Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: 5SmYfhjcLhCSaDxJXMVAjcRMXvrcL9h0g+1b5R3I5/c=
Subject key identifier: 40:78:21:FD:3B:01:7C:7F:E7:D6:F6:9A:D3:21:9B:75:79:D3:99:5F
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 019CACB559A25B625CAB058DBCD649020C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 04:01:31 +0000
Manifest this update: Mon 02 Mar 2026 04:01:31 +0000
Manifest next update: Tue 03 Mar 2026 04:01:31 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: xjZ8XrAKFemx3At7l+7HY5qLZykbvy8HMtt7A55DEak=)
2: YS_ybeFO-kBpHk4oOV6WmpXFmYQ.roa (hash: myHnrIBgh1OqNZnDZDrhs0mkn1s9VqCibLxchoW9EaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:59:a2:5b:62:5c:ab:05:8d:bc:d6:49:02:0c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Mar 2 04:01:31 2026 GMT
Not After : Mar 3 04:01:31 2026 GMT
Subject: CN=407821fd3b017c7fe7d6f69ad3219b7579d3995f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:38:79:fd:a0:e7:2f:48:6b:d0:d8:c7:a7:07:
84:82:0f:85:03:5b:98:4e:a9:6e:53:13:a0:43:2e:
06:80:ea:d7:fa:13:48:a5:ad:57:26:00:7b:02:48:
9f:45:52:a2:fe:97:8d:8b:36:8e:ce:52:2d:c4:29:
2f:ab:e6:35:5d:18:bd:df:65:11:28:39:21:0b:50:
3e:42:32:0d:3a:ea:4f:61:44:43:24:f0:af:ba:65:
63:02:0f:cc:ca:2f:65:65:3f:81:5d:83:49:f1:06:
bb:52:22:00:d2:56:81:53:66:05:f0:cc:57:7e:b9:
40:3f:6f:93:9e:03:16:64:90:01:98:49:9b:f4:d5:
41:84:c9:ab:12:d9:be:df:09:3c:20:cd:89:85:a0:
ab:8c:d1:45:17:5a:25:5f:30:b9:89:f7:ff:fc:c3:
b0:60:e3:f8:c1:75:48:3f:df:b8:1f:8b:df:b4:7b:
64:1d:cf:fb:ea:a5:63:57:3e:17:27:33:90:9d:5c:
01:36:f6:9c:3e:ab:d5:30:93:aa:e5:f4:ab:bf:00:
4a:21:87:eb:75:73:f2:5c:b0:7f:7f:9e:48:df:cf:
e4:e6:aa:af:6b:f8:61:2a:b4:b3:fb:11:e3:a7:d0:
d3:da:94:5d:7f:cb:e3:92:8c:4c:59:39:05:f9:c9:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:78:21:FD:3B:01:7C:7F:E7:D6:F6:9A:D3:21:9B:75:79:D3:99:5F
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2e:8c:28:83:e6:1d:75:17:18:ab:22:0f:ad:18:33:ee:fe:
31:c5:d0:6d:7d:5e:2a:e0:8a:e5:d3:ae:89:27:fd:92:45:8e:
9a:9d:e5:34:3d:d2:0f:5b:83:5e:13:91:aa:3a:cd:2c:40:6b:
fc:83:b3:2a:db:dc:99:c6:c8:07:31:a4:a8:0a:be:5d:bb:41:
66:7f:c0:b5:72:e3:d9:ed:8f:60:6c:59:e9:59:0a:6a:48:36:
61:66:b7:ef:a5:e1:f4:42:68:7c:68:20:b9:ba:ba:eb:65:3d:
f6:a0:62:0a:01:52:47:d5:47:94:ad:50:df:1f:25:1c:0d:fb:
c3:b8:8f:c5:b5:02:25:c9:1e:92:3e:59:d2:98:df:11:6a:72:
eb:a1:99:7f:10:7e:b7:a0:83:3c:08:1f:50:a4:5d:99:24:9c:
77:93:69:ad:c2:60:4b:13:fb:39:d0:50:dc:36:ac:21:c7:fe:
7e:6c:f0:a3:60:af:87:fb:61:29:8a:23:1a:6b:e5:c4:e3:66:
a4:85:01:41:13:d5:20:3d:d3:fa:d0:0d:cc:c9:45:bd:f6:f9:
bf:91:fc:f5:95:3a:90:9b:11:6f:cf:5d:bc:63:2c:b5:6f:01:
fd:7d:f0:97:b7:29:4b:1e:ef:9d:93:db:77:f2:aa:ef:64:b3:
af:ac:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:10 2026 by rpki-client