
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: BqTLmttjQ3fJDcBumMO1EAUob2kyoNKMs5KFziOmUHk=
Subject key identifier: 9E:B4:CE:83:B8:9D:A1:9D:2E:BC:27:B0:F3:4C:F4:F2:53:F5:67:8A
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 019E1EA2F2E22CFA98DD3C2E782A15046F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: 03CA
Signing time: Wed 13 May 2026 00:00:55 +0000
Manifest this update: Wed 13 May 2026 00:00:55 +0000
Manifest next update: Thu 14 May 2026 00:00:55 +0000
Files and hashes: 1: 2QUxpcZo42MO8NPw3ViO527hXWk.roa (hash: jXv9njLEXA5SkLC2GOthlPZiLCWl9vdzZCcofBzcG18=)
2: JNor73gXz2ec5FVJvGqRzBpyxSI.roa (hash: k/2ZGjtnrbIQP29sZmOjF46Dom6I0jn9nqS/95MSEu4=)
3: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: SjthsrsG+WDM855yqll1k2HKRD9mD/Ldlhqo2MQxrFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:f2:e2:2c:fa:98:dd:3c:2e:78:2a:15:04:6f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: May 13 00:00:55 2026 GMT
Not After : May 14 00:00:55 2026 GMT
Subject: CN=9eb4ce83b89da19d2ebc27b0f34cf4f253f5678a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:cb:e8:de:8a:a8:62:a9:bf:7c:54:c3:40:
01:9e:c1:7e:81:d3:5c:a0:5f:61:2d:06:ed:8a:38:
ea:e9:a5:63:e9:bc:3a:65:f8:c1:54:df:93:e8:87:
25:32:16:5b:fb:03:3a:8c:02:82:87:ba:34:58:85:
ad:13:e6:e9:0e:3e:57:dc:c9:25:03:25:80:d0:8c:
d2:5d:fc:f2:a1:d3:e1:9f:3b:a8:4e:23:61:dd:c8:
9b:03:2f:49:8a:af:70:52:0b:23:0d:d4:53:8f:03:
32:59:45:8b:38:dc:77:f2:dd:dc:fd:f1:06:83:23:
ca:0e:22:af:bf:43:e4:e7:00:92:56:ce:f0:b0:d6:
82:d1:44:08:71:8d:74:ec:3a:30:a3:65:02:08:8f:
23:2d:86:66:3f:58:f7:fb:6e:81:94:58:5c:32:f4:
dd:61:36:9c:0c:6d:19:ec:51:32:3e:f8:4e:2e:25:
65:b0:46:1b:80:6b:8c:1f:ff:ea:5a:1c:11:ae:b3:
10:ac:79:70:9d:b0:6a:16:52:ad:02:ca:b5:a2:c2:
7e:bb:f1:14:70:55:01:4c:42:7e:e9:72:69:f2:f1:
27:40:ee:0b:d0:cf:2e:cb:ba:c4:b4:42:dd:52:aa:
fd:5c:c6:03:4e:f8:a1:04:73:20:82:7a:91:96:8a:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B4:CE:83:B8:9D:A1:9D:2E:BC:27:B0:F3:4C:F4:F2:53:F5:67:8A
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:23:a3:94:37:c5:2b:cf:13:69:82:7c:bc:07:63:34:b5:62:
b1:84:5d:53:16:f2:d8:09:f1:7c:12:73:12:69:c1:2b:65:5b:
1b:8a:45:f9:99:30:50:75:5c:9d:18:b8:b7:b3:1f:51:c7:a5:
b0:67:fb:e2:66:8f:fd:4f:23:d7:c8:5c:c5:7b:52:89:5d:20:
bc:9a:c6:cf:48:24:28:43:0e:19:a1:8d:82:a5:de:2b:7a:89:
6e:0c:14:8a:7a:df:c5:22:53:1d:66:60:db:09:d1:21:04:77:
0d:14:4e:b0:ee:20:f7:8e:3a:f9:86:8a:e8:9f:e8:2e:e4:b3:
3d:c7:a1:41:55:cf:24:97:d0:9c:86:67:18:38:8e:2b:22:ef:
f7:66:91:c9:8a:36:a2:49:f2:13:26:b9:d5:42:65:94:fd:6b:
e0:fe:b3:03:12:69:3a:77:3c:1e:e1:0b:6c:ee:b7:a8:ab:6e:
81:b7:48:64:49:6f:77:fd:0d:75:b5:dd:dc:d2:bb:4c:8b:84:
41:3e:ce:90:be:7d:5b:b9:e9:3f:3f:ab:45:80:c7:ac:b6:2a:
af:7e:7b:19:e7:76:49:2d:ee:d8:bc:e2:7d:84:53:73:ef:36:
57:a2:f1:05:9a:f8:9f:43:b0:af:74:3d:fc:a7:9d:4b:d8:35:
31:aa:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:30 2026 by rpki-client