Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
File: fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json)
Hash identifier: kQQh+BlBRPGPqI5bLgPucvp41jvZP2z0Bg4v1ZglmCY=
Subject key identifier: 8E:46:22:14:6C:8B:BF:7F:3C:3D:F4:28:E9:DC:6F:21:F7:38:FC:D5
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Certificate issuer: /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial: 019CAAFD8B1B9404AAA360278E4A29FCBAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
Manifest number: 0E39
Signing time: Sun 01 Mar 2026 20:01:08 +0000
Manifest this update: Sun 01 Mar 2026 20:01:08 +0000
Manifest next update: Mon 02 Mar 2026 20:01:08 +0000
Files and hashes: 1: P2J-kNZTokYrb95fYZBOZ4Dh_g0.roa (hash: KVkzMtxzk8ECtTGAzQDtwNEUoqW30JKbXDsY+Pnrr+c=)
2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: rl9IHe4CcoS0VmTPDloj27r90zCUnS8vyRDWtB60mfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8b:1b:94:04:aa:a3:60:27:8e:4a:29:fc:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
Validity
Not Before: Mar 1 20:01:08 2026 GMT
Not After : Mar 2 20:01:08 2026 GMT
Subject: CN=8e4622146c8bbf7f3c3df428e9dc6f21f738fcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:20:75:76:03:78:7a:f6:bf:5c:6f:4d:7a:
15:93:b0:cb:53:ff:f2:d1:bf:d4:b4:fc:7d:d8:3f:
f6:03:99:bb:ce:53:cd:6a:59:fd:3d:a3:1c:da:f5:
83:dd:4e:51:29:3d:db:19:5d:d3:59:b7:6a:bb:11:
a8:5f:9c:98:55:56:1c:0e:08:25:fb:fb:92:12:0c:
d1:3e:96:65:46:3b:bb:4c:49:8c:2e:0f:b4:26:d6:
1f:d6:74:a4:2d:db:0a:46:28:d5:13:39:63:4b:11:
ad:56:77:a5:26:6d:84:7f:f7:8c:eb:f8:cb:a4:32:
bc:26:9f:ea:72:5e:14:78:5d:9a:2a:48:46:bf:7b:
03:13:01:50:de:17:36:1d:27:44:2d:f3:a0:cf:d9:
54:c0:45:37:70:b1:49:bc:6f:b7:2f:7e:ca:a8:ca:
6d:a4:ef:d8:41:b0:ec:b7:35:16:fd:fa:a3:08:88:
c1:c8:a7:3a:5c:ff:88:90:85:33:74:21:c3:e0:e2:
7f:86:44:3a:93:4d:60:7f:5e:fd:10:88:65:0b:85:
c3:03:94:b0:8b:27:90:68:a4:c3:2b:8c:fd:be:8f:
86:e1:1c:70:23:db:f5:49:e4:a5:77:7d:81:1c:67:
c1:53:c2:b7:03:c5:c8:a8:6a:72:1c:da:b4:34:1f:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:46:22:14:6C:8B:BF:7F:3C:3D:F4:28:E9:DC:6F:21:F7:38:FC:D5
X509v3 Authority Key Identifier:
keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d6:23:27:d3:e1:fc:d4:b2:b0:cc:00:80:0c:14:7d:ce:b5:
17:46:aa:4a:68:e9:87:f0:92:9e:b7:f1:a1:2c:00:2c:d0:a4:
54:a1:38:db:e3:70:b3:92:1b:80:8d:b2:59:2b:cb:51:4d:25:
ca:92:22:5b:87:20:fa:d7:c7:a2:8c:b4:fa:47:96:06:7a:12:
9a:a7:6f:7d:d6:e6:a3:7c:ae:19:b3:d1:7d:f7:6a:18:d7:f2:
3e:6c:9f:33:ee:df:e8:7b:cf:20:dc:57:a6:2f:c0:fd:35:9c:
85:0d:e1:e7:34:ae:5d:1a:ff:12:a2:83:49:7d:3d:02:86:67:
56:ab:06:be:64:c8:77:dc:5f:39:42:3c:ee:19:d7:0f:63:ca:
38:38:6d:a0:af:42:71:f4:53:b3:05:06:32:f2:c0:a4:5b:34:
b5:69:3b:66:5e:d1:74:2d:35:b7:7d:e4:ff:08:47:bc:82:a6:
61:5f:65:a5:b1:d7:e7:57:c3:ba:7a:19:d1:a7:b4:9e:19:2f:
93:71:6c:6b:f5:3d:ed:ff:55:cd:bb:97:2c:5f:cd:89:af:69:
d2:87:e6:a4:1b:f9:a1:21:93:21:70:26:29:35:7a:1a:44:cd:
0b:94:89:3e:1d:23:3e:aa:b4:55:c5:ba:17:d7:b5:c6:20:b6:
ce:06:39:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:44 2026 by rpki-client