Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: 8LZ4v3CiEj7u9ogSF4L1oUs4/DH40N2JKfb8ENneHM4=
Subject key identifier: 07:50:72:26:57:25:36:C3:80:F7:D6:FB:78:4C:BF:7E:77:91:05:C9
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 019D29CDDCBFD366A3EB327650E3C3435554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:00:50 +0000
Manifest this update: Thu 26 Mar 2026 11:00:50 +0000
Manifest next update: Fri 27 Mar 2026 11:00:50 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: fO8wSs/heQMwpp49Wi5asVktdgEyrWF9v2+jTY1rEIc=)
2: sGfgaW1LiewBhrOBJvsdriioaTU.roa (hash: op9iNN949E3VNzRYyQTY+5GgLdt3CTSRD0WZrCE+fbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:dc:bf:d3:66:a3:eb:32:76:50:e3:c3:43:55:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Mar 26 11:00:50 2026 GMT
Not After : Mar 27 11:00:50 2026 GMT
Subject: CN=07507226572536c380f7d6fb784cbf7e779105c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:8b:68:90:7b:0c:c0:fa:3c:d5:8c:7e:89:
89:f0:9c:b2:16:9f:42:96:12:78:fd:e1:46:a2:cf:
68:72:77:2c:bf:a4:c8:a7:5b:02:d7:31:36:24:63:
bb:44:02:78:cb:b2:ef:65:00:1e:44:e4:23:28:a7:
36:65:fd:5d:b5:e9:80:f6:fe:68:ff:80:19:14:0a:
0c:2e:7e:6b:eb:9f:34:82:0b:ea:dc:8a:64:0d:31:
da:da:f1:76:db:cf:bc:01:cc:a6:fd:43:96:c8:ed:
53:38:20:a2:dc:28:ca:27:a3:e8:b8:62:a7:09:ea:
cc:da:b0:89:5b:5d:f1:bb:94:d6:5a:f9:24:ab:08:
b9:5f:ac:be:bc:41:41:7b:7a:47:2b:43:0a:c9:a0:
5f:62:c6:16:e7:9c:49:be:b4:c7:47:47:11:b8:e5:
c2:b1:28:dc:8c:bc:da:bd:89:83:f7:0e:df:5c:70:
2e:36:00:7e:f8:90:53:13:7e:18:4c:10:a9:3c:fe:
dd:a0:52:4f:1b:8a:3a:87:da:57:fa:b1:6e:ff:9d:
ce:bd:b7:6c:c1:e6:51:5d:8d:f4:40:f3:f0:89:ae:
06:e4:53:c1:ad:37:e0:34:5b:3c:34:4e:dc:9d:10:
24:2f:88:a1:1d:da:a6:24:42:8e:f1:ac:a5:7e:4c:
88:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:50:72:26:57:25:36:C3:80:F7:D6:FB:78:4C:BF:7E:77:91:05:C9
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7b:3e:41:2a:de:6f:6a:e9:a4:6f:6b:58:be:29:c3:96:fd:
0b:be:a4:ca:76:c4:37:b8:21:88:f0:94:2e:ae:c6:63:9b:db:
40:d1:9b:57:2c:b8:f6:3a:07:51:a3:6e:2b:21:c4:2b:37:4d:
78:5d:ae:3b:91:24:5d:91:a2:da:68:0f:8a:58:e0:68:d1:ca:
5a:ab:73:3b:82:d7:33:57:8b:29:6b:80:74:39:0f:44:10:26:
64:bd:c1:92:30:41:c0:82:0d:fa:ef:f8:56:d2:25:99:87:eb:
49:29:80:f2:eb:d9:50:90:16:34:f4:be:d5:53:4e:8f:03:cb:
c9:6a:69:8f:59:c5:e5:a7:5e:5e:b6:22:88:00:03:8d:92:60:
af:e3:b1:a0:45:e0:dc:9d:2d:30:7f:42:e2:e1:04:03:f9:a7:
e8:89:9f:28:a5:24:43:da:65:af:e6:4c:17:f0:d3:1d:1f:1f:
36:71:e1:ce:7e:fc:2b:e3:90:03:ad:20:e4:0e:93:2a:f4:97:
80:b3:f5:c6:be:38:e1:3a:aa:60:3c:eb:7d:52:42:55:25:ac:
3f:12:46:f7:40:83:38:21:c1:26:7c:61:96:c8:a3:da:cb:ef:
7e:cb:ba:a3:20:d1:6c:58:25:6b:8a:24:dc:5a:69:16:65:e0:
88:b0:63:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:30 2026 by rpki-client