Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: OkC3Nerqvy8fSYUgXgaRb8Jve2d/rm1K1hYq/34vG78=
Subject key identifier: 43:05:DF:25:EE:C0:1F:A3:F7:33:07:F1:02:B3:EB:E7:9F:84:B5:49
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 019CAD22C60F57B8A3764A0A8D13415349C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:01:03 +0000
Manifest this update: Mon 02 Mar 2026 06:01:03 +0000
Manifest next update: Tue 03 Mar 2026 06:01:03 +0000
Files and hashes: 1: GvNFYyBUTZVKqfxGJ29AQ8ybUOI.roa (hash: uZnUMOZEaipYyz6w+Q0CeYwOVjF6E1oqOIzqR9nYZ4k=)
2: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: 7WZ0ual+p2pGPPCh6GkPQFu5Bdk/duxTLxYLyd2geVk=)
3: nFyJiI2QEmXq35fuiG_EUZU-0Tw.roa (hash: cLxbEZlxAIqYS86le/aYrGcroGy0E1YAeKBMSi+G8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c6:0f:57:b8:a3:76:4a:0a:8d:13:41:53:49:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Mar 2 06:01:03 2026 GMT
Not After : Mar 3 06:01:03 2026 GMT
Subject: CN=4305df25eec01fa3f73307f102b3ebe79f84b549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:fa:55:db:0f:42:9c:b6:36:88:09:3e:a9:
75:4f:3d:91:41:13:8e:67:af:9e:06:6e:b5:42:97:
22:b6:a3:b9:a6:ea:9c:fd:e5:2e:05:b8:c0:ec:92:
e1:ed:b0:1c:c3:46:42:6e:ee:11:fe:e4:5a:9c:da:
12:0c:c3:78:76:01:4e:9f:45:32:2b:5d:33:16:0d:
28:34:94:78:03:29:81:e2:84:c1:bf:d8:02:27:3d:
f4:8d:a6:a6:ad:4c:9d:4f:ea:fd:5b:8d:f5:ba:a8:
7a:ae:db:30:81:f5:d9:ac:e3:aa:bd:1c:1b:67:4e:
f7:12:af:28:52:1c:58:2d:39:0e:b5:6b:7e:ff:64:
56:c4:1b:60:5b:95:21:fc:ac:99:ca:ee:a8:56:28:
b6:e3:6a:06:52:60:94:85:6f:3d:35:8c:57:94:ce:
7f:8a:a5:16:c7:27:a2:e1:f8:81:75:39:59:92:22:
35:6e:c0:ab:98:1e:6f:57:8b:ac:b7:c0:ec:4f:8b:
63:d1:70:b0:85:e9:93:f4:e0:c0:c4:df:f8:66:35:
34:37:62:85:32:01:5d:da:94:ed:60:26:fb:1b:6e:
3d:46:3a:e0:1d:94:41:6f:ba:4b:57:71:33:8f:80:
a4:4d:85:3c:67:09:4f:36:27:7d:39:29:12:cf:ce:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:05:DF:25:EE:C0:1F:A3:F7:33:07:F1:02:B3:EB:E7:9F:84:B5:49
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f2:89:be:4a:f2:51:6c:46:93:9a:ef:0d:ab:fb:a7:1b:67:
6e:65:0c:58:3a:c7:47:86:a4:bc:c5:85:27:cf:80:c2:84:8e:
9a:88:68:53:42:25:5a:f8:91:44:e0:d7:55:eb:eb:96:14:9f:
23:71:95:a2:f3:61:e9:78:2d:3f:38:fa:e6:6c:2c:d8:74:50:
81:15:8e:c8:12:b6:0a:35:7a:7e:0c:04:f2:89:95:2f:76:d5:
bb:f8:b4:f1:e5:d6:37:dd:e2:fe:88:79:c0:8f:eb:0d:e0:1c:
bf:3b:9a:20:80:a3:34:5b:03:ae:0a:2a:50:ba:c1:8c:ce:82:
53:4a:8f:7e:d3:31:1e:1a:e9:e7:28:3f:90:a6:14:39:f4:53:
7e:92:5c:96:74:e8:ce:fa:36:fd:d3:45:90:f0:6b:7e:26:fa:
e9:6d:f2:8c:5f:6b:18:69:dd:24:fb:9a:2e:81:c9:ad:0d:b6:
8d:52:56:56:63:04:00:d2:c9:f5:02:52:31:31:12:0c:30:e4:
15:43:88:ac:89:05:26:57:c8:a9:ef:ae:37:aa:72:d9:01:6a:
3c:5a:54:4e:f1:3c:04:ff:ee:0f:64:af:83:9e:40:bc:25:57:
74:f7:8b:a4:55:d8:ab:d9:c1:c0:2a:7c:b5:f5:1b:8b:91:54:
03:0f:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:39 2026 by rpki-client