Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
File: fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft (raw, json)
Hash identifier: kYHMN7y+3EixbqXhCijy5T4rPeOo7od6uF6lOU1g5yE=
Subject key identifier: E5:D7:E9:AE:3B:B0:E6:EB:94:2E:0D:02:A5:20:54:F6:D8:B4:60:8A
Authority key identifier: 7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6
Certificate issuer: /CN=7db8248601e33b83c01405f9be14793614859bd6
Certificate serial: 019D382E0CCB96868D99056EAAE83A4221AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
Manifest number: 024F
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: XPSkKS-lqutBiSm76IGfvu06VnY.roa (hash: jR886XO/lphZoxfRGLoituOknWx3rcueeUB5SkluLiY=)
2: fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl (hash: beLUgU6eBsPB7EqZlX68PMllOVpot6SrsvKYDkmOu0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0c:cb:96:86:8d:99:05:6e:aa:e8:3a:42:21:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db8248601e33b83c01405f9be14793614859bd6
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=e5d7e9ae3bb0e6eb942e0d02a52054f6d8b4608a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:51:3a:ce:5e:0c:28:61:d4:83:ff:bf:76:
86:aa:6b:ec:98:30:a8:a5:b3:be:89:0d:26:01:63:
89:8b:5c:7e:84:f4:00:ec:06:79:e1:fb:7b:0e:a3:
79:06:ec:c2:93:d2:ed:8b:1b:f1:05:70:59:fb:ad:
7f:ad:c0:19:f8:54:fb:b6:b6:28:55:7e:8c:ba:59:
90:7d:69:a1:3e:c7:21:8b:5a:7f:60:20:eb:ef:e0:
32:ad:b6:52:34:91:4c:81:64:5b:a6:e1:38:be:7c:
c5:67:1a:dc:f9:0c:0b:05:22:aa:73:9f:c0:a7:a4:
a3:35:da:71:7b:f9:f1:df:74:6e:50:38:fd:18:2e:
67:83:bb:5e:f6:4a:a9:71:63:7a:21:04:5a:d1:ed:
90:9b:6f:f8:65:3c:40:ce:98:ea:2d:4b:a3:82:c4:
d4:76:91:27:25:7c:06:01:60:51:08:10:11:3b:47:
19:8e:53:72:ff:4a:eb:51:fc:7d:ee:cf:46:1e:ce:
45:a8:6d:e7:27:70:b2:68:4b:23:62:33:4e:f0:0d:
71:c7:ea:7e:bb:48:06:2d:3e:72:b6:b4:a0:d0:01:
98:8c:ed:21:63:d1:0a:dd:81:ed:9b:08:8f:01:7f:
22:b1:42:4a:e9:c6:c6:30:b6:c5:d8:96:8d:45:94:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:E9:AE:3B:B0:E6:EB:94:2E:0D:02:A5:20:54:F6:D8:B4:60:8A
X509v3 Authority Key Identifier:
keyid:7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2c:5c:6c:18:49:07:b8:ac:74:3f:af:0b:4d:7f:06:2b:85:
4a:51:d5:fd:f6:d0:63:e4:a5:ac:f7:05:88:fd:da:a8:92:37:
93:76:90:5a:84:95:31:9e:6f:6e:ae:64:3a:8e:e6:5c:0e:94:
87:1c:47:d3:3d:a1:8d:f2:df:4e:fe:0f:72:ba:48:b2:a7:2d:
b0:9d:1f:1f:42:74:fb:0e:d4:19:ca:c3:cc:5a:ad:09:58:9d:
1e:90:38:66:b3:74:b1:04:2e:a6:db:a8:22:95:10:a3:56:1c:
fd:eb:4d:f2:fe:08:fb:5b:d5:8e:fe:09:46:fd:dc:cb:c6:a2:
e4:5e:64:b1:a0:09:3a:b3:d1:c5:fc:f2:24:39:c6:80:23:59:
5a:ed:99:d1:ed:9c:2d:ae:67:75:7e:56:79:b6:c0:77:3c:71:
b4:7d:7c:bb:e1:68:9b:d5:d5:4a:c1:72:a8:c7:32:b9:d4:4f:
04:7a:ff:63:ed:75:b8:02:6a:fc:c1:df:47:90:65:2d:aa:41:
21:f4:35:34:a8:5b:d4:5b:5a:81:4e:65:a5:58:f4:53:02:24:
10:d4:39:98:dc:ef:52:ba:fe:28:7d:9c:99:42:f2:31:b7:c2:
f8:a7:38:89:e4:5d:9e:98:0b:14:cb:34:aa:28:03:90:20:40:
76:9b:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:12 2026 by rpki-client