Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier: ffNUQPQfgTG6UuqXVlpHDw6zS9xAbtf2lRqJWE7FugI=
Subject key identifier: BB:52:46:98:C0:1B:9E:57:AF:5D:CC:5F:B4:CC:F6:28:85:D7:1E:CE
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial: 019CACB54B589BE7B24F868A518DC4772624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number: 0525
Signing time: Mon 02 Mar 2026 04:01:28 +0000
Manifest this update: Mon 02 Mar 2026 04:01:28 +0000
Manifest next update: Tue 03 Mar 2026 04:01:28 +0000
Files and hashes: 1: d3XCpcyn0uAgmWptpHQjYP7UPLA.roa (hash: ou/aEB+Ce2n+pbDK9cilwO6M3zpwbvFU2gW96y63Kxw=)
2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: EU13RqUK3cTsr3LYQKLc5ZJmouQnxzZTnqHjtODP5Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:4b:58:9b:e7:b2:4f:86:8a:51:8d:c4:77:26:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Validity
Not Before: Mar 2 04:01:28 2026 GMT
Not After : Mar 3 04:01:28 2026 GMT
Subject: CN=bb524698c01b9e57af5dcc5fb4ccf62885d71ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:d7:4e:d2:bd:14:91:05:82:36:30:a6:68:
63:41:d8:4f:06:f0:65:88:0c:50:b9:6c:ea:0f:3c:
93:f6:0d:7a:14:68:68:2e:80:a1:c4:ab:d3:9d:64:
03:ea:6e:b8:23:7c:00:d7:4d:eb:1e:58:9f:fc:bc:
03:d9:f6:3e:5a:ae:8f:0e:82:e7:64:ab:c9:ce:e2:
c5:05:83:7a:72:bc:03:7e:a0:0f:c1:4b:0f:e3:d3:
84:c6:cc:23:1e:bf:63:13:4c:16:bd:50:a3:cf:22:
dc:e4:b7:34:e0:d1:ad:50:10:49:ec:b7:f6:01:1b:
77:57:08:ed:3f:79:7c:89:ac:5b:ff:d3:11:e5:c4:
74:1f:33:f4:9e:70:52:55:1a:86:20:ad:01:d8:8d:
57:ef:97:1a:42:79:5a:a8:82:1b:8e:6c:c4:21:46:
b8:5f:57:cf:e1:44:4e:01:24:8c:de:8a:1b:8c:c8:
2f:51:30:7d:ff:5e:40:c5:16:ff:f6:c1:a9:bf:61:
d4:15:99:e7:f9:19:5a:b5:41:40:19:e1:6c:86:7d:
39:8e:49:39:28:95:c2:79:03:f9:6c:00:07:c7:e4:
d1:23:0f:ba:4c:4a:c1:c6:22:fa:81:4a:f1:2f:ad:
0d:d7:1d:41:1c:b3:c2:91:cb:94:1a:07:46:80:a8:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:52:46:98:C0:1B:9E:57:AF:5D:CC:5F:B4:CC:F6:28:85:D7:1E:CE
X509v3 Authority Key Identifier:
keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2f:41:57:f6:21:61:2c:16:08:c1:9f:48:45:26:6e:14:fb:
99:c3:96:ee:fc:ef:25:33:d1:72:a1:64:60:5d:78:4f:39:91:
9a:8b:7a:45:a0:96:1d:b1:d6:d2:aa:1f:72:ca:06:13:91:7d:
7a:ac:76:b4:19:29:88:74:c5:7c:b0:e3:8a:fc:8e:24:47:de:
65:8f:27:f6:0f:5c:bf:61:9f:18:2f:3f:46:27:c6:f4:c2:eb:
96:e7:af:be:98:fc:bd:32:58:bb:8c:b4:6f:ca:ff:c3:5b:61:
dc:56:af:82:af:2d:41:64:7a:da:ab:b9:3b:6f:f9:92:5d:af:
ce:98:17:11:5a:a4:0d:d9:3e:34:30:5c:ce:b3:e6:b7:d9:ca:
c6:64:f5:f7:71:fd:a3:55:dd:68:27:b9:5d:61:eb:09:ad:7d:
a7:47:c4:90:eb:a2:12:96:10:94:99:77:7f:f9:d9:dc:26:d9:
99:b1:7d:af:64:18:be:a4:c0:35:db:3d:09:8e:6f:2f:74:ed:
90:eb:7b:34:b4:ab:c8:7d:4e:7e:fc:4c:8b:37:a1:3e:e8:b5:
f7:77:fe:0d:be:03:a8:b5:3c:79:9d:4a:a1:8c:16:7a:7f:c5:
98:44:9a:8c:27:07:83:50:ef:47:89:82:fb:85:3b:23:4d:fa:
ec:7b:54:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:50 2026 by rpki-client