Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File: fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier: tGzgJn4xwGoaFg2CgC6WuOnl52XR2Vutox9o36Y9Hxw=
Subject key identifier: 8F:E7:4B:E2:02:2C:A2:34:9E:DC:66:34:B2:49:C4:FC:1F:29:F7:51
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial: 019D38D338F7064B4A285F32EE564E534D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number: 18A3
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: OexBeKcIncb0jKb4JvVZXcJT1Ug.roa (hash: O2kEZ95yzKLiq43k1ys04PPuKi6PpIFY+Xw79K5ILEo=)
2: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: U85mKBQGnGXjpShdmKr0fEpz9rAz3WLprc8iczPk1cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:38:f7:06:4b:4a:28:5f:32:ee:56:4e:53:4d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=8fe74be2022ca2349edc6634b249c4fc1f29f751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:19:26:3f:75:87:ba:41:0c:23:43:ae:d7:
a0:cf:66:f7:4b:ac:8c:20:8a:4e:c8:a9:33:b2:08:
ee:1a:36:ea:ff:7e:b3:e3:2c:5d:b9:88:17:56:20:
7e:8a:c2:7f:d1:8e:f6:ff:15:0a:be:03:78:c1:c9:
81:10:0d:a3:cf:69:6d:cf:d4:59:27:8f:a2:6c:a9:
88:4b:26:20:68:24:da:1d:fe:ba:18:17:3b:56:17:
8e:ab:ba:f4:57:cf:e8:65:23:15:0b:1c:d4:ce:26:
cf:58:e0:54:59:99:4a:be:6a:d1:a4:8e:3d:4a:e5:
70:29:f3:98:7b:2b:13:10:b8:40:e7:c6:98:9b:40:
ae:f6:0a:84:37:9d:c8:53:b1:dc:e2:ad:d0:c4:1c:
0c:9e:77:e2:74:8a:59:a7:f8:03:25:07:be:e1:39:
5a:11:59:d2:54:f7:03:c9:d1:74:7a:bf:f0:89:9c:
31:9c:6d:8f:b0:90:c0:5a:0a:c2:78:45:fe:19:a3:
79:83:4f:f1:7c:a0:1e:f0:eb:4c:d9:ac:ab:fe:d7:
c2:92:27:4b:b0:7d:05:84:9c:a8:7d:6e:ab:48:d4:
72:85:1f:55:a9:28:95:b1:f9:ac:46:f8:bc:8e:97:
6b:a4:d0:e8:c2:80:5b:42:40:d1:42:86:d2:12:a0:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E7:4B:E2:02:2C:A2:34:9E:DC:66:34:B2:49:C4:FC:1F:29:F7:51
X509v3 Authority Key Identifier:
keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:11:09:f8:9a:9b:b2:d1:5f:bc:31:9a:2d:54:54:14:53:49:
39:0b:30:52:83:99:c5:d4:71:92:34:4b:cb:58:f5:53:19:e6:
e2:6f:f1:0c:4a:c9:9a:ac:c0:1a:10:0c:74:05:e3:04:0b:ef:
0e:ed:37:4c:fa:8e:7d:5c:73:61:90:99:07:c4:d1:03:e5:0d:
83:43:c2:0d:20:0a:0d:ae:06:70:1f:e8:46:e6:8c:3d:a5:0e:
5c:46:dc:bb:d4:49:72:f0:e8:16:bf:f2:0e:cf:cf:6d:5d:17:
8c:73:30:62:1b:02:db:ee:b3:bb:b6:38:63:d9:81:9e:cd:be:
42:0c:66:89:dc:1b:9b:b4:37:92:52:a2:74:37:1a:16:f3:82:
5d:5e:4b:16:ee:9a:da:82:85:ae:83:91:79:73:15:60:95:b1:
c1:03:97:7c:37:c8:bc:d2:cb:72:f7:c2:57:b7:c8:04:54:d2:
5d:6a:79:c4:01:c8:d1:bd:85:ed:d9:ad:98:91:df:32:10:4a:
07:82:78:51:b1:6c:7d:81:76:ea:fd:d2:c1:11:4f:75:c9:bc:
92:f9:78:72:0b:b6:26:77:d7:2f:a0:dc:57:8c:8c:9d:46:0d:
b7:62:f4:41:8a:c0:83:ce:6f:d3:67:2d:e3:30:42:11:62:0c:
0e:07:30:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:30 2026 by rpki-client