Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: nlBZDv65eUDm0RRDIGhQPo7cH5rqw2LMNTs5n8L5opA=
Subject key identifier: 40:E1:E9:E7:60:61:C3:89:1E:C1:14:79:D0:58:28:E8:8F:4E:08:31
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 019D2695FFCBC4A52640BF2802D4F5D4344B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 18DD
Signing time: Wed 25 Mar 2026 20:00:57 +0000
Manifest this update: Wed 25 Mar 2026 20:00:57 +0000
Manifest next update: Thu 26 Mar 2026 20:00:57 +0000
Files and hashes: 1: 1-gD4Hq6k3_IBwrhpxMMG_5-Bhrc.roa (hash: D/5u0x0tc9amqj7LxNMrUHo2Ohz0yRVArWNlJ2DKIqA=)
2: 3Ntb8637r4izsCpVwd5gcAHqdG4.roa (hash: v8fDaBY/Qsb7VQFSR88lHqJauVxk7NICenthut3N3XE=)
3: CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa (hash: rA9XhkKgyB7cXpzG2udSGKxNb3vtZoJSLVB744tVVnU=)
4: FQaFiTcf67x6YrpuBrF65w_8hug.roa (hash: CNjoRJ7uhvB1XswkiORZT6na1N/pFMt+GGKFD8Y6iH0=)
5: LKLutE-uCKR41ay5iaoVFawv-Gs.roa (hash: oOu8i7EWf5PBDu9YcMHQbEXmrmW+EZz9feEFexijuIs=)
6: LQ8DOKHwKx8UTcW4rVXlM1Y5GyM.roa (hash: TEnUT+LdZFicRjfjteGQCMpmPbOoocmki3wcjKgZQhA=)
7: OUSNJic16YHsFdydiuaFE2ZdqEU.roa (hash: Te9uOokwyk9iyAdeUIheCIvhMu20V8m5YnWWnhDRCII=)
8: QYcFCUvrty_eEw95bsUeyFFjK-c.roa (hash: jbyRPBMO6AQ8+x+sL1BfcSXlfYOvQy8bP202dnbtn6o=)
9: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: Oudk5fu0PniRoLsEj+HEDuVwKWwGdy8X2AY+QdYRsfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ff:cb:c4:a5:26:40:bf:28:02:d4:f5:d4:34:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Mar 25 20:00:57 2026 GMT
Not After : Mar 26 20:00:57 2026 GMT
Subject: CN=40e1e9e76061c3891ec11479d05828e88f4e0831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:fb:96:0e:86:ea:fe:fd:84:95:b9:51:9c:
c4:9f:dd:d3:b0:31:ec:05:d4:2c:ec:84:4a:b1:b5:
46:f6:2a:fe:8d:7f:b5:b5:0e:c4:2e:91:59:af:52:
12:ff:05:7b:34:02:44:65:e2:0c:40:9d:9b:8a:9b:
14:1c:be:20:f2:e3:20:03:8e:d8:0a:99:0a:5d:d3:
f2:68:8b:61:02:80:75:e1:97:8f:bc:eb:8d:75:78:
cb:c9:7a:e3:6f:b9:24:3b:ed:93:b8:00:65:b3:31:
a5:71:ab:26:5c:cc:82:01:9d:e5:18:3c:5e:6a:85:
a9:22:df:f1:e6:dd:4b:f0:73:8c:6a:94:21:bf:54:
5c:47:2d:8d:9c:f1:e6:03:39:d2:a3:b7:e3:fa:c3:
f4:98:86:5a:42:c4:a8:01:55:44:b7:98:aa:31:dd:
db:92:70:c4:e2:ba:e4:2f:96:00:31:6c:67:2f:32:
7d:52:32:25:51:fb:4c:1e:77:ef:07:95:cc:55:0d:
94:20:9d:d3:ff:22:b9:79:71:df:8e:f5:28:90:81:
40:55:dc:f0:c0:c5:5c:04:87:55:dc:86:63:c0:26:
e9:32:d2:24:5c:b9:a0:47:d7:78:4c:a6:66:4f:b6:
59:cf:ef:0e:b7:20:44:5b:05:c2:be:b4:c6:50:1b:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E1:E9:E7:60:61:C3:89:1E:C1:14:79:D0:58:28:E8:8F:4E:08:31
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:32:79:35:8c:be:85:dd:46:18:96:12:66:b7:64:5f:bf:08:
11:71:fa:c6:4f:54:41:f2:2d:eb:77:48:06:d2:7b:8f:e6:03:
38:cf:61:c7:65:11:20:87:72:2d:ba:0e:7e:43:82:a5:d6:c3:
7f:fb:53:af:6d:2e:e8:77:87:18:1b:42:08:07:9c:5b:05:c3:
7d:36:c9:45:19:bd:c7:c1:be:11:5d:7b:7c:90:14:7a:8c:7d:
c7:e1:cf:a8:4f:f8:e5:f8:03:da:34:10:9b:a1:64:8f:ae:4a:
c1:58:88:31:79:21:bd:ba:15:3b:8e:c5:b5:60:a9:3b:31:b3:
a4:29:fb:57:f7:1c:30:07:c4:ca:45:3f:39:8b:0d:c9:55:52:
49:a6:82:63:8f:f6:33:86:82:90:c3:65:65:c8:42:3c:5b:36:
5c:7f:23:f9:39:b2:35:02:c0:33:0f:3f:2b:14:87:d5:05:57:
77:a7:59:91:bf:c2:06:09:53:af:12:71:75:4b:d6:19:50:26:
83:9d:70:33:5a:c7:42:78:be:b3:ee:91:cc:f6:73:1d:b5:43:
54:c3:bb:c6:78:22:22:4b:19:3f:d9:97:d2:c9:5f:65:51:cc:
8a:cc:9c:51:ef:74:be:62:a3:d9:ea:27:61:0d:81:2e:03:aa:
30:6d:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:10 2026 by rpki-client