Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: qAPyNIx44iNOp14mbMHB+4+mX9LxbKSjrLwj2320k2o=
Subject key identifier: FA:C9:4E:99:30:2E:E7:58:DE:2A:D9:E7:1D:AB:A8:62:C8:6F:3B:7E
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 019CA945AD16A7CA0AD84E8B2810C0BCFC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 06A7
Signing time: Sun 01 Mar 2026 12:00:41 +0000
Manifest this update: Sun 01 Mar 2026 12:00:41 +0000
Manifest next update: Mon 02 Mar 2026 12:00:41 +0000
Files and hashes: 1: pIFip_1IBLSOvbShbCzJqPR3ISA.asa (hash: km1Ndz8NVjDLwyeoYrd5hZq5MPQnd5mMrU9kZpY/Ge0=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: 7PKTJ3//XTSJDTiurhfjjbxB+8VnXj800MRewaHHaqI=)
3: zfEmQThXQQemumuyrh4dc64Ljpo.roa (hash: l1StJqEcmI3IdHWyUspZlBSORRI1cMJESHxgjnRlaoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:ad:16:a7:ca:0a:d8:4e:8b:28:10:c0:bc:fc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Mar 1 12:00:41 2026 GMT
Not After : Mar 2 12:00:41 2026 GMT
Subject: CN=fac94e99302ee758de2ad9e71daba862c86f3b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4a:17:ce:b6:84:73:c6:e9:4f:7f:b0:fa:c6:
0d:8c:fe:96:3a:92:37:11:0e:bb:28:18:83:7f:9e:
e6:43:87:83:6c:53:39:7c:82:76:d7:6b:67:cf:7f:
b0:e5:c2:f6:8b:12:4f:a5:17:82:d0:8d:8c:af:e1:
9c:eb:85:bb:57:1f:6f:b2:08:a1:95:0a:2a:0a:e4:
fc:61:dd:44:2f:44:59:36:9d:55:84:5b:4c:fe:f8:
af:bd:17:8a:2e:6f:a7:db:92:be:8c:79:04:b3:1a:
80:80:78:84:a1:6c:63:6b:34:7d:e8:bb:e6:14:9d:
9f:15:52:5a:04:1f:5d:76:e0:6a:d9:d1:0f:c3:f4:
42:62:fe:aa:f8:a7:45:46:55:16:09:d3:b4:d2:13:
e6:01:df:85:6e:97:16:23:51:e5:f8:bb:b9:d2:fa:
71:7b:4d:54:7f:d7:0d:48:06:de:a3:1d:61:89:71:
cb:fc:d9:1d:81:54:95:20:10:f8:77:40:70:86:97:
22:1e:60:fd:3d:4b:07:55:f2:08:74:66:17:e0:93:
f4:d5:76:77:cb:b6:83:82:1f:ba:d9:d1:c9:27:68:
3f:f0:d5:72:d0:f4:0e:8d:f7:55:cf:52:ce:3c:b3:
6b:50:39:08:c5:1c:b3:7e:6f:f4:87:ab:87:d6:8f:
9a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C9:4E:99:30:2E:E7:58:DE:2A:D9:E7:1D:AB:A8:62:C8:6F:3B:7E
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:07:2f:0f:44:33:47:c3:bc:23:80:a7:05:6a:c0:04:16:dc:
cc:d2:1d:cb:05:f7:c2:85:5f:5c:fc:d2:2d:d7:7e:06:e8:bb:
95:8b:56:92:c3:5a:06:ae:ae:2d:3f:59:bc:ef:9f:46:84:e8:
c7:5c:6c:6e:d3:bc:e7:c2:23:cd:73:0a:29:0f:ad:bd:1e:64:
64:7f:2c:76:fb:70:c8:84:b1:90:17:ef:58:86:4d:df:46:ea:
ff:34:15:33:e4:bb:d5:79:02:97:9c:ff:20:eb:d8:7e:13:fa:
84:e7:b9:9b:6e:c3:2f:bd:87:2b:92:9b:d6:88:05:07:f9:29:
69:22:85:c6:31:d3:b7:f2:de:5b:5f:23:ad:ec:60:53:70:b1:
88:c0:33:e6:58:e4:02:b8:e1:d6:09:36:3b:ae:88:53:4c:db:
19:b6:a8:6e:a1:5a:a4:49:98:70:ce:0f:dd:11:e3:f1:13:c9:
01:a8:0d:96:d8:1c:a7:7d:8c:35:97:ef:f6:54:06:4e:77:ee:
41:6d:3b:50:c4:c5:5d:f5:d1:98:0c:5b:71:61:e8:9e:32:45:
a5:cb:2a:a7:bd:c9:cb:f1:0e:d3:11:1e:65:32:cd:ad:71:dc:
30:82:a4:07:00:c8:49:64:95:cb:97:aa:81:56:2c:53:68:5b:
72:a1:b5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:47 2026 by rpki-client