Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
File: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft (raw, json)
Hash identifier: dM9lDFDi4R3Ys0BKxZ4jfzZhH3v2kl7skd8Dk4VsBWs=
Subject key identifier: 18:67:1E:47:08:0E:32:D1:2A:DC:30:E6:D5:80:42:98:01:BA:56:02
Authority key identifier: 7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
Certificate issuer: /CN=7dad62180863d722aaa4f0881e44378e3c808372
Certificate serial: 019D382E247A8D3A2E345F0B05EB3FA3D27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
Manifest number: 039F
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: Q6qjxwuDv8q30Lmdm9u-3YnRnzY.roa (hash: noeRjmqJpgvMjP8kakXGyWDtjjMrc5HKTzUHEEblCc0=)
2: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl (hash: UMr6P9ENFUBynWqTRVUsFhx2AC7pYEXqeBcqrU9Ik8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:24:7a:8d:3a:2e:34:5f:0b:05:eb:3f:a3:d2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dad62180863d722aaa4f0881e44378e3c808372
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=18671e47080e32d12adc30e6d580429801ba5602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3a:6a:5b:0f:f9:fa:06:8b:30:07:37:dd:3c:
7d:64:1b:84:47:7b:f6:31:65:fa:8c:4f:51:99:e3:
33:80:7c:67:5f:ce:81:ad:72:15:ab:41:d2:3a:ac:
9e:d2:f1:dc:30:81:6c:28:45:64:52:56:74:d5:e8:
42:f9:95:25:78:ab:22:e5:43:c1:8d:36:de:73:1a:
1b:df:6d:4c:6c:88:03:9f:d4:f4:9e:51:f2:3e:0e:
fa:e8:88:6a:c1:9e:bb:73:dd:2a:93:67:ec:35:28:
c6:f8:85:73:be:ad:9a:3b:1a:cf:62:78:2d:20:38:
f1:2c:2b:e2:1a:ae:d0:49:93:0a:fd:37:23:05:b5:
bd:88:96:81:79:c8:38:a6:79:6a:f2:9a:52:62:64:
73:d2:12:2f:ee:94:58:f5:12:e4:bf:c3:0f:ab:bd:
9e:4a:f2:d7:cf:9d:22:b4:0d:37:28:94:65:96:1e:
7c:ee:3e:b9:15:be:8f:a4:1b:48:78:c0:1e:93:3d:
e4:9f:2c:ae:00:75:d2:99:ab:4e:19:39:8e:45:17:
cf:40:30:f7:4c:bb:9e:7b:f0:d2:ad:9a:d3:7f:8f:
46:34:d7:d6:2e:f1:40:b1:dc:7b:81:59:a6:9c:59:
8b:56:35:3b:a4:dd:c1:49:66:5e:85:56:5d:88:cf:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:67:1E:47:08:0E:32:D1:2A:DC:30:E6:D5:80:42:98:01:BA:56:02
X509v3 Authority Key Identifier:
keyid:7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e2:78:2e:bf:13:30:df:94:08:43:11:6b:44:b2:9c:80:d2:
e6:9b:7f:23:ce:1f:c0:17:4a:dc:f2:e7:61:37:1b:5c:49:74:
52:0e:74:5e:2b:89:2f:9a:6c:13:b9:07:d4:a9:64:32:17:fa:
d5:0e:88:f7:e4:8b:c6:22:fd:28:3b:ef:4f:af:ad:56:ff:c5:
1a:51:6a:b1:19:18:34:7e:8e:0d:5f:76:78:e1:dd:6e:22:3f:
9c:c6:fb:dc:a8:f9:3d:d2:37:6c:39:fa:9e:4c:a3:2c:75:1f:
5e:90:28:d3:1a:fb:0c:94:c5:03:fb:59:09:ed:0e:00:6f:b5:
29:50:54:85:b0:49:97:f1:c9:c9:ab:ac:b5:48:dd:c1:43:f8:
88:2e:83:90:af:17:cd:bd:df:6a:72:9f:72:07:29:46:c3:c5:
35:41:77:79:16:7e:44:45:23:42:b0:3c:68:89:1a:6b:41:c1:
78:c8:31:2f:c1:60:9c:c3:1c:9e:bb:13:61:ab:4d:e9:77:04:
01:36:da:a5:d1:e3:57:77:70:01:b1:f5:63:f1:38:63:b3:c4:
57:46:b3:7d:b8:42:c9:85:21:cd:83:59:67:aa:6b:be:95:e4:
24:e3:98:32:54:7e:63:10:22:c3:01:09:49:fe:10:2a:8c:fe:
92:d4:2a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:30 2026 by rpki-client