Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json)
Hash identifier: +urrJqnAZ5JMklY84cKuVzGAHmSiqO6HLsxPe60huQ4=
Subject key identifier: 8D:66:9C:80:EE:67:FC:14:E6:CF:3C:D5:D9:A4:21:A5:F9:2D:EE:09
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019CAC1047DE3CF5222BD548FDD354BD716B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
Manifest number: 1249
Signing time: Mon 02 Mar 2026 01:01:13 +0000
Manifest this update: Mon 02 Mar 2026 01:01:13 +0000
Manifest next update: Tue 03 Mar 2026 01:01:13 +0000
Files and hashes: 1: B-jEplfKinXm_aVY6XKJwZ6zffU.roa (hash: qovloFSiFG/W9rJh7fcNYETxsTgZ5QQyiO1DTttOrwQ=)
2: C8ndRUP4mG5i6Z7S5iDRwDHVA7s.roa (hash: x5nMtbiYKs0LuaiMOIAvyWWd3XFr7UWf1LhYWiYg0uo=)
3: I5hCyjrw2AXxjC1FvqHT6gWtqQs.roa (hash: 5bxftc/i5qFZpB6RRZJFqNI1hX1vXDX1myfyCTO9Lmg=)
4: MlrnVSg-D0WgaZMr-y5tTMSAriU.roa (hash: WIj5Ec9a2W/Di7tEM8lKik0rbLBOSepO4AecZmXJzEM=)
5: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: 1jiQjQYJfttQCJ3m9gGRlBtPwCXtqkfw+wIWHh73JgI=)
6: WZPhvrVWJ7TbYiNT2ZcXtbK7KLw.roa (hash: gT6kAy3QC3WFVHTaMinwFIa4C3kHsmkq2W1J4go59R8=)
7: Z7YAJ4xfnW8yEXTxt7DbwgKIB-k.roa (hash: GKuomVfKG0bBmTKzxOPpDKeuM0owMJCeX+Ke/zhIJSw=)
8: ed8yDMGRECTMaD8k-df_wcQHSQA.roa (hash: cwhw+g6gV0Cc1yz+CyTGqM6EEaAW5Bb5GiWG5Dbv1YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:47:de:3c:f5:22:2b:d5:48:fd:d3:54:bd:71:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Mar 2 01:01:13 2026 GMT
Not After : Mar 3 01:01:13 2026 GMT
Subject: CN=8d669c80ee67fc14e6cf3cd5d9a421a5f92dee09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:44:9f:5b:f2:8a:c2:64:25:3c:69:5d:29:
e2:5f:42:c7:6c:11:a7:c8:23:5b:c9:ce:28:73:a1:
7f:8c:5e:83:09:21:c0:b3:f1:0d:93:83:99:cd:69:
88:16:d2:d5:ac:69:8f:75:8c:31:aa:b4:20:96:4b:
12:6b:af:81:f9:c5:58:85:35:20:e3:98:68:e9:50:
29:f0:d4:83:0b:40:2a:99:3f:32:f1:36:23:02:cc:
5d:d5:4d:54:63:19:35:d2:7d:23:f1:17:e4:17:eb:
8d:dc:7b:4d:67:24:cb:7a:b6:b6:5d:f7:bb:01:5d:
de:0e:f7:02:05:89:f2:b8:a3:2a:5a:d7:1a:54:92:
9a:f3:29:98:30:02:01:73:f6:1e:08:97:f8:14:c9:
96:8b:16:8d:85:34:4f:6b:3e:bd:91:88:ab:7e:20:
32:86:f4:2a:17:85:07:0f:d3:02:ad:fd:bd:ee:20:
44:79:12:a6:4f:d7:84:7b:a8:17:0f:55:2c:94:b9:
80:9a:96:9d:1d:a1:9c:2a:0c:10:76:d4:bb:8c:1d:
ec:ed:bf:1e:97:9d:bc:d0:c2:10:76:fa:b2:99:2b:
27:05:17:03:56:b7:8d:fa:9c:52:9c:f3:6b:33:dc:
7f:88:17:b3:f8:99:65:cf:1e:1b:73:50:20:d7:8f:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:66:9C:80:EE:67:FC:14:E6:CF:3C:D5:D9:A4:21:A5:F9:2D:EE:09
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:49:de:ad:39:c0:6f:bc:fc:7c:ea:57:13:52:5e:d5:51:03:
e3:bb:72:e6:b5:fc:10:57:57:ea:30:76:e4:f4:b5:e8:68:37:
a1:5c:17:a5:3a:a0:ba:52:2b:6b:2c:c4:85:ce:b8:fb:14:8c:
68:d8:da:98:42:ab:86:bf:bd:ea:fd:a7:19:94:82:1e:2a:bb:
04:4a:22:2e:4f:23:be:cf:bc:8d:7d:f1:c9:f3:76:22:7c:4c:
bf:36:fe:18:7e:e4:6d:51:e1:01:ab:7f:66:f5:2e:fb:8e:28:
b4:f1:09:ad:48:89:54:aa:11:e1:58:62:e9:41:29:82:b0:63:
c4:5a:20:2a:d5:13:3a:a9:77:56:17:31:9b:2f:69:ab:21:81:
6d:6c:a3:37:8a:c4:73:1b:30:38:f6:f0:0a:21:2a:c0:63:e4:
5e:a2:02:19:9d:88:33:13:7b:cf:94:dd:85:56:cb:11:14:81:
8d:d0:7b:4b:21:00:b2:3b:72:69:08:27:2d:4d:b6:0c:d4:fb:
7b:4d:17:43:2f:23:98:f1:65:93:c0:b1:aa:09:31:80:56:32:
58:a5:bb:91:ca:ed:76:63:b6:6b:88:bd:a3:50:2b:ae:6e:aa:
b5:39:bf:c6:79:7c:35:e8:b3:65:35:e3:ba:4e:b6:cb:5b:24:
4a:42:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:16:45 2026 by rpki-client