Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
File: _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json)
Hash identifier: F3VtmXKtzDQmtv0431ljXTZ/P+O6azrP0xyhA20d4vU=
Subject key identifier: DB:D4:5F:7E:DA:F2:85:32:E1:D2:E4:DA:06:5D:66:49:65:A1:C6:8C
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Certificate issuer: /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial: 019CAA58B5F1426EB82F0B0C1F89E340592F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:01:06 +0000
Manifest this update: Sun 01 Mar 2026 17:01:06 +0000
Manifest next update: Mon 02 Mar 2026 17:01:06 +0000
Files and hashes: 1: 7GkwyhqrlyHfzlV-65vdln4ct9E.roa (hash: s/NkhsHZT4RkFY/uOZ3iGPCQESayKRGk801KSb+Zysk=)
2: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: lBfRzqGsJg37T4B4vV6V0GeW6jW+eJRDAp5VzqlwdJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b5:f1:42:6e:b8:2f:0b:0c:1f:89:e3:40:59:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Validity
Not Before: Mar 1 17:01:06 2026 GMT
Not After : Mar 2 17:01:06 2026 GMT
Subject: CN=dbd45f7edaf28532e1d2e4da065d664965a1c68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:9e:82:d6:75:42:0e:7c:10:94:44:a4:37:
2a:df:cd:c7:98:c6:02:a2:d8:34:5b:c8:7e:86:ce:
e0:f4:57:21:59:4d:de:83:eb:cc:a5:03:12:30:b2:
f0:ac:a3:2c:d1:05:44:95:1f:a1:90:c5:7b:37:ef:
00:47:62:89:6f:50:1e:3f:68:2d:1f:a4:2e:b0:c4:
2b:cf:dd:1a:8d:7f:d0:27:d5:7f:0b:f1:4c:31:7f:
87:1b:1f:a5:58:12:fc:f7:9d:91:40:f6:26:d5:4c:
99:c4:09:3d:e8:c3:70:c9:b6:e1:1e:a1:77:cf:69:
aa:85:85:74:5c:a2:7f:2c:67:8a:e0:bf:af:5a:0b:
4b:f1:52:9c:66:b1:f5:c7:79:fe:40:36:4e:11:a0:
0e:50:91:04:43:7b:27:17:fa:27:89:80:1a:4d:0d:
a3:dd:76:cd:39:7d:61:36:21:26:f3:47:e9:92:f9:
d0:91:2a:29:4a:d9:64:f9:e3:b4:2f:fb:58:e1:44:
32:78:cd:5d:5b:13:34:c1:27:55:dd:87:3b:81:5c:
34:7c:0c:e9:31:f9:e4:b4:ba:63:ca:1d:1b:b3:3b:
dd:58:df:f8:5b:21:06:dd:c6:52:71:49:c7:0c:8c:
02:0d:27:50:22:db:8c:2b:37:ea:5c:44:ad:89:a6:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D4:5F:7E:DA:F2:85:32:E1:D2:E4:DA:06:5D:66:49:65:A1:C6:8C
X509v3 Authority Key Identifier:
keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:20:e5:c9:04:49:bb:1e:d2:96:ab:5a:ce:18:66:4d:ed:bc:
c3:56:ef:7c:00:ef:46:45:2e:8d:b1:af:f0:32:66:45:9f:38:
20:c2:ad:f9:a4:a2:fe:b5:05:db:71:4f:34:07:3a:e7:01:3e:
a3:e4:79:71:02:68:22:51:e3:41:d6:ba:90:85:23:33:81:02:
17:e8:69:8d:73:cc:8f:56:77:8a:6a:13:4c:36:e9:b1:d3:82:
51:6a:21:c8:2a:2b:6f:53:2e:6d:7d:da:f4:d7:4b:5e:43:d8:
7c:54:3a:28:2e:b5:9f:3e:93:6b:36:63:56:b3:ee:70:9e:fd:
ec:52:e8:32:c5:a7:ed:a4:14:26:b0:10:9a:cb:f6:48:cd:93:
80:05:f6:a5:21:d4:89:67:2e:4e:90:8a:bd:ba:7f:d0:80:74:
9f:9b:17:3c:8b:e5:24:e1:72:fb:bf:42:01:d6:7e:7f:a3:fd:
98:4f:9f:8d:ec:26:d6:dd:db:20:5b:a2:22:08:f7:b7:09:55:
2a:c1:78:3a:d1:46:94:96:f7:ea:8f:5a:66:66:07:4b:62:14:
0b:e0:ba:f7:95:b7:ff:d6:a5:aa:b5:35:5a:3b:a4:e2:fb:c5:
96:f5:fe:35:d5:2d:80:e3:87:05:26:b4:84:11:10:5c:7a:b1:
d5:86:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:28 2026 by rpki-client