Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
File: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft (raw, json)
Hash identifier: +oCCzu0pFRn6j0QDdh1gySwahF44hZZri70sPBgzYc8=
Subject key identifier: EB:99:34:16:BE:C0:8E:44:E3:7B:24:DB:7A:52:A1:23:07:17:A3:D3
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 019D137D2ED28F01A78387F432CB56FFA38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
Manifest number: 1882
Signing time: Sun 22 Mar 2026 03:01:04 +0000
Manifest this update: Sun 22 Mar 2026 03:01:04 +0000
Manifest next update: Mon 23 Mar 2026 03:01:04 +0000
Files and hashes: 1: J5kWKaTeftcxN3T6_7jKcPf3Q4g.roa (hash: ZKoxCa2uj0cYbH0WJu6XJV9TAVwhK/nXaOs/emSjvm4=)
2: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl (hash: w8ZOvpvmRSDfgjq5ygc+bDXvn+Y+9+XoAEYKu8kxSLg=)
3: gmSsfOKXQkDDy4ovXXqyVsXoK10.roa (hash: Fo+hT/a1FZatdtcuWByXNim69uyN5v6qXMsqXNhOVFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:13:7d:2e:d2:8f:01:a7:83:87:f4:32:cb:56:ff:a3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Mar 22 03:01:04 2026 GMT
Not After : Mar 23 03:01:04 2026 GMT
Subject: CN=eb993416bec08e44e37b24db7a52a1230717a3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:97:56:69:db:72:88:de:f0:08:e6:75:fe:
43:d3:0a:dd:a1:15:8d:4a:61:56:a7:69:6f:61:de:
91:2f:aa:d5:51:48:81:10:02:d0:ae:6f:56:be:30:
f0:64:30:db:6c:9c:af:a8:cd:4d:0f:08:66:ed:7d:
6d:a0:d5:a4:36:42:e8:b4:e6:af:c3:0d:de:92:4e:
d4:07:b3:af:e2:bb:72:ba:f2:e5:fe:66:61:63:8b:
21:e1:9b:07:7e:5c:1b:a9:e3:ea:0f:f1:d8:1d:0c:
0c:37:06:a1:2c:cf:aa:e6:90:b8:42:56:56:b6:83:
4d:e8:c0:60:ef:13:c2:fa:cc:30:f0:c8:de:f6:54:
60:a3:59:61:e3:85:1b:9a:6e:c1:8d:83:b0:45:a2:
f3:de:98:df:f6:15:60:da:9a:0f:16:45:0b:91:7b:
60:97:f9:69:48:bb:2b:11:5f:c8:d4:58:ad:c9:7a:
29:b2:be:4e:c7:32:8a:ce:d3:25:90:e9:19:87:54:
12:b4:20:05:f3:4a:b2:81:94:31:d4:3e:fc:54:1d:
63:7e:32:34:7d:1b:17:e2:33:92:59:36:dc:81:5e:
8d:74:9f:e7:50:77:e6:33:34:a3:aa:34:6d:69:ac:
7c:26:b3:b0:2c:9d:81:93:7d:fb:30:95:ec:43:57:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:99:34:16:BE:C0:8E:44:E3:7B:24:DB:7A:52:A1:23:07:17:A3:D3
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e8:d2:60:04:e3:0f:67:03:79:3d:e3:e0:7b:81:9f:5f:0a:
f3:94:51:a0:65:c9:1b:64:ca:87:c1:c6:46:33:db:3d:db:51:
ec:7b:25:3e:c2:d5:74:2c:07:37:da:ad:f7:9d:28:96:e2:9e:
14:5f:b5:a1:19:fc:18:c2:35:87:63:6e:1a:78:03:bd:13:c6:
3b:e0:ec:b2:c9:4d:36:da:28:9d:5f:d8:1d:ff:8f:54:6c:02:
ac:2b:fe:39:41:22:cc:c7:1f:fc:69:81:f5:d1:e6:a0:18:29:
ae:86:75:54:6d:59:f9:fb:6b:4a:be:71:ca:46:ea:80:76:91:
ba:4d:d6:49:46:56:f8:47:1f:fc:93:49:4e:db:a6:e8:ae:15:
09:b3:da:57:f3:ee:e5:6b:41:f0:b6:28:14:a3:8d:55:82:d2:
31:f5:cb:0c:c4:e2:c7:e8:14:4b:b6:29:82:3e:bb:ba:0c:79:
31:16:80:3d:17:de:2e:4a:b1:b1:b9:0b:15:3f:79:b7:ba:46:
20:e0:92:e0:a7:36:b6:d5:eb:21:b4:ea:86:40:22:ed:55:19:
70:d9:78:97:20:ec:16:64:86:77:56:15:d7:73:fd:a0:cd:fb:
6b:a8:13:a6:12:64:39:98:80:a9:d5:96:e1:c7:29:79:83:7f:
7a:2b:b8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:21:22 2026 by rpki-client