Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier: iBLl7p5hlp18gMBMbcU5hntQqbSmq4dX+mTCgQvaD90=
Subject key identifier: FE:AB:28:F9:DA:3B:0B:20:D8:47:66:E8:61:E1:F8:BB:E0:32:C3:C8
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial: 019CE3DA8EB6616D397E3CEB6BD66A8B5647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number: 1536
Signing time: Thu 12 Mar 2026 21:01:17 +0000
Manifest this update: Thu 12 Mar 2026 21:01:17 +0000
Manifest next update: Fri 13 Mar 2026 21:01:17 +0000
Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: s8PVf5ENs+Pgpk+9K6RXdsf41rea8DtmecT9iTrFnPQ=)
2: pnSX4g2lmq0K8FTBTKkZmOyOugg.roa (hash: V6XhkHNDk99HDBU8c9gDLWqCQBMIvpkfeeSqTLRceRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:8e:b6:61:6d:39:7e:3c:eb:6b:d6:6a:8b:56:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Validity
Not Before: Mar 12 21:01:17 2026 GMT
Not After : Mar 13 21:01:17 2026 GMT
Subject: CN=feab28f9da3b0b20d84766e861e1f8bbe032c3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:c8:89:38:75:03:c8:e0:e2:c7:ef:0f:5d:
b2:98:5d:bd:af:27:55:9e:4a:1a:34:9c:45:65:1b:
bf:99:fe:12:40:ff:20:33:72:b6:bd:7c:43:17:53:
08:db:c5:54:e8:c8:f1:18:a7:b6:63:77:a6:cd:6d:
48:10:4d:3b:09:83:5c:e0:25:b1:fd:9a:54:28:c6:
e3:01:b9:88:51:49:ea:25:b7:54:b4:a6:00:90:6d:
74:7c:d3:28:ca:f9:b5:a3:cb:ec:99:f3:b0:2f:45:
38:60:e8:85:a8:43:5b:48:51:1a:82:96:6d:47:ff:
74:b4:f5:48:10:a2:20:20:76:25:c0:ae:ce:a5:10:
ff:08:a7:bf:54:85:95:ca:78:bc:09:54:c6:c1:8d:
4a:1e:dc:e2:07:e7:d1:72:1d:8d:01:dc:09:08:75:
e7:3c:88:6e:cb:aa:82:19:e6:cf:e1:b6:f4:0d:55:
48:74:5d:68:f7:9e:5b:0e:4e:91:f8:2a:83:3e:15:
c8:dd:c8:11:d9:f9:a3:90:6a:b1:5b:93:ef:e4:43:
41:06:2e:33:43:a1:f0:52:6e:f0:bc:98:33:59:a3:
f5:c4:1d:c9:d8:94:cb:f1:bc:ec:d9:04:db:cf:bf:
d0:5d:b0:cc:22:57:25:d4:25:52:c5:03:07:28:c5:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AB:28:F9:DA:3B:0B:20:D8:47:66:E8:61:E1:F8:BB:E0:32:C3:C8
X509v3 Authority Key Identifier:
keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e8:29:0e:20:9c:5d:7d:45:b9:ec:42:e8:43:8f:a6:e3:c7:
c3:cc:46:bb:58:1a:14:5c:4a:4b:4d:98:af:b8:2d:dc:f7:f4:
66:1a:69:19:b0:65:ae:69:a9:92:f4:3a:75:80:0f:e0:24:08:
f6:a9:56:f9:14:61:09:d1:d1:5f:f3:55:a2:ef:b5:2f:66:72:
9f:3f:10:11:ee:15:be:37:09:57:7d:6c:81:e0:5d:d8:60:65:
d5:3e:ab:a5:0d:ff:c2:94:81:f1:38:b1:d7:f7:8a:8e:77:50:
fc:dd:83:5a:49:b8:47:98:a2:66:25:21:89:fe:8d:d3:f7:c0:
7b:7e:28:2d:e7:3a:b6:6d:64:bb:31:95:48:6c:d2:95:18:cb:
15:b9:8f:38:02:6f:c4:61:a1:c5:fe:44:02:ab:2e:ad:99:08:
1c:cc:fb:56:5a:fe:56:75:ee:80:d5:71:76:69:c7:58:66:41:
31:11:9e:a0:ae:fa:7a:5c:55:a4:a5:a3:72:b5:03:2e:ed:2b:
0d:08:b9:4b:eb:2b:c9:de:6a:64:1c:f8:be:75:80:38:3c:d4:
d3:86:39:54:13:f9:a1:1d:60:e1:c3:29:38:04:61:55:c9:44:
a1:d5:cf:58:95:aa:e3:69:6f:72:e8:25:17:3e:0c:c2:54:0e:
fa:4c:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:18:17 2026 by rpki-client