
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: zgQpm3QEg5/PCnamMlDGYm81Z/zR/uJW3kDZaOjuQHQ=
Subject key identifier: CE:93:DD:64:42:61:24:82:C0:0B:25:27:0C:87:D4:3B:3C:C2:86:FB
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019D26CCCB2D5243AF5BCC42422E775124AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0BE8
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: ES7w5xqAbo6+Gy/BjqP1VwDTD+iEpGmZ8+xbFR+0WhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:cb:2d:52:43:af:5b:cc:42:42:2e:77:51:24:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=ce93dd6442612482c00b25270c87d43b3cc286fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:18:b7:4b:aa:ca:d8:2c:27:1c:9d:03:54:
bd:84:5d:88:74:27:9f:48:c3:95:3f:b5:88:59:5b:
cc:5a:fc:b1:d0:10:02:d3:85:24:29:05:15:f3:63:
ab:9c:e6:53:7b:79:e8:86:95:74:29:7e:98:29:ed:
48:6d:ba:bc:b3:e6:f9:2b:7f:40:0e:33:c7:a9:51:
9a:6e:bc:08:cf:0a:73:06:e7:c0:64:87:c9:32:41:
e6:de:ec:6b:9f:44:73:ee:60:e7:30:de:b9:a4:76:
fe:97:da:1b:db:10:2d:f2:8f:00:1a:71:fa:07:90:
b3:28:7f:3b:d7:c3:d3:da:4a:1e:f1:78:d4:6c:9e:
d1:8d:57:6d:08:91:90:6a:c7:7e:41:12:30:b1:fd:
35:eb:36:0b:cf:08:3c:8d:2d:8b:a3:56:cd:d6:ec:
5b:e2:19:c3:09:94:19:d0:cd:83:9a:3e:fa:72:ed:
4b:ba:5d:39:e4:37:24:c0:1c:8c:46:ba:a2:52:25:
61:a6:78:9b:8b:25:de:0a:60:d9:95:9c:f4:38:6b:
90:ba:4a:0d:ca:34:ed:2b:b0:1c:25:19:a4:a5:60:
1f:d9:68:77:b1:f3:a2:ef:08:63:f7:77:d5:7c:42:
c8:8f:f9:1a:9a:b3:cb:8d:6b:2a:c2:40:e0:83:8e:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:93:DD:64:42:61:24:82:C0:0B:25:27:0C:87:D4:3B:3C:C2:86:FB
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:66:9c:55:0c:ba:c4:12:2e:3e:4b:e7:08:e3:06:23:34:de:
ab:6c:ff:12:4a:b1:25:e3:1a:f3:ca:ba:3a:e0:2d:c1:ee:6b:
82:d3:55:41:76:6b:4e:f0:06:2d:1b:4e:ec:6f:d6:f8:a6:7f:
b2:c2:5c:d3:61:18:85:96:83:1a:a1:7f:8e:6a:5c:97:cc:7c:
a7:ba:f8:8a:c9:2b:7c:f7:20:45:82:15:3c:c3:a1:fd:d6:8f:
2d:78:f6:75:f6:b1:6d:3f:c1:91:33:a1:12:0d:60:20:df:f9:
a5:1b:b1:17:ea:07:36:a8:7f:16:9e:2b:ec:3c:87:86:88:00:
6a:ee:4e:a1:1c:66:56:45:c2:cc:7b:ce:ea:13:86:98:3b:9e:
b2:ff:0a:7c:3e:41:ed:22:71:df:e9:5a:71:1a:f8:ff:6b:2c:
84:d7:e7:43:f0:85:57:8c:be:e7:b8:19:fe:64:84:68:70:6a:
23:e5:44:17:96:f5:2d:63:05:bb:0b:39:42:a6:a8:3e:bb:ab:
bb:c9:d9:d0:21:5c:52:18:37:86:46:93:c8:f1:9c:1c:ef:4c:
14:fd:53:d0:67:6e:9b:e1:2d:9b:18:91:e3:4c:90:46:b2:41:
f9:ba:35:50:83:6b:8d:e4:80:94:71:1b:43:ce:ba:1c:7b:28:
5c:b8:2d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:43 2026 by rpki-client