Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
File: 04nufcekvqjSach0bP59NhmNIh4.mft (raw, json)
Hash identifier: k2ZDEQvH6mpXlm+jD36WOufzOj/AS9VJ6CEtG5GUwPo=
Subject key identifier: FD:1D:C8:91:CB:20:68:3A:AE:0D:5A:F5:B7:45:41:76:E6:5E:25:20
Authority key identifier: D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
Certificate issuer: /CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Certificate serial: 019CAA8FF745B544135EF4F25DAB9A77F26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
Manifest number: 71
Signing time: Sun 01 Mar 2026 18:01:27 +0000
Manifest this update: Sun 01 Mar 2026 18:01:27 +0000
Manifest next update: Mon 02 Mar 2026 18:01:27 +0000
Files and hashes: 1: 04nufcekvqjSach0bP59NhmNIh4.crl (hash: bsjTQwFsTTHv9eblFIB43Vebin/zz5inNkHiTAq9Aa0=)
2: DMYjGVXF04RFwUn6UCWXk-mgrnQ.roa (hash: 1IKdEVdxinUDX4GEoCU9iDa0wsb9FYEO+VbnWoVZHRQ=)
3: uldmgPFlTuQeBt-ipePLSPYN-eI.asa (hash: kElPpLT8qkmreugOZZKYSI8vXfLFDf0CKmt+bqNFxbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f7:45:b5:44:13:5e:f4:f2:5d:ab:9a:77:f2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Validity
Not Before: Mar 1 18:01:27 2026 GMT
Not After : Mar 2 18:01:27 2026 GMT
Subject: CN=fd1dc891cb20683aae0d5af5b7454176e65e2520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:96:1a:85:f0:30:74:72:db:4b:2d:6d:a5:
15:ce:4a:df:a4:ae:aa:da:60:cc:0c:83:27:ff:2f:
fe:b7:a3:7a:73:17:2f:df:30:d5:13:bb:07:d8:1f:
31:57:3a:ec:60:eb:4f:19:78:f5:15:fa:a6:ab:a2:
54:c8:18:19:b5:fa:38:14:df:34:dd:a9:67:86:28:
e0:8f:ff:4a:b8:0a:48:4c:bf:32:9f:4c:5b:18:ea:
6a:13:1f:fa:93:09:80:62:d6:17:47:f5:27:1e:dc:
20:ef:b7:1f:fa:7f:73:f2:74:28:e2:08:d0:30:a5:
86:cb:8e:9f:37:7e:d7:3c:c1:5b:13:e2:dc:d6:6a:
eb:b6:eb:0b:f0:72:ed:31:2c:c1:38:c6:36:04:7e:
2f:e6:96:26:80:05:2f:dc:ae:f0:d1:13:9c:79:9e:
7b:a1:93:3a:d4:08:59:46:d8:47:cc:d1:bd:2e:23:
7f:d9:ad:00:fc:ef:bc:1c:66:c2:ff:1a:bb:92:03:
be:c7:d7:98:b4:1a:50:d8:c2:a8:76:45:f7:a1:ac:
81:2a:6f:16:80:12:e9:9d:93:38:fc:e1:18:5e:17:
c4:8b:48:3b:72:d2:61:f7:19:fa:4c:0d:b6:c0:38:
58:39:37:dd:03:70:0c:60:8f:87:c6:68:c6:70:df:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:C8:91:CB:20:68:3A:AE:0D:5A:F5:B7:45:41:76:E6:5E:25:20
X509v3 Authority Key Identifier:
keyid:D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5d:ce:5b:68:f8:03:ec:07:6a:ae:eb:84:9e:a6:f5:d6:70:
be:35:b1:70:4b:25:06:93:2b:a2:09:44:ee:c7:ee:08:10:d5:
a2:d6:15:47:99:5d:aa:29:7a:53:8c:c6:00:a1:7d:39:8a:26:
03:4c:e2:f4:25:d6:22:cf:c5:d8:5d:63:d7:6b:5a:52:0d:9c:
c4:51:45:93:7d:e0:9d:a7:ab:b1:f2:cd:03:dc:38:8e:f2:d0:
e5:72:9f:a9:2a:66:29:98:96:4d:53:a0:11:7d:47:63:54:54:
e7:91:b4:01:24:6f:67:36:96:7a:32:d8:f2:f3:a4:e7:90:f1:
01:f9:40:8f:19:88:99:e3:39:10:49:1d:6f:19:b8:03:9e:fe:
1e:d0:ae:aa:ac:04:9d:03:48:b7:67:80:31:e8:a0:82:38:51:
0e:3f:11:a5:5d:a8:81:40:c5:9c:73:29:dc:24:ba:23:3a:70:
e9:7c:2c:87:d4:be:f3:84:13:e2:7d:34:17:3b:c3:de:34:2f:
d9:f4:5d:c9:af:2f:84:28:a3:1c:6e:94:13:87:80:99:9e:81:
6a:a1:d2:da:8f:32:cf:a0:20:54:10:d7:a0:bf:d9:ba:9c:f8:
82:57:03:9b:f2:3f:a8:40:cc:c8:4b:1b:20:0c:80:ea:93:ea:
b6:2c:62:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:37 2026 by rpki-client