Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: S5mGictm/adSnrMScaVe3zjJjEyMgyx03u+4HjSHhLw=
Subject key identifier: 5D:A0:8C:C9:13:0A:D8:5D:46:86:64:48:64:3E:8B:2A:9F:FB:96:03
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 019D28F222B01FE07B03180009522885E20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 07:00:50 +0000
Manifest this update: Thu 26 Mar 2026 07:00:50 +0000
Manifest next update: Fri 27 Mar 2026 07:00:50 +0000
Files and hashes: 1: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: 3OxlJiK1RKQB4ZSEjHiMuIR1rt90O6P8n/MhXd5ytZc=)
2: srGtxdotdL1gGYebpFyhRC2KgLw.roa (hash: peHYPQm6+m6K0GIm1p2M4aZrPJFnCNdM3/dYTyUbnoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:22:b0:1f:e0:7b:03:18:00:09:52:28:85:e2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Mar 26 07:00:50 2026 GMT
Not After : Mar 27 07:00:50 2026 GMT
Subject: CN=5da08cc9130ad85d46866448643e8b2a9ffb9603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:52:10:d1:a2:f9:b2:6e:37:2f:26:e3:42:
6d:b9:ad:95:6b:ec:11:3c:fb:4f:d4:a2:3a:a4:1a:
31:12:ea:b6:2b:9a:30:9e:98:95:fb:d1:9e:5a:88:
71:5d:75:49:6c:60:8b:74:2d:e4:2b:a9:37:05:14:
c0:4b:88:37:e7:9e:c6:7d:05:cf:29:4b:63:ab:4e:
31:22:e3:6f:16:65:d0:77:fa:d4:b3:56:33:4e:fa:
90:66:03:7e:af:8a:9e:ea:20:99:df:2e:3b:e1:3f:
80:31:bb:e6:45:f8:81:c2:94:43:a2:f4:27:85:1b:
8b:d9:a9:21:5c:20:71:af:51:55:4f:a8:6d:d4:30:
f1:5c:ee:9e:53:2a:a6:3d:09:d2:52:b2:aa:7a:a7:
a3:4e:2f:8a:74:59:fc:84:70:09:67:da:95:7b:60:
b5:4d:88:2d:b5:8a:73:5f:fa:06:f8:6b:2b:e1:8d:
b6:73:e4:a0:f4:b2:b6:e2:71:83:38:9a:a4:4b:ea:
19:86:14:6b:a5:03:14:7d:1c:ac:49:de:e5:f1:8a:
0b:db:f3:23:d2:b6:5a:c9:96:3a:c4:12:6a:75:0f:
45:c5:a2:a5:0a:59:2d:b3:59:07:db:0c:22:bf:00:
c8:1b:c0:4c:76:92:3d:f4:f8:61:43:5b:95:18:23:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:8C:C9:13:0A:D8:5D:46:86:64:48:64:3E:8B:2A:9F:FB:96:03
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:08:46:11:fa:21:21:fd:f6:71:58:da:36:ac:91:39:c7:1a:
70:e7:bc:ec:c3:78:45:8f:19:59:f1:24:57:b8:91:d7:11:e0:
09:90:20:b4:a3:85:54:de:aa:10:99:50:34:d7:3b:ed:3f:13:
1f:f1:e7:d3:e6:c5:54:b1:ec:48:84:59:a1:ff:d3:03:cf:79:
64:47:dc:ca:40:1e:b3:f6:24:1e:84:65:d4:a0:50:42:df:8d:
62:0a:04:39:2c:13:5e:c2:f6:53:9f:70:4b:19:60:d5:d2:2d:
a0:96:4c:cc:d0:ef:5d:5f:f4:f2:23:19:b6:ee:e5:22:36:64:
75:ae:2c:93:a7:7d:52:65:89:81:51:f7:e1:ba:eb:43:0d:18:
7d:44:28:e2:81:a6:d7:ff:ba:0e:c6:4a:98:b4:47:7c:35:47:
f1:92:c2:5b:14:fe:98:e4:2f:6f:56:3d:03:98:f9:21:16:12:
f1:27:5c:7b:40:4e:67:15:11:8a:a9:66:e4:5d:78:21:e1:e5:
74:3b:b6:3b:6c:9f:27:66:43:12:44:9a:d6:ea:82:6f:07:ac:
46:71:f2:81:6e:b2:fd:ae:ef:d7:4c:82:24:5f:68:be:16:a2:
de:e3:1e:7a:ad:0f:73:24:73:49:00:1a:e6:34:bc:2b:f2:f5:
9a:10:3f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:26 2026 by rpki-client