Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File: fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier: UQs/wTqjjsrqZC05qXRbnMbem5jO80S5wKE0SgjjFPg=
Subject key identifier: A6:EF:AA:86:8A:CE:17:47:84:0B:CA:9B:9D:69:BD:4F:38:48:C9:0B
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial: 019CAC1034FE6F7FDFF1C23C1CFE61161CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number: 0A14
Signing time: Mon 02 Mar 2026 01:01:09 +0000
Manifest this update: Mon 02 Mar 2026 01:01:09 +0000
Manifest next update: Tue 03 Mar 2026 01:01:09 +0000
Files and hashes: 1: DCjkvpD_ulnCiu50xRH7vfyj8Z8.roa (hash: GhWbmT/ccSmGK7MXgJ3YFU4Byveo2K+FzqXT4zrtxYs=)
2: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: NX+gBUpDiDzBfXI+HdI6NAGj9YGJzczLf+95edB9nLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:34:fe:6f:7f:df:f1:c2:3c:1c:fe:61:16:1c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Validity
Not Before: Mar 2 01:01:09 2026 GMT
Not After : Mar 3 01:01:09 2026 GMT
Subject: CN=a6efaa868ace1747840bca9b9d69bd4f3848c90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:e4:bd:5d:33:9c:3c:f4:dd:c0:5b:70:88:
64:15:18:96:24:39:dd:23:3a:ba:cd:5a:f3:1b:b6:
17:7f:c3:da:e4:e4:27:97:87:1d:fa:51:04:1d:e4:
66:ee:61:0f:d0:9f:8b:1b:61:d2:f0:80:a4:bd:cc:
ed:31:e8:cc:d5:37:dc:c4:10:a1:a0:40:3e:77:f0:
14:2a:65:49:8b:8c:be:fd:8d:42:1a:30:1e:33:fa:
08:69:a6:26:6b:fa:13:52:ec:3b:48:c1:49:57:24:
10:34:e7:db:be:9d:3b:01:f7:9f:04:85:91:ef:7a:
75:80:ee:fa:c1:13:a9:4a:b5:60:26:e0:09:4d:16:
29:bf:1b:84:46:d8:69:0a:9c:dc:d1:9f:92:45:fb:
1c:8f:5a:49:33:3d:e9:0d:40:2f:72:5d:0f:77:9f:
21:44:26:5b:15:c5:84:17:c8:93:96:21:e5:ba:22:
76:2c:2d:f7:78:bd:19:4c:6c:28:c8:72:c3:35:29:
8b:7d:04:22:87:48:89:bd:95:5d:66:33:f2:68:55:
76:f2:cc:76:ef:81:38:33:50:c3:b4:df:88:53:22:
47:ff:ce:72:4e:ba:57:cc:82:00:ec:0d:b2:c4:98:
3c:e2:09:32:63:1c:c9:7b:02:ec:bd:84:94:a1:f4:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EF:AA:86:8A:CE:17:47:84:0B:CA:9B:9D:69:BD:4F:38:48:C9:0B
X509v3 Authority Key Identifier:
keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:17:b6:e9:07:7e:96:63:da:64:39:92:92:aa:01:a0:0a:54:
97:08:ef:51:5a:17:ae:6a:7d:8e:24:6c:fd:6f:d0:55:6f:3f:
1d:58:c1:d6:f7:3e:5e:1a:ff:ea:52:07:f4:bf:07:cd:5f:a9:
ef:c1:fe:a6:0b:61:eb:20:56:5c:64:3a:12:0d:81:4e:3e:1a:
08:5f:dd:4c:f8:f7:4a:13:26:5b:fa:ab:ec:23:98:1c:1a:a7:
ee:5d:19:32:d3:45:f7:65:4d:2c:f0:cd:ed:4a:d8:6a:df:87:
7b:d7:18:13:f8:2c:08:01:b2:bd:7b:82:f9:b3:45:6f:2a:1d:
59:7a:b2:34:d2:81:49:65:07:e0:11:54:7f:c1:f1:34:16:d2:
06:7b:11:1d:b4:40:41:6c:cc:ed:b9:25:f6:3f:23:0d:fe:db:
7e:3e:cf:ee:6f:61:22:ee:33:23:f4:b5:50:3d:d8:48:91:f3:
63:ed:00:05:95:c7:e3:9f:e0:d0:4c:ff:8c:38:5a:63:66:a2:
84:b6:49:ce:fb:9c:b1:f9:6a:f3:ad:12:e1:85:a1:9c:08:2a:
74:9b:ac:f6:10:22:94:c2:eb:da:15:ec:20:e9:b7:1e:00:b1:
11:4c:11:cb:64:1c:70:cc:92:1a:da:4a:66:c3:6a:5f:7f:57:
ce:be:af:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:51 2026 by rpki-client