Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
File: 1-0NLMrn7496VvHcdbSs8eaoBS_U.mft (raw, json)
Hash identifier: fzqONiMxgsXdFLtr7a5+GDSylHGdtCgWaavj72ogtho=
Subject key identifier: FC:A2:64:52:69:A8:82:00:DB:3B:36:5E:60:03:70:EB:15:B6:1E:65
Authority key identifier: FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
Certificate issuer: /CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Certificate serial: 019D2A3B46860297168C5977425A0C936CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
Manifest number: 017A
Signing time: Thu 26 Mar 2026 13:00:20 +0000
Manifest this update: Thu 26 Mar 2026 13:00:20 +0000
Manifest next update: Fri 27 Mar 2026 13:00:20 +0000
Files and hashes: 1: 1-0NLMrn7496VvHcdbSs8eaoBS_U.crl (hash: T/Av8nGnExiKvcCsgbqitvPpkpuYlB1G6qV5cBgam98=)
2: 118-0Se03Hd6WkrM5OjppqFR1S0.roa (hash: iigPQAfXfwcfzslQVLCKiVJRI0tND4zuk1TNSyWLZe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:46:86:02:97:16:8c:59:77:42:5a:0c:93:6c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Validity
Not Before: Mar 26 13:00:20 2026 GMT
Not After : Mar 27 13:00:20 2026 GMT
Subject: CN=fca2645269a88200db3b365e600370eb15b61e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:ed:60:3e:4b:c1:b3:e0:ca:51:4b:8b:7b:
a6:30:82:3b:19:4a:64:83:b7:c9:c8:f7:54:4c:ee:
cf:6b:ab:76:5c:7c:a2:5e:ff:53:a9:c0:de:10:95:
7d:b0:ed:98:3d:7d:b2:7b:13:49:fe:bc:2f:29:57:
ac:79:6b:0e:52:04:56:ae:dc:44:7c:90:66:d4:66:
8d:a6:6f:ae:8a:6c:26:a0:53:9d:0d:f5:f3:2f:37:
fe:90:8b:c2:5b:b6:a8:f2:82:4a:ef:8e:65:16:98:
1f:47:9f:37:e2:4e:6b:8d:8b:3b:10:26:9f:42:c4:
23:0a:ba:fd:2a:37:d9:6b:3b:89:9e:49:12:24:d0:
ea:20:9a:5a:4e:9c:ff:1f:e3:ed:d3:22:71:07:35:
b4:a4:fe:2c:08:6e:25:a8:dd:4d:bf:2b:51:ec:0b:
29:d2:83:53:60:b4:04:60:79:43:bc:f1:4a:64:97:
e6:a2:1b:e7:10:ee:e2:4f:e7:ed:93:5d:53:d5:41:
41:9a:d5:4b:6a:cb:e1:96:5b:af:8a:01:bb:c9:a8:
56:f0:af:d9:4f:6a:68:38:8e:89:37:8c:5f:4d:09:
25:7f:ce:f9:71:4f:16:3a:e1:95:83:2b:b2:96:73:
75:c8:8c:67:b7:b7:43:d0:22:f8:f1:d2:21:9c:1f:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A2:64:52:69:A8:82:00:DB:3B:36:5E:60:03:70:EB:15:B6:1E:65
X509v3 Authority Key Identifier:
keyid:FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:eb:70:e2:86:52:04:b2:56:a6:b9:23:40:cc:15:38:b1:55:
1b:78:fc:32:f9:9b:20:9f:1c:f4:c9:ee:ce:7e:07:d2:08:aa:
ca:bf:df:3b:41:ab:8d:a0:95:61:cf:a5:8e:12:66:f9:30:65:
af:16:1e:42:6a:b8:d4:6e:ff:e2:6f:c7:45:47:cb:91:49:7c:
40:96:da:8b:13:48:38:f3:cc:67:ab:24:08:2c:27:ae:5f:95:
26:b6:a0:73:91:ea:57:90:9b:00:44:62:99:25:84:cd:28:bb:
ad:90:a5:c7:65:77:ad:0b:bb:79:3d:a1:a9:fd:d5:04:0d:d3:
59:6c:86:6c:19:a7:37:b4:5d:ed:d2:99:86:1b:77:bc:73:87:
f5:d2:12:3a:4e:39:0f:53:19:0a:2c:f6:4c:ba:ad:24:1d:c4:
ea:46:4e:dd:9c:63:d4:8d:f9:39:2b:0b:d9:71:11:f2:33:83:
9d:ac:1e:e6:8f:e3:f2:7d:9e:17:4a:60:3a:94:d6:59:79:b1:
7a:8e:fa:47:c2:36:45:95:a4:47:f2:7e:7f:79:3c:9a:5d:10:
fa:0c:a5:04:d3:a8:d6:4b:c8:3d:16:b9:dc:97:26:cb:0c:a3:
a7:d5:f1:e7:ca:fd:23:71:ee:d6:c8:ca:8e:4e:16:7a:72:7b:
d2:fb:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:45 2026 by rpki-client