Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: KxmQkIrZ40rByhAxkYtsYasy5Jpqe/Atz99A8aetUGI=
Subject key identifier: 1D:A1:1D:BE:9B:29:A4:D4:AA:BC:15:98:F8:1A:A9:62:B7:0E:97:8A
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 019D273AEFB55FE547219C34B3B91A4CDF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 0F5C
Signing time: Wed 25 Mar 2026 23:01:07 +0000
Manifest this update: Wed 25 Mar 2026 23:01:07 +0000
Manifest next update: Thu 26 Mar 2026 23:01:07 +0000
Files and hashes: 1: DMGubU8hxCTGRODvSctDVfieplo.roa (hash: Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: B9068TY3EPZCXq7YhFIw6DBpC8F5utGV84KFRM31vfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ef:b5:5f:e5:47:21:9c:34:b3:b9:1a:4c:df:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Mar 25 23:01:07 2026 GMT
Not After : Mar 26 23:01:07 2026 GMT
Subject: CN=1da11dbe9b29a4d4aabc1598f81aa962b70e978a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:03:5d:d0:e8:a7:b3:d2:9f:4c:1d:4f:c2:
25:4d:f1:39:93:09:81:15:af:1b:af:5c:da:31:7d:
9a:48:a9:04:9b:01:f6:86:65:fe:03:9a:9e:27:53:
c4:25:0c:b7:03:0b:5b:ed:88:8f:f4:45:19:35:49:
3e:c8:01:07:8b:22:88:1a:f8:54:c2:5f:0e:8a:91:
f9:34:6c:cf:42:97:84:d4:bd:64:58:3f:75:b9:a9:
4d:e7:4e:8a:9c:df:76:4e:03:a0:82:2f:28:01:3a:
eb:cd:51:f3:7c:0b:6f:bd:ed:7d:31:68:a0:cc:df:
91:b9:a7:14:e8:d0:5d:fa:4f:d9:f9:dd:b4:0d:47:
5e:18:2c:ff:33:0f:dc:6b:58:f7:93:d0:58:bc:9e:
a8:4f:c0:c0:97:25:f0:a6:88:d7:96:66:73:07:d3:
3e:1e:05:3c:7f:39:2a:79:d2:9f:bf:eb:52:32:ed:
34:36:dd:f5:6c:b8:bf:f6:6e:8e:72:d8:23:a2:89:
2f:cb:a4:d0:53:f0:7f:af:f7:aa:37:81:d4:a5:dc:
5e:f2:43:41:e4:0f:71:09:c6:98:e2:0f:42:de:81:
04:c7:10:bd:72:0d:1a:1a:b2:23:8d:f8:f2:0a:63:
2f:9a:b8:56:9e:05:64:e7:ac:77:fb:44:69:1c:75:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A1:1D:BE:9B:29:A4:D4:AA:BC:15:98:F8:1A:A9:62:B7:0E:97:8A
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ce:4d:70:9d:24:c8:89:c2:10:52:1d:a9:3a:1b:c9:ba:ce:
fe:1d:08:09:65:94:e2:a6:be:f0:12:8c:43:90:eb:1c:4c:d1:
96:45:89:1e:04:53:23:3b:d2:be:89:37:d3:49:d2:ba:cd:59:
a7:d5:eb:b7:99:fb:26:a0:5a:44:3f:ec:3f:16:20:2e:61:f4:
fe:14:0a:89:3c:5f:ac:cb:e1:d0:5a:ad:8b:b5:57:d2:62:86:
46:b6:f2:99:e4:d2:25:1b:c1:f9:5f:ee:a1:a0:b4:4d:15:bd:
70:83:b1:cc:3d:48:fc:e1:d5:b2:ea:70:98:27:d0:b2:d2:ad:
c0:8a:88:50:16:97:85:5b:78:c1:3c:22:aa:aa:94:79:c7:be:
01:58:70:aa:b4:0f:af:6e:14:9c:ea:eb:31:36:9f:76:65:1f:
3b:54:78:ed:f7:a7:81:2e:ba:e5:c7:01:50:6c:8a:f4:d0:d9:
7c:60:5f:12:79:3b:18:75:fb:08:76:55:ab:7c:2f:a0:e2:b3:
f5:15:59:d6:13:f7:05:3e:25:70:40:42:ef:ae:9e:45:c9:9d:
f8:13:90:1b:78:2a:58:2a:9c:10:01:56:aa:05:34:c3:ba:8c:
5a:64:37:02:32:ad:00:c3:06:16:7c:49:14:bd:51:bc:52:6e:
1a:89:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:25:09 2026 by rpki-client