Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: AXBGsgwbOkVvburwWON1PggwyGzGy0eihqw/T21c2tM=
Subject key identifier: 7A:3A:8D:11:F0:D8:55:71:65:E3:E8:85:CD:A2:C7:1E:FA:B3:1F:BF
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 019D371BBE3DC3E5D64FF2398D76BCEB021F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 17CE
Signing time: Sun 29 Mar 2026 01:00:58 +0000
Manifest this update: Sun 29 Mar 2026 01:00:58 +0000
Manifest next update: Mon 30 Mar 2026 01:00:58 +0000
Files and hashes: 1: DP2ZVF5XMtIlb8PSMaOqb9pBnpY.roa (hash: jGqjs9xozz6rpTqRrKhgcskeRFoVeCtnOBzJB/wnJHI=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: kLlB1okHQugFJTRHQOprJeLaEIK7cQ3A6iHnVfP2NGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:be:3d:c3:e5:d6:4f:f2:39:8d:76:bc:eb:02:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Mar 29 01:00:58 2026 GMT
Not After : Mar 30 01:00:58 2026 GMT
Subject: CN=7a3a8d11f0d8557165e3e885cda2c71efab31fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:5a:2a:c9:95:e2:91:6e:a4:52:d3:8b:0c:
bf:3a:9c:e2:36:72:a7:88:ec:c0:18:e9:1b:90:97:
38:e2:c6:7a:e0:c4:e1:88:7a:af:8c:41:80:a9:f6:
12:a0:b4:71:99:7e:41:5d:90:8a:e1:f6:2a:ff:e7:
5b:ef:da:1c:0d:91:63:b8:f6:f4:36:2f:74:5a:78:
ab:51:f6:07:aa:9b:67:ef:2a:3d:67:fd:24:8f:49:
f1:45:f5:f3:31:9b:2e:24:64:97:d7:16:b1:ea:05:
40:6e:98:88:8e:bc:a2:53:59:5c:5e:aa:07:1d:f3:
85:3e:d5:3d:8c:14:96:d9:41:a3:d3:9b:c2:b3:af:
32:52:6f:89:80:51:60:25:72:6f:37:f1:29:b0:c4:
fe:68:d0:26:93:01:eb:71:38:53:c2:bb:45:85:ba:
97:ab:ab:b5:3b:e3:f5:a6:48:8e:51:b2:5f:97:ef:
f5:19:7d:e1:51:c7:21:31:46:42:0c:7c:ca:ea:75:
3c:7d:9d:a2:6b:f6:80:b9:fe:d8:d3:05:f1:2e:ac:
14:ab:4f:a7:0e:e5:50:45:14:84:ca:3a:d9:2a:b6:
db:89:7b:d5:c8:f7:c7:0e:29:67:da:28:ce:32:1b:
d8:dc:ae:a5:cc:b1:5e:65:bf:c0:b2:66:6f:df:4f:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:8D:11:F0:D8:55:71:65:E3:E8:85:CD:A2:C7:1E:FA:B3:1F:BF
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7f:49:22:ff:13:32:80:88:22:54:32:6f:e2:7d:3c:59:17:
3e:ac:84:a8:2b:c4:ce:a3:35:21:03:67:af:47:e8:65:9b:8f:
8e:15:66:e1:96:55:3c:2a:15:e0:c8:6c:fe:4c:67:32:b1:ac:
58:13:a4:b0:42:26:35:8b:10:c2:ab:44:3a:8f:62:0d:23:84:
58:93:1c:58:87:3e:a5:bf:4b:36:85:cb:73:6d:f1:c6:bf:35:
5a:47:96:af:9f:63:51:ac:b1:f6:a5:77:ae:36:4c:5c:95:f7:
d8:aa:81:b2:d8:af:49:2d:3f:11:2f:05:94:78:ff:27:16:45:
b9:25:c9:9b:44:b5:4f:c7:55:4f:4a:33:c4:8e:83:0c:08:b8:
f2:0a:32:da:9c:5f:fc:be:fc:9e:31:71:10:6b:fe:8f:33:9e:
ed:a6:43:3b:8e:a6:a8:6c:90:ad:7e:29:f4:ce:24:4f:7a:53:
f7:2c:75:a7:37:c7:cf:45:b6:60:a2:65:3f:0d:36:2c:ac:c3:
61:19:83:b1:2c:89:6e:93:8e:5f:73:82:06:15:19:a9:06:78:
b6:50:cf:75:41:82:7d:c5:12:96:90:49:ab:3c:35:c5:21:0e:
82:0b:5f:cc:9b:05:91:5c:f4:f5:63:61:a4:14:d1:7c:87:4a:
34:2a:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:11 2026 by rpki-client