Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: HIcUR/iOH3rrpPJu+h7nD0DjU4VGtkt9GOYUNeH/Jho=
Subject key identifier: E3:BF:37:E9:13:DF:2F:53:7A:34:0F:D5:B9:B6:0A:48:B9:54:06:96
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 019D3752D8125D9DEB46876633804F435908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:01:09 +0000
Manifest this update: Sun 29 Mar 2026 02:01:09 +0000
Manifest next update: Mon 30 Mar 2026 02:01:09 +0000
Files and hashes: 1: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: nQuPE4KtRuPiFgOsDUNuBQa9WiAvX2Nv8CvPRhojW2M=)
2: ltCY0LbA7g04AeojWAPe920Jtrs.roa (hash: j5WamdPrlkidU1jh7KsMKpw2rhoydKcyJk2/fHehOzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d8:12:5d:9d:eb:46:87:66:33:80:4f:43:59:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Mar 29 02:01:09 2026 GMT
Not After : Mar 30 02:01:09 2026 GMT
Subject: CN=e3bf37e913df2f537a340fd5b9b60a48b9540696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:b7:63:16:87:58:e9:73:58:00:be:58:7d:
85:07:5d:cb:97:42:d8:26:e9:1a:01:6d:61:05:d5:
a0:17:e8:40:89:2f:58:20:10:51:4d:4d:ae:a1:a6:
7f:b4:94:fd:4f:b6:f1:2c:af:ee:8f:1e:ca:33:f0:
e4:bf:05:94:06:1c:75:fb:e4:48:52:d6:75:c8:c0:
25:bb:39:4e:35:37:fb:f6:e8:55:91:dc:03:36:57:
d6:09:ed:7f:0b:fb:54:8a:9f:48:c5:d7:38:fd:b7:
8b:95:f4:dc:e8:26:7b:bd:6c:05:7e:4a:e6:41:73:
e6:af:fe:c0:03:5f:6a:ab:d2:1c:1a:67:17:0d:30:
66:75:db:99:fa:1f:34:54:ff:90:87:29:47:29:78:
9c:66:90:54:17:b5:aa:4d:40:94:0a:57:94:ca:73:
3c:97:cb:5a:74:1c:46:5c:b6:79:6d:96:45:ab:83:
c0:91:6d:b6:0f:dc:7d:fc:77:3a:1f:45:eb:cf:31:
49:0f:c7:21:18:3b:cf:8e:de:51:ad:23:02:a0:87:
92:86:4d:22:4e:4c:06:de:1f:02:b0:f4:ff:23:39:
f9:68:72:b4:7a:8a:d4:6b:23:d0:17:98:06:5e:42:
80:47:6b:fe:4f:c7:1a:ef:cf:ce:c5:79:88:a0:d8:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BF:37:E9:13:DF:2F:53:7A:34:0F:D5:B9:B6:0A:48:B9:54:06:96
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d5:ef:66:43:a9:39:6e:c5:51:e0:83:9b:65:d1:a5:f2:b4:
27:e0:d8:2a:80:6c:4b:cd:e6:50:20:6b:1d:95:e8:53:5c:21:
fa:83:e1:17:cb:27:5c:77:bf:cf:c5:fd:36:77:21:bf:63:6b:
63:b8:07:05:09:cd:f9:b3:d1:92:55:de:34:62:54:87:63:36:
dd:f5:6a:bd:c1:10:8d:a5:c8:e2:c9:b0:f4:ea:52:c4:64:3c:
97:74:67:7c:66:ad:b1:4b:91:cd:46:37:6a:1a:29:8a:f7:35:
bc:4f:0d:bd:33:35:b2:2f:84:fa:cf:65:d5:f7:e2:4c:76:98:
6a:2b:55:42:59:5c:a9:54:a1:fb:2d:6c:12:40:cc:b2:4c:59:
7f:5e:b9:d3:ea:20:63:20:67:df:6b:ad:75:0e:d4:ff:5c:db:
99:d1:dc:ff:10:60:cf:d2:92:18:ea:8b:e8:8b:de:1c:40:7c:
a5:d1:4d:c6:6a:18:5f:72:dc:03:8b:fd:c0:95:56:03:e4:78:
ca:c3:92:b0:0f:86:bd:38:fd:d4:9c:3d:67:57:33:82:72:ab:
32:3b:25:2d:79:b1:8f:64:ee:d2:c0:5b:e6:8f:98:dd:08:80:
de:b9:b5:52:85:22:29:9b:91:0e:dd:11:f4:e5:4f:e8:d3:77:
59:4e:c8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:33 2026 by rpki-client