Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File: fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier: 1M75F+QBNXgvTkVZf0cMQ4C+QPizSzD1N+VlhiGhBOU=
Subject key identifier: A1:15:5F:FD:DB:83:92:F8:FF:E7:FA:30:BF:E2:5C:51:6B:16:5C:2C
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial: 019D2B4E3EEE20CC2AE508658DFA4B6ED1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number: 189C
Signing time: Thu 26 Mar 2026 18:00:41 +0000
Manifest this update: Thu 26 Mar 2026 18:00:41 +0000
Manifest next update: Fri 27 Mar 2026 18:00:41 +0000
Files and hashes: 1: OexBeKcIncb0jKb4JvVZXcJT1Ug.roa (hash: O2kEZ95yzKLiq43k1ys04PPuKi6PpIFY+Xw79K5ILEo=)
2: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: ONxZTqbsr/ptJu6obRmLwdW44ZJ0zIIa4qFwjwyL5MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:3e:ee:20:cc:2a:e5:08:65:8d:fa:4b:6e:d1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Validity
Not Before: Mar 26 18:00:41 2026 GMT
Not After : Mar 27 18:00:41 2026 GMT
Subject: CN=a1155ffddb8392f8ffe7fa30bfe25c516b165c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:65:6f:02:9d:e1:9f:26:16:20:a7:f6:5b:
2a:ef:73:54:7c:4a:ac:77:e8:f3:78:42:12:a4:b8:
55:0a:d1:06:47:ca:80:f5:53:3b:ff:1d:a4:ee:ff:
0d:4e:91:81:e8:a2:68:fd:56:83:f9:08:f5:86:ed:
68:7e:8d:bd:69:55:5e:52:ae:67:54:22:49:ae:24:
da:8c:76:60:e6:f1:82:6f:69:5f:c9:a8:dd:35:ad:
2e:d3:5a:4e:31:f0:aa:cd:96:10:b3:73:3e:ba:52:
e5:d1:4e:34:25:dd:ae:77:d8:a0:45:59:ba:de:6b:
53:08:48:a5:e3:65:55:e3:1b:9c:ca:ed:67:13:92:
fb:cc:31:22:79:bf:e3:f0:9f:aa:d0:39:52:23:6f:
3e:4c:50:ad:57:50:ad:d0:0d:d1:c9:b9:a0:48:ef:
6b:f4:f3:d4:c4:6a:3e:77:90:21:23:27:5d:3f:ce:
36:a7:47:8c:b6:25:b0:e8:ed:e0:bc:27:0e:ef:b6:
8f:7c:90:6a:81:0c:49:0f:5d:4b:25:6f:13:1a:4f:
97:1c:3d:59:4a:ea:c2:92:2b:e8:cd:17:92:fc:bc:
b2:82:9a:5c:61:b6:68:59:d3:3e:59:90:82:68:23:
79:cc:3f:38:2b:b8:83:b6:d4:a7:ea:25:eb:71:99:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:15:5F:FD:DB:83:92:F8:FF:E7:FA:30:BF:E2:5C:51:6B:16:5C:2C
X509v3 Authority Key Identifier:
keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d9:89:89:b0:c2:16:30:bd:5f:ad:ed:d1:db:4c:e4:46:53:
ba:3c:11:0c:ca:8a:d3:0b:c4:eb:c8:9f:fb:2e:2c:4e:f6:8c:
48:dc:91:66:c4:30:ba:73:ea:25:59:a9:3b:d8:d0:a9:ae:e2:
91:c6:bf:0a:41:46:fb:7c:c6:05:34:96:1a:00:be:e7:78:bb:
c9:a1:a0:c2:d3:e0:90:39:25:94:1f:d5:00:96:45:ef:d4:33:
59:33:bb:09:0a:dd:6e:97:c7:ed:c7:d6:36:70:47:bf:48:e5:
1f:d3:5a:75:a1:79:38:23:37:97:3a:1d:e8:6c:37:00:e9:17:
38:6e:71:a8:2a:5d:81:ef:ad:bd:a8:f8:73:0f:ed:5d:1d:85:
6f:72:76:ba:15:44:f0:12:96:fa:08:9c:7a:23:0b:f4:18:71:
db:73:0e:fb:96:a5:0e:8c:5c:c9:0f:98:84:e1:b0:46:8c:6a:
a7:e4:c2:d8:a5:c0:a7:69:cd:a7:a6:6f:e8:8e:21:1b:97:3b:
13:b8:9f:14:8d:7a:4c:ec:15:47:82:4c:6f:e2:a7:57:76:71:
23:7c:ef:b7:fa:55:1d:5c:c2:01:e5:7e:52:36:0a:0d:2c:f0:
91:bb:58:88:c0:c5:7f:6f:84:c1:71:a0:54:38:08:38:fc:b5:
92:ce:4b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:25:17 2026 by rpki-client