Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft
File: fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft (raw, json)
Hash identifier: T+J/XfIYyqAzLKG5gJSfZODgrhOm/TZR+/Ii94lBFME=
Subject key identifier: D7:04:9E:7E:61:F6:43:AA:B2:07:09:11:0D:30:B9:26:B3:CA:3C:E3
Authority key identifier: 7E:39:87:D5:EE:9C:89:3D:47:1E:44:98:56:64:39:71:91:10:3F:7D
Certificate issuer: /CN=7e3987d5ee9c893d471e44985664397191103f7d
Certificate serial: 019D37F6DACEB3C0750111FEF89C8325CCE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmH1e6ciT1HHkSYVmQ5cZEQP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft
Manifest number: 9F
Signing time: Sun 29 Mar 2026 05:00:17 +0000
Manifest this update: Sun 29 Mar 2026 05:00:17 +0000
Manifest next update: Mon 30 Mar 2026 05:00:17 +0000
Files and hashes: 1: fjmH1e6ciT1HHkSYVmQ5cZEQP30.crl (hash: YhPIVbXsSoVYzHj5P+/8wvDkhmoWJNEcHouQ8pEc7c4=)
2: hiqnGKYGj-WhG8_O9GaEv4rC0GY.roa (hash: 15L8jWjWJZXBu2em4tCUMNmqfpGGdBu7LQHu48MUm7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjmH1e6ciT1HHkSYVmQ5cZEQP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:da:ce:b3:c0:75:01:11:fe:f8:9c:83:25:cc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3987d5ee9c893d471e44985664397191103f7d
Validity
Not Before: Mar 29 05:00:17 2026 GMT
Not After : Mar 30 05:00:17 2026 GMT
Subject: CN=d7049e7e61f643aab20709110d30b926b3ca3ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:f2:b8:05:6e:ef:d3:05:a5:56:e5:78:f1:
9a:b6:d1:3d:2e:b2:a7:66:2f:3a:38:22:9c:35:84:
a7:e8:7b:85:5b:7f:30:60:ca:e2:94:da:67:07:a9:
df:4a:24:77:3c:42:95:8c:0f:db:1f:14:64:f6:34:
ab:80:8d:64:88:67:f0:2c:51:34:18:7d:54:98:82:
2a:14:c5:28:ee:14:ed:22:38:a4:6d:63:3a:48:27:
07:e5:8c:ef:69:19:f1:10:33:b8:dd:5d:69:7a:f6:
17:c0:e6:e7:5a:28:a7:6d:08:8d:1e:bd:4e:24:02:
2c:85:29:e7:38:ac:fa:86:63:d7:57:dd:c2:e4:b5:
70:95:ea:fb:be:c0:f8:08:dc:60:a1:67:9b:b7:bb:
73:2b:05:64:b7:d5:a7:82:24:b8:7a:97:6d:43:62:
c9:62:88:af:c5:da:87:3e:59:67:fe:cf:41:a3:cc:
76:38:0f:bb:74:34:3e:aa:d1:0a:e4:8f:9b:1b:ab:
17:b0:ea:fc:46:a2:22:cc:ba:12:98:d8:89:c5:e4:
ac:99:38:ec:03:ba:0e:2f:8e:00:1f:fa:1a:14:f6:
8c:7e:5a:b0:80:b0:f5:dd:75:76:ea:25:3e:4d:35:
5f:43:21:40:ac:aa:7d:a2:51:60:e3:6a:68:6a:2b:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:04:9E:7E:61:F6:43:AA:B2:07:09:11:0D:30:B9:26:B3:CA:3C:E3
X509v3 Authority Key Identifier:
keyid:7E:39:87:D5:EE:9C:89:3D:47:1E:44:98:56:64:39:71:91:10:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmH1e6ciT1HHkSYVmQ5cZEQP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f7:b4:1e:2e:61:b6:45:bb:e4:c9:a5:e1:cb:84:fa:b7:e7:
67:f5:5d:4b:db:37:0b:5d:10:65:7a:a7:78:01:37:d8:8f:67:
b5:08:27:91:9b:6f:e2:e3:99:a1:c0:d8:80:c5:30:3e:a4:9a:
74:2d:7a:46:f9:ab:49:37:e1:7f:64:3b:0a:8f:9a:19:37:6d:
f0:7c:72:9a:02:3e:82:da:8d:ec:31:12:a3:20:06:7c:21:bf:
ba:1a:b7:5f:ab:b9:fc:36:d0:31:25:9d:8d:7a:50:36:60:19:
c9:f5:c0:46:65:93:7f:95:80:3f:b7:be:c0:df:6d:53:5d:f6:
b7:a6:2b:01:8e:a4:06:4d:c4:31:ec:4c:49:c5:ea:9c:50:32:
33:a2:8b:19:03:40:1a:97:7a:6b:4b:f3:5d:ab:88:81:36:4c:
40:8f:50:be:9f:53:3d:c5:2b:c7:cf:9b:c5:d1:c4:42:8d:ec:
ea:53:47:21:47:59:3b:44:e3:a1:51:0e:45:cf:83:ee:f9:0e:
cf:cb:1e:42:5f:0f:85:04:1c:2a:8b:9b:4c:98:cd:42:5b:8b:
b9:71:9d:d5:6f:7f:48:68:07:25:96:6a:97:c5:4b:fc:59:ae:
20:a0:87:a0:56:a5:7e:06:f0:2a:df:c0:d7:c0:9c:d1:47:00:
f5:be:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:21 2026 by rpki-client