Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: o3oWT8n+5nNlmgx4ypy5KG1Avv3uENjPJvcHbWCyQ54=
Subject key identifier: 66:05:4B:3C:6F:31:FE:2B:80:09:17:FE:B8:15:E8:5E:16:32:B4:5C
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 019D378959BEEE076BD1B5556E2573589EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 1355
Signing time: Sun 29 Mar 2026 03:00:41 +0000
Manifest this update: Sun 29 Mar 2026 03:00:41 +0000
Manifest next update: Mon 30 Mar 2026 03:00:41 +0000
Files and hashes: 1: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: T8kZB7gkaM1CCCOREqaz8ttNilLjVG1XfFuwXbyDZTo=)
2: lTrIYbwh25WZaMx9FTa-lJOaOXw.roa (hash: yIg48QwH4K69I8dvoAjoM5Eex+bVMTIw9/IsxOLJtfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:59:be:ee:07:6b:d1:b5:55:6e:25:73:58:9e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Mar 29 03:00:41 2026 GMT
Not After : Mar 30 03:00:41 2026 GMT
Subject: CN=66054b3c6f31fe2b800917feb815e85e1632b45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:b1:c2:21:46:71:75:75:36:01:94:6b:06:
5f:f1:2a:d3:05:72:bd:3d:f2:06:f8:d8:59:9a:64:
57:88:db:1e:72:a8:74:3f:46:ee:26:c9:65:2f:1a:
62:1f:1c:b3:14:37:be:0c:42:99:d7:f0:5e:a6:27:
91:0b:f0:ea:71:35:d8:e8:6f:06:b8:20:b6:be:da:
b0:0c:26:bf:12:b2:c8:2e:b7:99:32:70:06:e5:b2:
1d:8f:f2:e1:7a:90:de:ce:24:54:1a:c4:9b:e2:6c:
01:dc:6a:cb:59:be:d8:1c:8e:20:d0:35:49:2a:e8:
c7:16:0a:0d:88:00:da:fc:c9:52:cc:b0:18:a5:b0:
58:11:88:a9:13:a2:32:27:09:7a:83:69:6d:08:1f:
09:ae:4b:43:e3:83:e5:6f:d4:ae:e2:18:b4:63:75:
61:a5:55:e0:c0:df:72:c5:2f:7b:0f:6b:6c:d2:f3:
ec:78:c5:f5:59:dd:92:9e:f4:e5:4f:31:8f:32:d4:
59:97:f3:6f:41:b4:fa:c9:ea:55:c2:e4:4a:ca:74:
ed:e5:8b:06:a8:5c:3d:29:ad:a7:f4:78:2a:40:9e:
6e:7e:90:e9:80:04:b5:b3:bf:bb:c5:ad:b4:f8:8b:
ed:f9:91:25:44:ce:1e:39:bf:3f:38:18:78:c0:03:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:05:4B:3C:6F:31:FE:2B:80:09:17:FE:B8:15:E8:5E:16:32:B4:5C
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3a:bb:b1:26:d9:ca:3c:6a:5e:3e:9a:27:eb:3e:2d:ba:42:
4c:32:60:f8:d1:fb:20:65:ca:ba:83:2e:b7:be:55:ac:90:d2:
23:fd:34:f5:e3:18:db:3f:30:a2:d7:c9:5b:fa:78:95:d4:e8:
49:53:cd:7f:80:dc:34:42:26:30:85:46:66:77:91:f3:fb:95:
46:11:f2:6b:2a:a1:f7:61:55:a3:bc:ce:d9:4f:a5:6d:08:d8:
a0:14:6e:6a:16:4b:bd:1c:82:86:92:a4:f4:e4:fa:c2:1f:fb:
6a:b1:06:84:70:b3:9b:48:78:ce:6d:f7:88:01:55:ee:3a:7c:
35:dd:b7:90:b6:07:c1:7c:e5:1d:e8:ca:64:a4:0c:27:e6:c4:
7a:16:fd:18:50:ef:d0:48:b6:2f:bd:04:07:13:95:df:f4:b0:
7a:93:0d:0e:c5:f2:b8:00:6f:e8:66:79:98:2c:cd:b3:ab:4f:
d2:1d:28:0d:79:3d:92:9e:c1:3d:46:3e:68:33:7c:ed:29:b2:
bb:24:06:6c:68:e7:91:c9:99:fb:b6:49:82:8c:42:51:2f:01:
cd:54:3b:a0:7e:2e:ab:df:fd:86:fa:21:3d:b3:ab:80:57:ab:
f4:98:7c:f3:44:ab:9d:9f:68:2e:1e:e6:c8:73:15:96:4f:c5:
5f:9a:b4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:39 2026 by rpki-client