Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: Fx3Mp7fhLlc684fZvuQEJlRd7XT7WWStiavLMDfPJx8=
Subject key identifier: 51:2A:E2:F4:27:09:1A:1C:95:EF:74:C7:36:36:13:C4:5C:AB:15:45
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 019CAA58A1294606F5530D9920CCCA5B0689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 12A8
Signing time: Sun 01 Mar 2026 17:01:00 +0000
Manifest this update: Sun 01 Mar 2026 17:01:00 +0000
Manifest next update: Mon 02 Mar 2026 17:01:00 +0000
Files and hashes: 1: 1-PeFhmqOuGLWhYL6e4WamiqcSm8.roa (hash: D5OapCvUQLtel5Rjh+LrTfB4vqxFkS0kdGHkxYpTPSk=)
2: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: /1QyGoo9D8OWGF9TMxNPKZPZkV5l2d4GzuNXJo/qoEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a1:29:46:06:f5:53:0d:99:20:cc:ca:5b:06:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Mar 1 17:01:00 2026 GMT
Not After : Mar 2 17:01:00 2026 GMT
Subject: CN=512ae2f427091a1c95ef74c7363613c45cab1545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:f0:60:9e:ff:8f:97:64:5d:71:df:f9:f6:
06:ad:ac:3f:bc:a5:59:dc:20:aa:56:c9:14:c7:45:
83:ed:c1:cb:5c:87:94:46:4a:8a:80:46:58:e0:15:
46:3e:8a:cd:7e:9c:3f:0b:ce:fd:08:c9:bf:b9:56:
44:1a:91:a4:c0:c1:fd:3e:af:d1:55:18:01:d2:cb:
12:be:b4:00:25:29:ba:8e:c9:ed:a6:10:12:6b:24:
df:e9:46:91:08:45:9a:d5:f7:b4:8f:91:a7:87:97:
91:bd:cc:75:85:41:89:3a:d9:98:34:35:bc:6c:e9:
a0:4e:6d:dc:d9:02:37:1b:6c:c8:87:87:9f:03:c1:
27:75:f9:5c:6f:42:8b:c6:d4:cc:85:22:16:a4:67:
06:ca:db:5a:40:23:f7:69:cb:7a:74:ec:6d:f8:f2:
b8:38:e1:b6:d0:d7:07:d8:de:7f:32:9e:bd:71:7d:
4f:39:78:9a:49:5b:af:03:ec:ba:3f:69:3e:49:80:
96:aa:49:3e:92:3e:52:67:ee:72:0b:88:dd:93:76:
aa:eb:52:9f:07:8f:2b:f4:68:2d:42:38:5b:c9:38:
fa:4e:5f:76:84:83:44:c8:d4:b1:d9:df:6f:0f:29:
92:c9:88:23:c7:c4:de:8b:e7:32:54:98:a0:68:55:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2A:E2:F4:27:09:1A:1C:95:EF:74:C7:36:36:13:C4:5C:AB:15:45
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:33:06:f7:fa:89:b0:89:fe:91:b3:86:6c:2b:42:1a:42:09:
d2:c9:7d:3c:c8:eb:18:88:5f:21:c6:90:fa:29:9d:c0:ed:9a:
64:9a:8a:4c:ce:fa:24:40:41:7e:d1:62:07:98:f7:8b:ff:a6:
22:fd:b7:05:c6:a4:2a:3c:24:c7:12:d4:0c:19:53:87:e0:0e:
89:b5:63:95:9e:25:1d:c0:de:b2:a7:6f:8d:0c:02:d3:bc:75:
05:be:62:47:9b:28:c5:38:3c:a5:94:36:92:21:e6:38:21:1c:
1a:70:62:ea:00:cd:3a:3d:0f:53:01:20:fe:aa:09:df:e0:de:
e1:d2:85:00:1e:ef:84:2a:d7:eb:00:15:ce:9f:71:d2:71:81:
3d:33:03:4a:ef:03:6e:8f:45:3d:a4:4e:b6:e6:70:0a:4b:c6:
5c:16:68:23:18:a1:0f:45:c3:c2:6b:87:1e:97:e9:41:01:0c:
74:cc:b9:6b:14:02:2d:a3:d3:05:d1:8f:ed:78:b6:22:07:bf:
15:b8:d6:1b:40:49:71:66:8a:e7:81:ea:b9:27:e2:71:3a:e4:
87:4e:3a:77:f6:78:6a:60:5e:57:19:e4:05:7b:e1:6a:03:a2:
49:76:35:d9:bf:fb:4a:82:3e:bd:88:ef:77:01:c1:6a:99:0a:
ab:0b:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:07 2026 by rpki-client