Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: HuMtH2+huXk91otiZlvZA3K6X85tMo9P3zR2Lm0jSJ0=
Subject key identifier: 48:0D:F2:AE:06:17:F8:B8:F7:62:66:DB:B0:1E:89:34:4E:E7:91:33
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 019CAC475785815BF824FCB35959603D157F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:01:22 +0000
Manifest this update: Mon 02 Mar 2026 02:01:22 +0000
Manifest next update: Tue 03 Mar 2026 02:01:22 +0000
Files and hashes: 1: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: Vi/E043ZEyfhQ87vhp+S/Plf7WBLi6LfnZu8V6I81aU=)
2: ltCY0LbA7g04AeojWAPe920Jtrs.roa (hash: j5WamdPrlkidU1jh7KsMKpw2rhoydKcyJk2/fHehOzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:57:85:81:5b:f8:24:fc:b3:59:59:60:3d:15:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Mar 2 02:01:22 2026 GMT
Not After : Mar 3 02:01:22 2026 GMT
Subject: CN=480df2ae0617f8b8f76266dbb01e89344ee79133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:20:7e:e0:0e:5b:8b:25:0d:84:cc:37:0f:
45:d8:7b:2d:b9:ff:ef:94:a2:40:00:a3:d3:78:97:
e0:78:98:aa:5c:89:f1:96:54:e3:49:44:89:d0:92:
4d:0c:5e:fd:ce:ab:56:53:40:b9:de:6a:f7:f6:27:
68:26:b8:c0:1b:01:a7:f2:84:0e:e2:8c:bb:b9:32:
32:91:cb:a3:f3:e6:ec:6d:86:f7:76:99:83:25:b9:
f3:d2:eb:a1:43:05:9d:04:1c:dd:20:e5:ce:7e:e4:
86:75:f2:a2:ce:67:0a:8b:46:b6:17:e9:11:c1:42:
72:ec:54:66:65:ae:a8:7d:35:9f:59:87:91:93:80:
56:c6:65:07:d5:50:f7:33:3a:87:63:d1:04:4d:97:
16:81:92:ef:2c:33:32:8b:d6:a7:e9:2a:8d:40:c2:
91:79:f3:b9:34:62:4d:ac:8a:76:70:f1:1e:02:a6:
d2:c3:76:a5:c2:c0:f7:a7:dc:90:3e:dc:50:85:78:
8d:6f:7a:e3:7a:be:92:85:95:07:11:dd:83:df:31:
6e:8e:38:f1:03:8e:a1:ac:f1:12:d3:27:e8:d6:bf:
c0:91:7b:7b:4d:d6:44:25:bb:03:c3:50:fc:fc:73:
f6:ff:47:e9:ed:dc:ec:7f:3b:75:df:15:db:64:8e:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0D:F2:AE:06:17:F8:B8:F7:62:66:DB:B0:1E:89:34:4E:E7:91:33
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:70:62:1d:dd:7e:39:2e:e0:37:da:b8:26:1f:9f:3f:7d:2c:
89:4f:b8:f3:99:e2:8a:36:36:af:62:3d:61:24:a6:52:6e:1f:
49:7b:a2:83:9a:80:51:79:7f:74:1b:99:67:4f:dc:0e:49:d7:
1a:7f:62:d8:7c:43:1c:f4:2b:22:db:1c:56:84:13:e0:fa:f6:
22:bb:55:38:fb:e2:af:f5:6b:3c:60:47:77:f7:0e:6d:c8:3e:
5f:ec:49:d0:27:5e:00:b7:1d:e7:9a:2b:f0:73:cd:96:05:37:
af:7a:4c:d4:62:a4:84:86:18:cf:1c:56:7a:25:a7:d3:87:f3:
11:45:ef:a4:13:9f:01:81:0c:3c:31:23:d3:78:3a:54:5b:7b:
d4:85:41:14:d4:9a:d6:d8:93:69:1d:d1:82:00:18:56:28:99:
e7:64:dc:4e:15:c6:17:d7:6f:c9:1c:9b:79:51:77:f8:7c:29:
9b:01:bd:50:5d:78:54:81:56:8c:0d:3b:31:4a:b8:c2:a7:9b:
36:3b:90:b7:f1:bf:ff:0e:91:16:fc:19:e5:68:66:d7:e2:53:
1f:2d:9d:fc:60:6b:d2:a2:01:ef:07:24:37:ea:43:8e:f9:50:
54:cd:28:e5:8b:9f:f1:74:e4:7e:cd:a6:c7:bc:7c:01:c6:4f:
0a:a5:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:44 2026 by rpki-client