Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: cPZa3rpVrxkG1fCUtn+7nNlvkcuRMpmXgcrsYKd8d7o=
Subject key identifier: 33:C8:F2:2B:EB:E5:AE:2C:3C:F1:93:F8:15:54:71:17:F0:19:33:86
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 019CE4EC95A7A579A8435B651F9F65B0A48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0F4C
Signing time: Fri 13 Mar 2026 02:00:35 +0000
Manifest this update: Fri 13 Mar 2026 02:00:35 +0000
Manifest next update: Sat 14 Mar 2026 02:00:35 +0000
Files and hashes: 1: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (hash: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: Z4wQY9VaEfSG5EaPjUX6l0TwMewmLEbA6dNcUa+h/EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:95:a7:a5:79:a8:43:5b:65:1f:9f:65:b0:a4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Mar 13 02:00:35 2026 GMT
Not After : Mar 14 02:00:35 2026 GMT
Subject: CN=33c8f22bebe5ae2c3cf193f815547117f0193386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:16:fd:78:d5:ff:a8:f9:11:af:b5:9d:22:
db:04:16:eb:0f:47:76:a1:96:5f:5d:2c:13:be:d7:
ff:61:99:4e:ed:fa:93:7d:b1:64:91:f6:f6:82:c0:
d2:c5:f6:41:9e:b4:ec:69:ef:4e:80:4b:95:90:78:
05:ef:fe:eb:65:a6:5d:c8:91:19:c4:b0:8b:c8:20:
4b:8b:1b:6b:9d:60:d1:41:74:ac:75:3f:a1:76:e4:
2d:40:f7:47:c8:1c:97:d1:c4:ba:c0:a8:a1:bb:fb:
1b:34:b7:56:18:af:b3:8f:e9:88:7b:c1:57:9e:5f:
17:67:6f:df:bd:84:9a:20:61:b5:32:82:00:36:b4:
f4:35:5e:16:b8:c1:b4:b4:89:5c:7b:6c:d9:dd:4b:
62:ec:79:2f:9a:63:89:6d:ed:f1:19:ef:92:26:6a:
99:88:52:c4:78:b1:74:cb:3f:d5:13:5c:0b:5d:4e:
cb:ca:94:86:fd:55:ce:e7:de:25:28:22:29:3c:48:
a3:ad:ee:6b:25:a2:60:63:36:73:fe:1e:f3:6d:fc:
ae:78:ec:cd:bb:9b:45:3d:c4:d0:38:73:1e:f2:f0:
19:05:83:23:84:22:62:b9:7f:7f:77:2e:16:7f:dc:
4b:70:40:e0:57:7a:93:25:bf:50:7e:10:5d:17:06:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C8:F2:2B:EB:E5:AE:2C:3C:F1:93:F8:15:54:71:17:F0:19:33:86
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7f:a7:f3:a6:00:b7:70:46:7e:c5:32:c0:4d:8e:49:e9:1a:
f3:75:6d:dd:83:2a:83:be:4d:58:3a:b2:1c:1c:3c:89:68:c1:
5d:0f:43:e4:1d:00:c6:5a:77:47:3e:2b:94:fe:c1:13:1c:35:
90:ec:05:65:7b:61:6f:c9:39:33:48:34:8f:aa:98:d1:98:1e:
7f:85:51:73:c9:5c:4f:37:94:fb:06:ea:13:b0:d6:70:bc:e2:
53:55:77:f1:2a:ed:6b:61:1e:ac:50:fc:57:a2:04:1b:4c:09:
66:f4:85:9e:2d:db:31:7e:26:f7:96:8c:57:ef:72:78:ac:9e:
af:3c:6d:b3:4c:29:46:c8:2c:97:59:4a:66:b3:37:ef:9b:7c:
14:66:74:d9:ad:b7:79:ce:43:68:c3:fc:70:00:ad:37:89:25:
3d:63:43:0d:f7:35:b6:e0:84:2d:e5:a3:e6:de:f8:7d:dd:09:
79:66:f7:6e:0b:7d:20:8d:ea:fd:18:d5:c9:aa:b5:de:7f:84:
a2:10:87:46:80:d9:1a:29:7a:63:68:26:45:2a:25:74:c1:cf:
07:c1:fd:82:94:73:f2:e0:8d:7c:4e:8a:7a:44:7c:6a:8c:41:
ac:1e:0d:59:e3:ed:45:c0:15:2e:4d:81:2d:08:da:1d:27:3d:
30:df:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:16 2026 by rpki-client