Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier: nkHxrLaiZrZnC5sEKvBuZ3bUlm5KtImkCIHBV2RLJt4=
Subject key identifier: 13:0D:82:24:50:8C:5C:F0:EB:A6:57:E5:F4:E0:F4:AD:20:19:AA:90
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial: 019D38D392D6BC64525FE9FBD39A5B5E0FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number: 1142
Signing time: Sun 29 Mar 2026 09:01:22 +0000
Manifest this update: Sun 29 Mar 2026 09:01:22 +0000
Manifest next update: Mon 30 Mar 2026 09:01:22 +0000
Files and hashes: 1: NZpb2E9m2foAvsfyivT97O1jcng.roa (hash: 0RJf0q9CZo1wWgsu4Kz3lRf78w4e5oNe9BmVigDLVTE=)
2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: 1RplDhEo6ftXWhv7r8WsFle8sFJLJ8tNtmSloctqckY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:92:d6:bc:64:52:5f:e9:fb:d3:9a:5b:5e:0f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Validity
Not Before: Mar 29 09:01:22 2026 GMT
Not After : Mar 30 09:01:22 2026 GMT
Subject: CN=130d8224508c5cf0eba657e5f4e0f4ad2019aa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:4c:88:bb:a2:5b:95:79:1b:74:da:90:41:
6f:46:f6:6c:0c:79:b3:04:be:51:c7:74:84:0c:89:
4c:dc:f3:24:82:75:82:b7:01:84:cd:91:54:e8:ca:
b2:47:14:c0:13:bd:8b:6d:d6:27:01:2b:cf:2d:ca:
d4:b0:79:40:e9:da:56:8e:d5:e2:37:af:8b:2f:17:
a9:ea:b9:13:fc:8f:62:e8:9a:6c:65:24:03:40:8e:
31:04:ae:65:21:ef:22:93:01:90:23:8a:7c:ae:5d:
6e:ed:51:58:75:0e:8f:df:89:1b:54:96:51:f7:1c:
8a:fa:40:d4:01:ef:e1:ea:ac:60:51:f1:3c:a5:11:
eb:bc:3f:d8:cf:39:c0:2a:c8:1b:9e:e6:07:69:1d:
0c:0d:81:5b:1a:8a:c0:d0:9b:f1:ba:03:ff:04:95:
e5:8c:37:da:2a:66:85:fb:f7:14:f7:c9:bd:0f:e3:
49:2c:0a:da:c4:db:52:28:e1:ac:6f:69:8b:1e:ed:
8e:ea:19:39:cc:18:f8:bf:26:0b:8c:33:1f:04:a1:
53:24:5d:95:f2:5b:c8:2e:8e:96:f9:bb:c0:5d:f3:
10:a7:d4:7a:25:b4:a3:29:52:f2:fb:d9:9c:3f:7a:
db:8f:36:72:46:6a:1f:63:e1:19:24:67:a5:4b:ba:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0D:82:24:50:8C:5C:F0:EB:A6:57:E5:F4:E0:F4:AD:20:19:AA:90
X509v3 Authority Key Identifier:
keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:2f:36:60:c4:7e:fe:e0:d9:97:c8:01:64:88:9a:44:2a:dc:
42:b8:fe:ce:9d:68:ca:fe:38:b1:98:08:8c:53:70:6f:e8:0c:
84:6b:39:ba:b9:29:8b:da:5f:e9:c2:a5:7f:dc:45:c8:c7:d2:
6a:4d:da:95:77:de:c0:5c:56:4e:a0:ff:bd:e2:58:72:51:6d:
9b:df:41:75:06:4b:dc:3e:05:c6:46:20:d6:df:01:ba:d4:8c:
d3:80:0d:68:f8:25:04:80:ee:70:32:22:aa:51:2b:b3:57:c8:
4c:19:9d:c4:96:fd:23:fe:1f:51:17:64:f9:a5:c2:62:ff:f8:
04:a3:6e:0a:43:b2:9e:74:be:d3:5a:a1:d2:86:be:11:62:a4:
80:9c:68:cb:05:71:f4:69:7c:af:01:8e:1f:41:7c:c3:e8:28:
16:f1:6d:3b:77:bb:85:2b:d7:9a:80:26:43:97:6b:34:f7:c2:
9b:8c:86:08:38:09:c0:15:14:cf:c9:36:46:3a:c3:aa:fc:5a:
23:d2:1d:8a:2d:cb:98:d9:74:8d:a3:2e:bd:80:b8:39:a7:d3:
64:81:41:6d:db:76:cc:39:d5:35:7a:d7:d2:c6:e9:e4:3e:21:
85:b2:9a:ae:a0:a0:48:eb:40:75:05:ea:98:89:ae:4f:8e:51:
6c:f3:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:32 2026 by rpki-client