Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: /jHMW55NKxr5q3kVzW/9g/6u/j4Sp68Lk9CcascJuqc=
Subject key identifier: 08:C0:44:C5:53:8C:11:11:83:A5:68:3B:AB:0A:28:20:D9:7A:C7:5D
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 019D3866729D436F158D493B15F8B9DA21C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:02:11 +0000
Manifest this update: Sun 29 Mar 2026 07:02:11 +0000
Manifest next update: Mon 30 Mar 2026 07:02:11 +0000
Files and hashes: 1: Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa (hash: 6wCn2sStp7lMoBisyxoOVg7CQrVyP+8JEmZ6TdkNK6k=)
2: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: kX2ux8Vildd40jkl5zsu/ueH1UalVWHq8iawtJsLIQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:72:9d:43:6f:15:8d:49:3b:15:f8:b9:da:21:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Mar 29 07:02:11 2026 GMT
Not After : Mar 30 07:02:11 2026 GMT
Subject: CN=08c044c5538c111183a5683bab0a2820d97ac75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:d4:d9:61:1b:8a:58:1a:02:cf:d2:86:77:
46:4a:b3:03:dd:d7:bf:b5:66:45:24:7a:67:ad:11:
39:65:26:73:50:a2:1b:db:3e:df:d2:96:d4:89:2d:
27:c7:c4:e1:96:98:09:48:51:91:28:ca:52:7d:d9:
ff:55:8d:29:59:74:82:89:d2:0a:a4:63:26:8c:a2:
77:1e:80:64:83:46:26:7b:af:ab:d2:17:79:a3:78:
15:28:81:6b:86:cb:8e:ac:1e:c9:94:71:99:bf:5d:
52:7b:de:45:37:18:88:fb:fe:f3:0a:ea:e3:38:e3:
9c:34:f2:41:c1:5e:fb:23:c5:42:02:2b:47:30:3c:
f3:e0:27:23:48:3b:39:3e:c5:a3:28:f9:5f:3b:49:
27:30:16:d0:16:02:8c:85:f1:94:9d:d5:22:ce:50:
80:8a:95:7f:aa:74:b9:e5:4e:5a:6f:0b:64:79:0e:
87:cf:af:da:43:50:ad:cf:5e:3c:4f:24:c8:80:3b:
24:c5:61:94:9b:4b:ea:b2:87:11:c3:3d:80:83:87:
6a:e7:e7:b3:27:89:a7:87:db:1c:9c:61:7e:46:8c:
ba:ae:1b:c4:63:d0:5d:66:59:3d:99:e8:e3:67:01:
7c:aa:4d:a1:a2:b7:91:31:f3:66:31:b4:3e:eb:7e:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:44:C5:53:8C:11:11:83:A5:68:3B:AB:0A:28:20:D9:7A:C7:5D
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c5:73:7e:ce:25:eb:f8:66:8a:8c:67:1f:4d:fc:33:e4:19:
a2:f6:50:cb:6c:bd:ca:83:ca:5a:ed:fc:23:8c:f9:a7:d1:24:
da:93:a5:62:b0:e0:b1:87:c1:84:aa:f4:62:f6:11:3a:39:3f:
dd:a3:13:eb:d0:18:1e:41:d8:45:50:27:9f:4b:ea:61:d7:98:
26:b5:f8:97:4e:5a:9b:4e:dc:3a:9f:b0:21:f8:c7:fe:78:76:
67:1f:a3:05:49:5e:e6:62:aa:79:e5:7c:1d:7d:f8:74:5a:5b:
48:fb:a2:56:04:c9:c3:80:e7:ca:55:79:17:83:1f:95:ec:26:
42:49:f2:3c:c2:4b:64:62:f9:e5:f3:53:43:c9:d5:db:b1:d8:
18:f7:e1:90:3c:7f:eb:98:f4:ce:09:a1:47:c5:7a:ea:dc:cf:
41:f8:93:2f:1a:a2:a6:26:9d:bc:1f:bb:fc:67:a0:1a:30:73:
6d:ed:aa:1a:3e:cd:9c:6e:f5:cf:47:0c:ce:45:9f:ec:f7:c7:
c6:1e:35:f9:f3:42:83:9e:c0:ac:48:2e:0c:ed:28:18:3b:36:
64:f7:39:ef:69:d3:18:f8:b2:08:02:f9:9c:72:31:a6:20:87:
41:7c:d2:10:c2:14:b4:71:a5:94:46:bd:fe:5d:2b:d4:e3:0c:
af:f1:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:45 2026 by rpki-client