Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File: fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier: 9xQXZlwH9Ndwz+JjBrydKDII30WqONKni6ob6VmtiE4=
Subject key identifier: 62:AE:D0:0D:C4:F4:A3:46:7E:88:0D:85:B3:2D:1E:6E:77:C3:41:9E
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer: /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial: 019CAD22C82695C5575FD24D205C2321670B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number: 0F5B
Signing time: Mon 02 Mar 2026 06:01:03 +0000
Manifest this update: Mon 02 Mar 2026 06:01:03 +0000
Manifest next update: Tue 03 Mar 2026 06:01:03 +0000
Files and hashes: 1: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: CLSxJ/b/ojTpbXi7lR67MRLzIM236dqUtOC1jnO8fYY=)
2: oBjKq8D7YtanGgUooThZNZJBCfY.roa (hash: Q8Mc9EtbMAXUED7OkrFkGjXFG36weOz2FmafoAYIkKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c8:26:95:c5:57:5f:d2:4d:20:5c:23:21:67:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Validity
Not Before: Mar 2 06:01:03 2026 GMT
Not After : Mar 3 06:01:03 2026 GMT
Subject: CN=62aed00dc4f4a3467e880d85b32d1e6e77c3419e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:35:7f:e0:6e:aa:76:3c:8b:e9:08:6d:f9:
c0:b6:ba:08:a9:5b:a2:84:1f:c5:f6:62:67:e9:45:
bf:ef:e6:76:16:e4:c5:48:10:94:e9:86:3f:11:43:
29:40:70:ce:d3:b7:89:5a:25:3d:e9:00:f3:69:e4:
62:8b:bb:24:4a:e3:31:32:63:a4:66:0b:d2:74:0d:
d6:86:72:bc:dd:74:59:a4:e8:3b:59:8b:fe:c0:23:
dc:b3:9e:a4:9c:ee:17:4a:de:1a:e7:f4:6f:e5:9f:
2a:bc:e6:65:e6:c9:75:45:7b:f8:38:d4:c2:49:1f:
1b:20:69:7e:69:7e:8f:b6:7c:df:1a:64:c6:50:e5:
97:6c:bd:cf:cd:d9:2e:db:21:75:fa:1e:4a:98:68:
b3:7d:70:ad:1e:5e:10:2b:1f:39:7c:1e:d4:37:df:
09:a6:e3:8b:74:d1:82:39:7a:2e:9f:0a:0b:0a:ea:
2a:9e:29:ec:cb:6d:9c:18:d4:36:4a:f9:ee:af:be:
86:4d:47:12:42:04:fc:35:85:ab:ad:38:fe:39:28:
6e:b0:08:02:0e:04:50:de:4b:de:7e:2a:01:f9:80:
4a:c6:17:5e:16:34:04:fb:73:a7:8a:e1:a5:2b:8d:
2e:63:b2:41:99:41:57:c2:15:10:a7:73:1c:08:a1:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AE:D0:0D:C4:F4:A3:46:7E:88:0D:85:B3:2D:1E:6E:77:C3:41:9E
X509v3 Authority Key Identifier:
keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:49:c2:ac:2c:72:48:88:79:5d:e2:9b:68:06:bb:54:6d:e1:
9b:42:dc:55:c7:a3:cf:1a:eb:b1:d6:cc:d6:96:ae:fd:64:c4:
ea:26:16:45:4f:ae:e5:d0:b4:f6:65:4e:07:87:0e:64:60:e5:
cf:c3:63:50:1b:83:ec:0c:fc:14:bf:cd:26:d5:ed:7f:6e:41:
91:e8:0c:e8:bb:4a:92:80:9a:5d:3f:bd:d5:c7:5c:51:16:66:
d4:f9:8f:2f:2b:70:7e:48:19:bd:1c:46:1f:8b:14:15:e3:1a:
ed:da:43:bc:42:7d:47:26:1a:92:8d:cc:b0:a5:41:3a:49:3e:
e0:13:ec:f0:3d:3a:5b:9b:fc:ae:44:e4:f6:f3:38:22:f2:44:
dc:1f:42:de:2d:8d:6b:32:44:09:b7:25:3f:8c:15:cd:ba:43:
19:6d:43:22:9b:7d:c1:5b:1a:b1:26:65:5a:ce:92:05:2e:59:
f9:32:8c:12:8d:e4:65:e7:40:ae:cb:5e:25:a8:6f:8e:b3:f9:
86:bf:31:24:0d:0d:1b:cd:db:10:a9:d9:4e:cc:4d:89:10:9c:
44:e2:e6:54:24:a2:43:21:9d:c3:83:4a:57:e8:8f:d6:2a:d5:
e5:86:3f:93:01:92:d1:9b:e0:73:03:41:43:19:9e:69:57:fa:
13:1f:e8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:46 2026 by rpki-client