Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File: 1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier: T3+kKcSa6WjVUFZpkohaOqPgMIDgaKkydWzA2XOwNkw=
Subject key identifier: A0:F8:A9:9C:26:FF:3A:83:83:B4:BA:F9:46:E8:F4:BE:2F:7E:F9:24
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial: 019D386566C4B35F43AC714F96CB9DE7223C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number: 0419
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: q/gw+u1Nv/k1ADeQ8V1BmNFALW233h07pAvvcG7z6ds=)
2: zTtjoNNmqNJk4uedDe7ahXQuOF8.roa (hash: dHODXqFZoANMRWjrQgYBV+M06zr2Vxc9B/4+ABxunPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:66:c4:b3:5f:43:ac:71:4f:96:cb:9d:e7:22:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=a0f8a99c26ff3a8383b4baf946e8f4be2f7ef924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:92:f9:1e:f6:48:77:a8:1f:34:e4:25:be:
2d:ef:d7:e6:b8:84:4d:1a:8d:ce:fd:61:4a:c5:e1:
a8:10:2e:77:c7:86:1e:66:c5:ae:70:69:f7:ae:23:
e3:e0:e4:d2:1b:53:7f:f9:a5:d7:df:8f:f1:1a:a6:
b9:b7:0f:a1:0e:67:57:05:f4:78:e4:64:72:f0:e3:
cd:37:a2:be:41:a1:21:3e:6b:d1:60:50:31:90:c4:
9a:d8:9d:c0:cb:cc:c3:49:23:68:e7:9e:eb:d9:50:
a8:d4:11:78:eb:df:d1:19:9a:32:5f:d7:ee:7d:b6:
3a:01:d1:eb:f8:59:c6:50:39:43:de:b7:dc:d6:6a:
ba:f0:d8:ab:0d:9a:20:9e:cf:b1:df:85:d8:7f:61:
54:89:e1:f8:67:37:bc:9d:6c:9b:e0:c0:ac:d9:33:
ff:93:37:ba:ae:41:98:26:06:8b:56:f3:64:10:0e:
dd:0a:07:60:9c:d8:0c:83:99:2c:f9:d5:6c:d9:47:
a0:bb:b4:04:46:0d:66:7c:eb:08:d3:26:32:0f:52:
7d:38:e7:a0:cb:3c:c8:21:32:83:f1:a7:c5:c8:5d:
66:6c:9c:ea:db:bd:98:3e:14:bf:b3:53:1a:e3:24:
44:a4:d5:2b:f7:89:5f:1f:6a:85:e4:b5:c5:89:36:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F8:A9:9C:26:FF:3A:83:83:B4:BA:F9:46:E8:F4:BE:2F:7E:F9:24
X509v3 Authority Key Identifier:
keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0e:46:86:7e:ca:5d:a0:23:46:2f:be:5c:34:f6:2d:46:ac:
ac:f1:ef:68:88:42:c7:ce:d9:44:2d:d7:3f:07:49:06:3e:5a:
86:c4:7c:d2:62:16:b9:cd:ff:bc:bf:50:68:91:08:51:26:f1:
f6:14:9c:8c:be:b7:7b:19:05:2d:f9:d4:83:48:bc:13:e7:7b:
30:fc:e9:67:02:b3:d7:45:31:e9:a9:47:b9:2c:22:3c:2b:2b:
82:6f:61:f4:6f:7d:7c:50:4c:04:70:b1:c7:b3:32:20:94:1d:
4c:a0:3a:14:b6:c9:2d:b4:62:2f:b4:af:3b:33:43:0e:09:9b:
97:e6:e9:e3:17:c7:a1:f5:47:2e:f1:3b:fc:f9:0f:d1:47:32:
33:53:d8:99:47:26:1a:b9:f6:1d:b2:77:38:c2:d0:a6:a6:4c:
65:6d:74:28:a5:30:56:06:5d:9c:17:a4:84:7d:86:18:f8:26:
b3:38:1b:72:48:97:cd:22:92:11:ac:10:36:f1:6b:54:8f:b0:
68:0a:7e:05:55:fd:70:49:3f:06:18:9b:2f:3d:f1:c9:f8:b2:
bb:99:e7:59:cb:bb:b7:4a:05:e7:73:e0:7e:95:fd:35:30:97:
89:db:9a:6e:f1:5a:57:f7:44:91:03:b3:c2:a5:78:a4:e6:8b:
db:c1:56:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:19 2026 by rpki-client