Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: L1qf/TzgVL2rSsh8HU11YLnuYXNvIlOVtYvFo8OMbKk=
Subject key identifier: 91:86:DE:2B:98:6F:7B:73:0E:5A:55:6D:24:A2:BE:A5:2A:4D:C6:40
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 019CABD9C9F8E2F1BA68E8CD2621A07D6441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:42 +0000
Manifest this update: Mon 02 Mar 2026 00:01:42 +0000
Manifest next update: Tue 03 Mar 2026 00:01:42 +0000
Files and hashes: 1: ELCDYTv3WHzsKB02ZeWjPVSl8bs.roa (hash: 5NNB0UawGRF+n/YW9EFq+myT4uZRZ/4c2by4eferMo4=)
2: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: Qq/Kj/R0KzbQNluKUOkN3jrYUEgMe3A2I2ev5tuFmvM=)
3: wntuteFp_hWVEVUhXXzIfGeZGYg.roa (hash: COpIba0jOKYphmoFlVevEYtGvAQbqGOdq7aV51RcCa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c9:f8:e2:f1:ba:68:e8:cd:26:21:a0:7d:64:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Mar 2 00:01:42 2026 GMT
Not After : Mar 3 00:01:42 2026 GMT
Subject: CN=9186de2b986f7b730e5a556d24a2bea52a4dc640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:aa:c8:86:1b:8c:56:4d:bc:3f:2b:81:0c:
3f:6f:83:77:cf:3f:8c:48:3d:05:8d:7c:36:97:86:
f1:05:5e:5f:fa:ed:00:ba:f7:6d:66:5f:49:8f:d4:
26:43:a7:37:e2:0f:f8:d5:01:95:09:bd:37:4e:51:
20:36:7d:b1:be:eb:09:3b:b8:8b:cf:b8:2a:34:9e:
9b:15:bf:2e:c5:36:70:e4:18:08:cf:5f:2f:eb:75:
bf:8c:5b:07:e6:da:f1:5d:28:15:d2:63:81:87:14:
48:e3:8f:ff:1e:a7:16:7f:c7:5d:81:df:36:a0:6f:
e4:91:bd:81:9b:4c:74:ec:63:03:77:49:70:be:41:
7a:9a:ee:97:22:81:56:d3:47:10:d4:e0:50:02:b7:
61:37:a9:75:46:ca:43:4c:99:ae:cf:76:d1:94:dc:
7d:a2:d6:e0:5d:59:0c:70:94:d2:9f:77:4e:54:84:
b0:a6:fd:20:e0:fb:3b:3d:e3:33:f9:d2:d3:34:9e:
02:66:0b:49:90:d5:84:10:d9:39:48:8e:19:86:f5:
77:3f:68:31:60:d8:95:05:bc:d0:30:bc:5a:81:b9:
1c:79:65:be:a3:cb:43:e7:a7:22:cf:c4:b4:c2:86:
9b:82:bf:9b:40:72:95:e3:68:c8:09:20:e3:23:86:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:86:DE:2B:98:6F:7B:73:0E:5A:55:6D:24:A2:BE:A5:2A:4D:C6:40
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d2:23:d3:f7:5d:c5:98:b1:2c:7e:16:50:5c:33:ff:dd:40:
62:81:27:6c:a1:46:38:82:50:d4:65:47:3d:d2:5a:d1:dd:85:
64:9f:da:7b:8d:6e:97:8f:a0:79:7c:99:40:90:03:f3:4b:b3:
c4:97:cf:29:5e:af:87:7a:39:55:21:d8:d1:95:04:d1:7c:05:
05:fc:dd:3c:5b:c4:64:0b:c4:b9:a4:5f:de:ff:df:d5:3f:b3:
43:48:55:fe:88:ab:6a:5f:d3:28:0d:ae:19:c2:67:08:63:16:
0f:1c:11:3b:7f:37:d5:10:a5:33:06:c5:8d:fa:28:5a:e1:a5:
77:a5:5a:3a:67:a9:ff:04:db:43:df:20:50:fe:62:62:78:81:
9d:2e:31:a9:6b:4d:0c:6c:43:24:fa:e8:e8:44:b4:af:39:f3:
b1:ca:f2:67:48:40:2d:13:b8:f7:72:6e:d1:a3:4f:17:a0:a9:
e9:fe:98:4d:4c:db:8b:8a:80:ff:bb:7c:b7:95:b9:e4:22:b5:
f2:d9:4a:47:5e:76:78:f4:78:7a:df:d2:ce:86:21:1c:ee:fa:
d7:d6:1e:12:3e:18:36:45:2c:43:3a:0c:07:ce:c7:02:1a:56:
13:68:af:9b:48:be:6b:0c:d9:d7:0b:3a:cb:bc:b1:0e:f5:d3:
e4:64:4e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:31 2026 by rpki-client