Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: zz272UlKOz7TZWJlKGKMBFg/9sKlLSujTQP1LhJDoZ0=
Subject key identifier: B1:1B:FD:E5:3A:3D:86:E4:20:76:DD:AE:DB:09:18:1F:B6:90:08:DA
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 019CE3D9D41F88BBCAA83DDAB543E8E1284E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 1864
Signing time: Thu 12 Mar 2026 21:00:29 +0000
Manifest this update: Thu 12 Mar 2026 21:00:29 +0000
Manifest next update: Fri 13 Mar 2026 21:00:29 +0000
Files and hashes: 1: ELCDYTv3WHzsKB02ZeWjPVSl8bs.roa (hash: 5NNB0UawGRF+n/YW9EFq+myT4uZRZ/4c2by4eferMo4=)
2: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: FfQ1BmZlymJfRklwUUQr3IdmQi59adt3TwoO4F9QO3s=)
3: wntuteFp_hWVEVUhXXzIfGeZGYg.roa (hash: COpIba0jOKYphmoFlVevEYtGvAQbqGOdq7aV51RcCa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:d4:1f:88:bb:ca:a8:3d:da:b5:43:e8:e1:28:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Mar 12 21:00:29 2026 GMT
Not After : Mar 13 21:00:29 2026 GMT
Subject: CN=b11bfde53a3d86e42076ddaedb09181fb69008da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:4a:34:a6:46:64:9c:d9:6b:a4:3c:6f:74:
c7:58:c0:93:cd:cf:c3:f3:cd:13:cb:f1:1f:cf:a0:
2a:4d:73:69:ce:7a:50:09:d2:b7:46:5a:f3:5c:f4:
19:49:22:2f:ed:dd:b1:d4:5a:d2:0a:48:89:b9:58:
be:d3:52:66:61:9b:88:56:7a:f8:91:5a:26:e6:0f:
a8:6a:cb:e4:90:80:92:cf:72:95:fe:ba:6e:0a:9b:
40:d6:95:ed:b8:4e:4d:da:4b:43:87:12:d3:7e:31:
ae:33:d0:2a:95:e2:dd:d6:aa:7a:d5:5d:7d:04:f7:
a6:26:48:ed:b6:9b:bd:b4:2a:55:5c:32:e3:f3:f7:
1f:96:c9:bb:2e:5c:60:f0:99:ad:ce:34:94:fa:21:
bf:78:d1:b3:24:01:a7:8f:54:cf:de:92:86:79:54:
20:a3:5d:3d:cf:0b:42:f0:c4:0e:c4:c5:7f:04:2a:
89:d3:f2:85:a8:6e:84:a7:6b:d1:46:cf:93:64:d4:
b1:7d:5e:ac:b1:13:0a:bd:91:7c:46:36:ea:32:ec:
9c:4f:3f:42:54:92:a5:74:35:db:3b:3c:07:f9:b0:
d0:2e:8f:ff:52:d3:2b:95:af:6b:0f:d5:0c:f0:9c:
1f:8b:2a:bc:52:41:b4:58:d6:7d:48:7f:cd:dd:f4:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1B:FD:E5:3A:3D:86:E4:20:76:DD:AE:DB:09:18:1F:B6:90:08:DA
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cd:85:9c:34:e0:0b:08:a9:ac:b8:94:ce:b2:45:d1:13:b3:
61:67:c7:6a:ed:6c:21:0c:2f:e0:11:9e:da:fa:5c:f2:63:80:
7f:02:7b:c5:c1:3d:7c:d0:30:52:b6:fa:53:8c:2d:04:61:6c:
fd:26:4b:e7:51:10:02:88:b9:57:ed:3e:d1:b8:03:a1:71:b8:
3a:26:bf:62:4d:f7:80:41:74:f9:b2:52:f1:83:9c:18:82:0f:
2a:1d:76:1a:46:86:ef:64:5f:1e:90:d9:bd:4e:1c:2b:58:c8:
ba:f5:a9:3e:72:20:b4:7b:8b:bb:d0:6e:6d:b9:8e:bc:74:f3:
2f:96:23:9a:78:24:63:88:73:a9:27:23:67:bb:53:af:89:cb:
6f:80:29:06:d4:b6:e6:96:bf:72:32:c3:87:73:95:7d:ac:43:
73:2a:6d:8d:fd:30:a8:e3:84:f3:05:90:68:68:39:0a:82:95:
dd:68:6a:ae:29:d2:9c:eb:a1:56:bb:e2:50:23:df:67:af:ff:
1a:73:e2:c7:c7:a8:b3:8c:c2:eb:ed:5d:79:36:c7:17:2c:50:
5b:96:3d:fc:bb:eb:1f:ca:9b:52:c6:b4:33:95:35:41:6e:15:
ea:e2:e3:59:5e:75:45:56:37:c3:7a:6f:ef:19:bf:69:1f:e2:
43:40:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:14 2026 by rpki-client