Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
File: mFW4DEXftep6qn3R2O2LFPnB3EU.mft (raw, json)
Hash identifier: jfeIMevshqOClG3EUR+bDuoFfwDmue4rH4ljQva4Wag=
Subject key identifier: 99:0C:58:C6:16:D0:BB:19:3D:00:4E:5C:EE:07:84:FD:16:A3:1C:0F
Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
Certificate issuer: /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Certificate serial: 019CAF7ED9F145DE1A7E1B83B577B5E18E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
Manifest number: 0332
Signing time: Mon 02 Mar 2026 17:00:51 +0000
Manifest this update: Mon 02 Mar 2026 17:00:51 +0000
Manifest next update: Tue 03 Mar 2026 17:00:51 +0000
Files and hashes: 1: JdrrzB7a1qH9AHo1hI78HQ9vZMk.roa (hash: GTd8cCkoiW0FGNR73NG1lnLnp97HhBUrrNAzm3q5ilE=)
2: mFW4DEXftep6qn3R2O2LFPnB3EU.crl (hash: 8dSPhe35Yan86BvqqESEQ7O9G9c4V80D5plL2UTvuTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:d9:f1:45:de:1a:7e:1b:83:b5:77:b5:e1:8e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Validity
Not Before: Mar 2 17:00:51 2026 GMT
Not After : Mar 3 17:00:51 2026 GMT
Subject: CN=990c58c616d0bb193d004e5cee0784fd16a31c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:d6:70:68:39:41:7d:b2:3d:95:ee:7e:c4:
42:a7:e0:fa:82:0b:e7:dd:53:3a:e4:fe:69:f6:00:
51:77:d4:60:cd:cb:c6:71:ab:3d:87:d6:cf:cd:4c:
7f:3b:04:9d:9e:d4:63:ac:e3:11:0e:89:98:61:35:
ff:63:2d:5b:64:8e:d7:44:0e:eb:a0:6c:ba:98:91:
62:38:2b:52:93:1b:94:bb:30:99:06:df:13:7b:8b:
17:eb:9a:30:42:fa:b8:f6:e8:61:d5:d5:57:08:43:
c5:85:1a:bd:f8:24:4d:57:99:23:aa:f6:77:0b:d4:
80:80:93:3e:ca:14:ba:41:07:0d:e9:27:b8:a8:64:
f3:f7:e3:b2:41:d6:fd:5b:5a:5d:02:43:6c:71:b3:
f0:38:58:c8:92:3d:1e:28:2b:40:91:fb:b3:1c:75:
9a:2b:be:64:c1:97:51:6f:83:3a:3f:04:48:11:2a:
e5:8e:6c:1e:2c:42:fc:f4:52:7c:c3:ea:ea:af:e8:
bb:9e:55:f6:0c:37:87:00:00:7e:d4:59:69:5f:db:
68:73:a9:69:da:92:73:8b:6f:8f:88:4e:84:e6:f6:
81:13:a3:05:32:45:8a:bd:1e:29:22:00:4e:0f:54:
ff:44:e3:34:1b:14:d8:49:39:b0:e7:f7:eb:2a:cd:
ce:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:58:C6:16:D0:BB:19:3D:00:4E:5C:EE:07:84:FD:16:A3:1C:0F
X509v3 Authority Key Identifier:
keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:db:62:70:ba:c6:3a:01:22:f4:fb:c2:66:77:94:63:38:99:
00:02:ed:db:8f:36:8d:54:33:88:b5:5f:49:91:cb:66:22:f1:
91:38:0e:a1:25:c2:a8:3c:ec:0d:f4:48:47:39:39:0e:5c:35:
27:2f:13:06:8a:b9:cf:84:80:19:86:17:66:24:14:0e:6f:f5:
f6:95:d9:06:2c:74:df:ff:11:9e:0a:25:45:e5:9a:d9:19:58:
a0:9f:48:03:f6:fb:4b:01:9b:8a:c5:cb:26:ee:a7:ff:d7:f5:
ae:14:9d:4c:2e:9c:85:c3:6d:79:16:13:96:ac:a3:b7:46:e6:
86:9c:4f:c2:c8:8c:4c:3d:27:14:b7:78:09:b7:2f:0e:8f:de:
2d:96:e5:e6:42:91:6c:5a:33:e7:c7:64:02:40:35:6e:99:90:
65:03:a2:aa:b4:a7:50:63:26:6d:ea:28:2d:08:92:6e:95:bd:
c3:a3:92:45:3b:a7:d4:a7:f8:5d:0a:c7:80:b5:87:0b:00:33:
d2:94:d9:2f:11:d0:73:a2:af:4f:ff:64:e2:06:e8:da:ea:82:
c2:00:db:ec:d6:bd:3a:ce:35:ff:87:b0:39:03:fe:c0:98:cc:
5d:f4:9c:73:ef:7a:e2:d7:6e:19:5c:24:d5:7f:bb:29:25:55:
13:64:07:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:44 2026 by rpki-client