01:21 +0000
Manifest this update: Fri 27 Mar 2026 00:01:21 +0000
Manifest next update: Sat 28 Mar 2026 00:01:21 +0000
Files and hashes: 1: G0kBNcjhGFcxChx46aWWaNpRXhY.roa (hash: VJoqFME0N6dK/qBA61hfvkkTq2MVQMZWW93hxUvsK8Q=)
2: IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa (hash: wQMNMlSi7ML40phwxmQnjfrhkgmt/fkZEJZEruvJetM=)
3: J7oFZC1CJk2GtQuj_-ICPxLHOsQ.roa (hash: oGKjzDdrrCM7vTukMw0Fba8efuuuaYKCVfCXlBR+Jpc=)
4: O_CD_5ALmuh68TK-xyESGxnHW24.roa (hash: A4M+FCTh23fTzIJAI9lDd9sc/Yc7QQultOVy81PYaSo=)
5: Y05YWTld1eID__luRs7pp8ewZwY.roa (hash: 02lMUa1OHr9cMSAHSJuLTXNV5rSyX1jxkq8ORZ0rugw=)
6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: 8ZMtbeHcx3anQgx2BsN86q+m+ASSgHrdFk4BkZvv6mA=)
7: oFmVPpAqArTolT86zoYzDNps-ck.roa (hash: vxR9GCqj5WIpQWRTxrTVSqLQRxXTFqzFObqIUCYCQMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:71:f4:b8:f5:db:f8:21:6a:b9:d5:29:8c:e7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Validity
Not Before: Mar 27 00:01:21 2026 GMT
Not After : Mar 28 00:01:21 2026 GMT
Subject: CN=38bfe33c3f804a8084d3f9b05ad41ff8b310c4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:33:92:ed:68:d6:ae:fd:be:a1:68:6c:4d:
36:6a:58:58:57:17:f8:7d:15:c8:2d:3c:88:b5:a9:
33:10:33:74:ea:d0:06:9b:f2:1d:98:cd:c2:5c:55:
d9:07:36:7c:eb:e6:d5:26:1e:f4:5e:8a:4a:88:ab:
6c:51:09:68:be:bf:68:14:9e:ee:e4:a7:24:0a:b9:
c0:ec:ae:e6:4e:bc:7c:3d:41:8f:8f:6c:c4:72:53:
25:af:df:24:bd:8d:06:f4:2e:be:33:30:d9:6b:8d:
60:90:b4:39:7a:3c:a5:56:4f:19:b6:04:72:45:c9:
74:32:cd:c5:90:e6:22:e9:c5:41:71:26:02:f8:ee:
29:58:ad:07:51:bd:af:40:82:8e:84:ee:1b:96:62:
62:e4:01:be:48:d6:9e:87:c8:a3:96:fa:b3:11:bb:
64:bf:22:0d:e3:06:dd:64:3c:27:dd:ef:fa:5d:b1:
08:e8:ff:d2:cf:ce:41:fc:89:2c:1e:fc:71:6b:a8:
92:e1:1f:f9:03:ca:0c:aa:f7:9a:f9:bf:d0:65:fc:
28:f0:c4:ce:2a:a6:8c:a7:5e:1a:10:27:7b:07:69:
d4:86:12:42:ce:26:78:41:15:a3:c3:f3:8b:e1:e5:
7e:b4:0e:7b:99:9e:2f:65:27:2c:0c:a6:69:f4:ac:
4f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BF:E3:3C:3F:80:4A:80:84:D3:F9:B0:5A:D4:1F:F8:B3:10:C4:C0
X509v3 Authority Key Identifier:
keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e8:bc:a9:ca:7b:5e:98:22:51:b4:36:3e:13:4e:9c:6e:d9:
a7:13:e8:b3:7d:72:12:6f:08:9d:bf:92:46:bf:8c:e7:ac:d0:
86:2c:07:56:88:1a:6c:2b:a1:d3:26:5b:6d:09:57:ec:5a:73:
04:2e:07:e0:15:fe:3c:18:a7:45:f0:3e:36:5f:86:a9:8d:77:
41:91:33:4d:a0:99:d7:07:5f:9d:4e:83:1e:1f:1d:95:3a:d8:
48:17:b1:bf:bf:7b:4a:5b:bb:92:b3:86:81:63:3d:6a:f3:83:
3a:2e:25:cc:c8:cb:66:9b:78:0b:61:ee:ca:08:1c:80:3d:73:
46:ca:d6:98:50:9e:5e:f4:70:4f:42:f1:13:3d:b8:ed:ea:13:
30:07:ba:f1:21:45:92:a4:ba:4e:a8:d5:67:cf:8f:46:4f:d9:
b7:f5:de:55:43:3d:ef:5a:47:17:ff:4a:48:40:c8:eb:29:ca:
80:e1:b1:c3:e4:53:d1:55:1a:e0:1b:ec:37:60:c6:2d:ca:e4:
8c:1f:e2:20:32:07:d9:7b:30:aa:c0:c0:b7:ec:d4:36:0b:14:
ba:4a:95:ed:a3:ea:22:47:55:69:b4:da:c7:24:89:45:e7:0d:
2a:10:b4:fb:9a:5a:58:bd:a2:e8:a5:d3:81:e7:5c:b6:8a:4a:
5f:2b:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:03:13 2026 by rpki-client