Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier: WoqDGTnVbHm00FQcvHzjMFQLFCKVZR9mqOGFwLL18Fo=
Subject key identifier: 8A:30:7E:EE:0E:05:09:8B:D0:75:42:C4:2F:BE:FC:2B:9E:69:28:2F
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial: 019CAD59A68353972F80F7EDD55F1E5093AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number: 034E
Signing time: Mon 02 Mar 2026 07:00:59 +0000
Manifest this update: Mon 02 Mar 2026 07:00:59 +0000
Manifest next update: Tue 03 Mar 2026 07:00:59 +0000
Files and hashes: 1: LIEZPbv5mJgzybmqxdXVKVc2eR0.roa (hash: sER4hAOSChMge30hLfJ7QNzWkQjrQzcNYsA2DInAczg=)
2: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: XzeOKvEDIEP8ga7kGnt4zbLRs/FLnnPZWpIKeOqdrmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:a6:83:53:97:2f:80:f7:ed:d5:5f:1e:50:93:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
Validity
Not Before: Mar 2 07:00:59 2026 GMT
Not After : Mar 3 07:00:59 2026 GMT
Subject: CN=8a307eee0e05098bd07542c42fbefc2b9e69282f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:46:d8:c6:f2:2e:4b:2c:a5:fb:ee:04:a4:
84:31:3d:0e:dd:5d:87:33:c8:9d:10:b4:f8:5f:90:
9a:22:ae:96:63:33:d6:b8:89:e0:ea:ec:ef:ff:6b:
8d:b8:1b:3d:b0:5a:da:4a:76:ea:1f:fa:44:d1:18:
37:c2:9d:ff:69:75:d1:b9:2a:fb:28:a2:8d:48:51:
7d:86:48:37:f9:a9:b8:8a:a0:cc:fa:36:98:09:f4:
5e:6d:21:73:e8:5b:ba:16:27:5d:61:ff:d0:16:20:
9b:6f:6b:13:78:50:b3:00:d0:18:d9:06:c3:60:5c:
5d:ab:f0:da:dd:de:9e:1f:f8:3d:3e:95:d1:82:a0:
e1:d6:d3:59:49:2f:06:bf:ef:ff:da:a0:65:1b:45:
70:a0:7e:dd:3a:da:77:d9:b2:4b:3e:78:28:d0:42:
ed:8e:71:b5:eb:c9:f1:af:80:41:98:7d:b6:5b:5a:
03:a5:06:47:77:00:f3:f3:74:94:9f:4e:9b:22:f5:
b0:2b:a1:b8:08:14:ae:0d:bb:82:95:2a:5f:40:90:
3d:86:c3:8e:1c:61:ab:df:e5:c1:1d:6c:2a:06:85:
3b:84:f7:98:08:4c:7e:4a:8e:cd:4e:ff:3e:94:ee:
c5:94:de:08:c1:d2:c5:3a:88:b5:b7:b4:4b:33:00:
31:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:30:7E:EE:0E:05:09:8B:D0:75:42:C4:2F:BE:FC:2B:9E:69:28:2F
X509v3 Authority Key Identifier:
keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:91:3b:28:9d:f6:1c:dc:c2:b7:38:e4:2a:e6:9a:d4:a4:d6:
49:8e:74:d9:08:4a:6d:1c:19:33:bc:27:1c:cf:7c:de:15:d7:
5f:4e:f1:53:0c:c9:07:d6:f9:e0:77:07:06:d0:1a:44:f7:49:
19:44:45:ae:df:ca:a7:c4:4d:54:49:c6:b1:21:66:b5:3a:23:
a7:d9:b3:ef:a5:b3:78:75:0a:75:7d:be:4c:d8:a3:00:d0:6a:
91:35:62:66:e2:5e:c6:35:38:a0:b8:24:9f:00:16:f6:7f:10:
60:78:51:58:d4:8c:41:4e:1c:b8:80:28:d3:ff:4d:0d:9b:aa:
b3:11:f5:13:4b:4a:10:29:6b:e2:ca:50:c8:8a:1b:78:49:bc:
a8:57:7d:24:b3:de:55:50:2c:d7:0d:01:c0:68:f0:d7:b1:19:
71:ed:18:17:0b:b7:ea:ca:76:30:ee:43:6a:34:d6:85:22:dd:
a9:b1:c3:c0:55:2d:06:11:87:04:ad:37:dd:2f:80:3b:d4:17:
32:13:1e:34:ae:6c:cc:49:b6:90:af:01:15:a9:db:a7:95:03:
16:e9:e7:08:96:82:b4:c9:9e:e6:7c:ab:93:d0:e6:8b:22:75:
bd:b4:0c:5e:93:e3:8d:1a:4a:30:0c:59:85:dd:92:b2:3b:47:
95:42:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:27 2026 by rpki-client