Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: ARLoMl8OA7pKOVgLQ2m7mdJFpEhM6Tmpvrbt7CIJzGo=
Subject key identifier: C5:6D:15:A6:4F:2A:04:E0:76:0A:7D:E2:9D:F9:7A:9B:85:2A:17:6B
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 019CADFE67512FBBDD5478B5A6A88AF18AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 06C8
Signing time: Mon 02 Mar 2026 10:00:56 +0000
Manifest this update: Mon 02 Mar 2026 10:00:56 +0000
Manifest next update: Tue 03 Mar 2026 10:00:56 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: moqJ84Aaej9rkKhex8ZPbX1NA5GsPtT5yuDePWCl3Cg=)
2: gKy9zHGv_AzpQLevKwupWQqjQQo.roa (hash: b17GwYPcAv3jWGndXOTYFmkgmyJcASg4uml7i5Uih54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:67:51:2f:bb:dd:54:78:b5:a6:a8:8a:f1:8a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Mar 2 10:00:56 2026 GMT
Not After : Mar 3 10:00:56 2026 GMT
Subject: CN=c56d15a64f2a04e0760a7de29df97a9b852a176b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:bd:33:ef:d1:d8:75:96:7b:69:07:a7:b1:
04:18:1a:ef:ae:7e:c1:60:54:ac:7c:b3:7c:0e:33:
0f:94:69:62:e6:5e:96:0b:54:b8:94:f4:4f:12:53:
9b:59:0e:2e:2e:70:d3:dd:b9:e5:8c:66:6a:4b:32:
e1:c8:24:ea:9b:a6:2b:8c:66:63:37:be:e4:54:a4:
20:64:54:8a:89:df:c0:53:cd:e8:3e:4c:c6:9b:ef:
5e:1b:fe:44:96:57:e4:e0:92:2c:3a:40:ae:65:fd:
44:65:a9:13:06:b8:e2:9d:56:41:34:8e:fa:3b:49:
c8:9e:6e:49:d5:db:d9:c2:7e:69:df:96:dc:b9:94:
28:fd:f6:63:43:93:e2:9a:d4:3b:fa:72:b4:eb:31:
e7:8d:c5:1f:b3:37:c6:e3:96:e1:dc:c1:37:b9:35:
a2:c3:cc:eb:48:54:43:a4:68:63:ec:78:60:3e:d3:
16:da:7c:60:7e:4e:e5:c3:cc:3f:18:58:b2:a5:67:
67:93:3c:28:01:e2:20:d8:b8:3d:97:fa:62:5b:21:
cc:87:af:5d:27:7f:3a:a2:10:e5:53:60:bc:4f:6d:
4d:ce:80:62:a0:6e:a1:81:a1:b0:78:f1:8b:28:7f:
5f:8f:3e:7d:9e:6d:60:e3:c4:12:46:5a:bf:5f:b3:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6D:15:A6:4F:2A:04:E0:76:0A:7D:E2:9D:F9:7A:9B:85:2A:17:6B
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0f:8f:41:d2:53:49:29:87:16:67:0e:2e:4b:dd:a1:62:b7:
1c:40:07:59:e8:3a:72:02:b5:7d:0a:31:d9:e8:bb:92:60:80:
a2:29:17:4e:9f:5b:4e:9b:21:a7:86:b2:a8:c1:fb:7e:6c:20:
48:a1:63:31:7f:ee:d1:05:07:84:ef:d4:75:08:aa:d2:f0:80:
95:4f:04:e4:a4:ed:ad:15:6f:60:5c:1a:96:d6:9f:5b:fc:c0:
8c:22:cd:86:1c:26:8b:d1:ad:7d:ef:5c:f1:90:99:33:86:83:
5d:a7:c9:01:41:55:df:d1:01:b5:a5:a9:ce:8f:52:45:d7:f5:
9c:f7:4a:31:25:4e:f1:5f:8b:13:d7:0a:81:64:64:b2:14:c8:
12:19:c1:18:39:f3:9d:c1:f3:96:b6:96:96:2a:e3:88:dd:3d:
db:62:cf:83:f8:48:41:1a:14:43:2a:23:58:e4:70:2c:29:fe:
85:dc:3f:88:0a:af:fc:af:e6:50:33:a8:77:e4:ce:e5:83:d2:
0c:0f:0a:87:29:e5:6a:87:01:82:c3:d9:31:d4:04:97:8f:2d:
61:f5:7e:ef:40:64:91:38:4f:ad:0d:b7:ed:d9:ca:f9:d0:9b:
14:15:29:24:83:02:b2:e9:08:75:3f:28:fe:7b:1f:1d:bd:58:
de:a6:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:44 2026 by rpki-client