Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: 2jBS+TeKfE+OMMda4D18ONLLx9zBh/B+sxhNmyJKT1s=
Subject key identifier: 80:47:81:32:1A:AC:C9:7C:F6:A2:EF:6C:32:9D:C6:E6:36:F2:3D:01
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019CE6DB203EF122E3B947E47C2D457FBE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0E14
Signing time: Fri 13 Mar 2026 11:00:46 +0000
Manifest this update: Fri 13 Mar 2026 11:00:46 +0000
Manifest next update: Sat 14 Mar 2026 11:00:46 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: JBFV4Beo4ZcMJED8V23o3Ugg+8XyiF2tN+gtPffouiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:20:3e:f1:22:e3:b9:47:e4:7c:2d:45:7f:be:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Mar 13 11:00:46 2026 GMT
Not After : Mar 14 11:00:46 2026 GMT
Subject: CN=804781321aacc97cf6a2ef6c329dc6e636f23d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:ac:26:75:f0:4d:e0:35:f3:e7:be:52:87:
57:14:dd:0d:6a:eb:2c:0c:87:e5:c9:35:64:41:c0:
f1:53:8d:61:33:c9:72:aa:65:f6:a8:9a:68:ba:71:
05:35:be:73:8c:94:b9:8c:70:85:7e:b3:d3:8e:44:
de:ae:7a:3c:22:44:9c:17:dc:1d:17:b7:a4:de:24:
13:86:57:e4:38:0b:de:1c:54:69:3f:3b:f3:58:7e:
cb:39:4b:e2:8b:4c:7e:25:41:d4:c8:f0:b3:19:90:
31:4f:01:12:c8:ab:f4:b7:87:09:a5:e1:fb:ac:67:
4d:ee:95:20:e9:fe:f6:fd:4d:7e:ee:7d:8f:06:5d:
3a:75:64:80:5d:2f:b0:cc:43:80:bf:48:ae:26:ff:
4c:0e:69:76:74:59:1d:11:a9:c7:2d:25:a6:d9:f6:
14:95:9d:16:98:fd:cb:4d:49:77:e6:3f:21:ca:be:
d0:47:e9:01:be:39:49:06:4a:c0:70:a1:80:1d:13:
5e:8b:0e:4b:64:40:b6:5b:49:8f:ff:d2:eb:02:b0:
05:da:66:d9:62:0b:c2:8d:ac:ce:c3:b7:34:a7:63:
c8:02:8e:84:80:b5:e9:03:e6:ce:84:01:17:79:1b:
99:32:15:69:a3:da:bc:7b:c9:77:9d:b9:4b:de:8d:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:47:81:32:1A:AC:C9:7C:F6:A2:EF:6C:32:9D:C6:E6:36:F2:3D:01
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8d:92:8f:e7:cd:0a:98:ea:d2:62:ad:dd:ef:40:4a:2d:64:
d8:09:9e:f1:13:49:c7:ef:30:e8:17:86:e5:2e:65:55:e6:9e:
39:51:bd:60:21:4a:7d:2e:a0:73:54:ca:a7:d5:e8:05:8c:b7:
c5:e7:3b:b5:b7:fc:8e:55:72:af:9c:87:cb:89:c0:05:bf:af:
41:58:59:a5:a6:0c:7f:90:87:de:ee:61:26:e7:9b:63:e4:91:
86:67:f7:c9:62:e9:ac:48:dc:43:4d:b0:fa:05:9a:f6:2e:1a:
de:9f:19:3c:79:30:aa:d2:30:12:c6:f7:80:2b:d3:2d:12:03:
ce:50:0b:2c:98:36:58:85:0d:ab:1b:6e:a8:9c:cd:cf:0f:b9:
26:b9:93:50:6d:47:3b:10:83:ba:54:41:3a:6a:bc:c3:ad:4c:
ae:87:c5:21:b6:71:de:e3:70:3b:7b:48:db:01:52:88:58:bb:
a6:67:d4:08:89:52:46:76:90:66:4a:88:d5:77:c2:98:81:48:
a2:a3:cf:56:79:76:f6:b7:17:00:2c:bd:90:f0:c2:41:b0:6a:
14:55:3e:a3:42:39:1b:ed:cc:57:0e:12:2e:65:be:65:98:ed:
7f:94:62:1d:19:82:60:e2:52:3b:40:0d:b1:14:09:ed:83:65:
58:5b:89:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:13 2026 by rpki-client