Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
File: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json)
Hash identifier: YcXZvbCkzbe/yPV7+Rwdfxiy14WIYMlhJjQqo7yMIlk=
Subject key identifier: 48:AF:2E:AC:3C:6F:30:15:1F:18:6D:37:3B:6A:B5:69:FD:5A:B7:A3
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial: 019CACB55D739E74F2F4991B6811A78201D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
Manifest number: 02DA
Signing time: Mon 02 Mar 2026 04:01:32 +0000
Manifest this update: Mon 02 Mar 2026 04:01:32 +0000
Manifest next update: Tue 03 Mar 2026 04:01:32 +0000
Files and hashes: 1: 1-jRYaUzINFrEnjfAdRPinSU_734.roa (hash: 3ooS3VmIZ0+eOUublxtT5ocb/PZYp04ILnN6aKePHuY=)
2: FEiTqIT1cqpRLflYOI_79JGhaks.roa (hash: ifbVEX7UepiZjjPVlo2crki0TP+d7TO8G3eiigYipls=)
3: bmPTnK5_lSzi5g2t8KWQSdmusiw.roa (hash: c+FOKLLhi0euPzTQWelJXOJ3OAMbQ5k1sWXqQVEcYEM=)
4: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: 8/J91TNYPUHa57p4ckRi0YQ2yq6JqehAo9DKYS8LN60=)
5: gi9g0aSf2SvzFyn6pfpT6e0_Qac.roa (hash: bbsVeB+tsruoiPL39i3dFZ2CIkCF+DrD7yxa7d4IlMo=)
6: sSVvxcSYRTp0FGIeli2mtsdVTX0.roa (hash: rlUYz6t+YHt8+3g0Ynm420BLuLNg1028VCSBJ1t+Ro4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:5d:73:9e:74:f2:f4:99:1b:68:11:a7:82:01:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
Validity
Not Before: Mar 2 04:01:32 2026 GMT
Not After : Mar 3 04:01:32 2026 GMT
Subject: CN=48af2eac3c6f30151f186d373b6ab569fd5ab7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:41:42:6b:22:3c:fb:f3:40:41:73:67:63:
98:20:72:66:63:0e:95:bd:eb:76:61:5b:3b:38:bb:
89:25:9b:ad:19:c6:11:96:a3:b8:5a:f9:7e:4c:e3:
63:96:d5:ef:41:d4:47:ad:bb:b4:d6:55:73:0a:8e:
49:fd:6f:5c:8d:05:49:46:ba:8a:2c:a5:4c:36:37:
3e:12:6d:21:15:8b:20:74:33:03:82:2d:03:be:a7:
80:0c:da:3a:c6:58:1a:e2:d8:77:cb:63:5f:95:a9:
ff:12:bb:9a:44:5a:9a:11:44:8d:10:c7:2e:ad:a5:
86:57:49:80:ef:ee:44:16:e6:5e:19:1f:96:33:dd:
1e:10:cb:99:c8:32:a0:aa:89:3f:17:59:8b:6d:3d:
99:1a:12:3d:6b:86:9b:3e:d4:f5:99:eb:26:9d:ca:
22:66:e6:b2:8f:4b:b1:22:3b:6e:8a:f0:55:ff:86:
cb:73:d9:c3:86:d6:78:be:d0:7c:1c:45:b0:b3:0a:
6c:b1:65:03:c0:46:49:a7:ba:74:da:7c:1a:d3:ed:
7f:85:a0:22:67:35:75:db:13:c9:b8:9c:89:e0:b4:
ba:a9:a3:05:a7:a6:96:03:12:18:a4:0c:a4:ae:b1:
c8:82:b2:aa:22:45:45:55:19:9a:3b:5b:19:81:c2:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AF:2E:AC:3C:6F:30:15:1F:18:6D:37:3B:6A:B5:69:FD:5A:B7:A3
X509v3 Authority Key Identifier:
keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:47:1e:fa:cf:33:7e:76:90:dc:54:83:90:eb:a7:5a:2d:a2:
39:d0:67:59:c9:1a:03:5f:f0:30:0a:3f:b3:e2:0d:95:b6:72:
d5:fa:1d:dd:cf:5a:e2:fe:b8:b7:d9:95:6d:f1:fb:dd:38:13:
aa:78:09:04:2e:4e:a3:64:f9:07:48:cc:73:0a:0a:2d:ab:6c:
b5:99:25:40:53:08:aa:66:f3:ab:d5:96:49:d5:86:cc:e3:24:
12:d5:bc:b9:33:08:e5:89:18:e4:21:62:bd:74:dd:0a:ae:45:
6b:8d:90:94:9c:17:83:4a:3b:3e:8d:73:56:35:17:4f:f7:9e:
19:2c:0e:4a:1f:c4:28:cd:0e:09:1a:f9:36:d8:df:33:c2:28:
e9:ac:9a:57:86:3e:3b:8d:bf:d2:73:e8:85:52:a5:dc:aa:b6:
7d:d8:81:b6:6f:10:da:da:91:7c:ac:12:aa:47:89:fd:2b:3e:
c1:bc:c1:64:d8:ab:26:65:8e:ec:96:ac:e7:30:26:f2:eb:c2:
fe:71:df:26:5a:8f:a2:0d:55:b6:aa:78:9f:e2:6b:89:be:3e:
42:8c:09:d3:af:7f:4b:54:5a:38:c0:24:21:bb:02:3f:eb:60:
c7:6d:c9:57:04:cc:ad:4e:63:3f:6d:74:13:27:fe:f1:93:a9:
6b:9d:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:14 2026 by rpki-client