Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json)
Hash identifier: SqOvIHlUs+lwRhtJfX0OA/VOpdzW72fAzDJKqRVnc60=
Subject key identifier: 60:A2:6D:48:90:1F:12:CE:B5:74:5F:B8:16:DD:4A:24:B3:11:91:E9
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial: 019D37F70481DD2BA49BD339B66002607C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
Manifest number: 0C42
Signing time: Sun 29 Mar 2026 05:00:28 +0000
Manifest this update: Sun 29 Mar 2026 05:00:28 +0000
Manifest next update: Mon 30 Mar 2026 05:00:28 +0000
Files and hashes: 1: UJVP39MP0a98z-vs1ITaLznv-Ng.roa (hash: VF6p8kiAtBBS2svfl/i9xWe417imO3ZaV515/+Pjex8=)
2: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: 08zRNmpmacmIqvNTQiE4SqZTtZ+EIZmz2b40YyWAhuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:04:81:dd:2b:a4:9b:d3:39:b6:60:02:60:7c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Validity
Not Before: Mar 29 05:00:28 2026 GMT
Not After : Mar 30 05:00:28 2026 GMT
Subject: CN=60a26d48901f12ceb5745fb816dd4a24b31191e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:be:1b:18:c6:6e:bd:d2:17:26:86:07:7e:
50:d3:da:2a:fc:d9:85:7c:8a:9d:13:d4:8f:73:ea:
e9:79:48:50:54:99:df:7b:07:6e:81:d4:f2:ec:bc:
f2:57:11:e1:07:43:e0:c2:71:44:09:5e:73:3a:09:
d3:96:1f:2a:e6:d0:1d:6e:09:c3:8b:c2:ff:57:7a:
e9:aa:2e:98:63:b2:2b:ff:1f:5d:00:91:49:79:d7:
b3:eb:43:fe:e2:c8:2e:b9:c9:ff:78:9f:c5:dc:c0:
bc:52:8e:b2:ba:18:57:ba:46:00:41:51:f9:1f:0a:
96:ae:29:5b:be:ec:de:22:f3:84:65:33:c5:21:e5:
fa:b5:a2:0f:72:3d:64:f5:68:5f:d1:3b:09:78:34:
57:cf:a8:75:4b:40:95:58:ec:ac:39:0b:77:2a:1e:
81:3b:dd:9d:48:10:61:6a:54:f5:cf:1a:01:a3:a4:
74:1e:0d:a7:fd:ab:ab:8b:87:a4:7e:49:07:0a:81:
a5:80:7b:e8:72:92:7b:9b:23:9f:1e:2d:f4:b8:09:
58:10:ba:a4:6e:42:b8:2d:b2:0d:91:59:84:82:b1:
bc:02:09:8f:a9:77:cb:47:28:6c:15:74:da:b7:55:
fd:d2:05:c9:1b:da:19:4e:25:68:34:0f:01:45:57:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A2:6D:48:90:1F:12:CE:B5:74:5F:B8:16:DD:4A:24:B3:11:91:E9
X509v3 Authority Key Identifier:
keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:25:79:a4:1a:ce:88:29:68:7c:09:3b:b8:48:cd:06:4b:44:
62:82:56:6f:ff:3a:e7:64:5d:ad:0b:9e:ea:91:d6:d9:77:7b:
b8:0b:75:91:4c:02:3c:51:9e:d6:3f:0a:7c:1c:7b:f0:78:bd:
84:76:4e:fd:45:58:c7:ad:c1:ad:4d:76:7e:35:dc:0b:3d:ed:
ac:b9:54:27:91:44:8d:db:c6:ba:14:26:e6:7a:8b:e8:d4:0d:
88:bd:c0:b0:30:80:6a:ea:53:42:0c:0c:6d:d5:2b:57:4e:cb:
1a:0b:7f:82:7c:08:85:d9:ab:38:89:df:9d:ec:95:b0:0e:a7:
ec:90:b2:35:64:52:24:fe:72:ad:fd:bf:a9:b2:d2:0e:f8:ed:
4f:02:eb:0b:1a:0f:9a:ef:d0:51:a8:a9:7c:e9:02:3e:48:61:
f8:62:5f:2c:0a:2d:fb:fb:4c:54:4d:1e:28:02:c2:fa:d7:ce:
49:64:bd:40:89:91:74:e1:55:37:ab:be:b6:4a:56:71:78:d0:
67:e1:29:83:4e:67:f4:80:c2:c7:92:9a:4e:d4:24:9e:2a:bd:
9f:f1:5a:cc:9b:fe:9b:7c:73:5f:76:62:98:ef:16:33:5f:57:
80:0a:03:78:ad:93:64:62:52:12:a4:ff:1e:b0:14:f6:d4:d2:
23:21:4c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:09 2026 by rpki-client