Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: JDGOfaUcUD3jBDG0qaoS02pDcaQ22WKMht+dQvyjmAc=
Subject key identifier: 08:12:BE:02:74:24:A3:73:03:94:20:F8:24:56:DA:86:42:33:48:9E
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 019CABA1CC7B214A4F3088EAA33B675FD0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 0F1C
Signing time: Sun 01 Mar 2026 23:00:33 +0000
Manifest this update: Sun 01 Mar 2026 23:00:33 +0000
Manifest next update: Mon 02 Mar 2026 23:00:33 +0000
Files and hashes: 1: DMGubU8hxCTGRODvSctDVfieplo.roa (hash: Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: NuEDhQN2PpzJBRTDQ2Azbn0z58HtFMueifkNeor4Umw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:cc:7b:21:4a:4f:30:88:ea:a3:3b:67:5f:d0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Mar 1 23:00:33 2026 GMT
Not After : Mar 2 23:00:33 2026 GMT
Subject: CN=0812be027424a373039420f82456da864233489e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:55:8e:85:20:07:ec:1d:b2:4b:fa:12:7e:
a3:72:21:28:42:df:01:71:67:f9:5d:db:60:19:77:
f5:a7:f3:36:fa:3b:cc:b3:78:a7:80:5f:07:f6:f9:
9a:92:58:14:44:58:7c:63:55:c6:7c:ca:87:a9:86:
11:16:41:99:16:33:97:c3:02:46:dc:86:13:6a:58:
3b:60:85:a9:ef:78:76:b2:ec:b0:57:e5:28:84:45:
c4:b6:da:8a:f8:50:54:6d:47:3b:4a:50:ff:03:50:
6a:66:07:da:8f:69:1e:98:53:bd:2a:b5:f3:ef:d9:
9e:01:83:56:71:cb:43:d0:90:c0:7e:22:95:a7:5e:
65:d1:df:52:dd:ed:7e:64:4b:2e:fd:a6:f4:ed:b5:
50:a6:fc:e0:52:00:e6:e9:b7:11:f7:cd:c9:a7:37:
61:48:3d:06:46:d3:b4:c3:49:77:da:19:dc:0d:47:
ec:cb:11:80:32:79:12:0f:a0:7e:9f:7b:72:e7:39:
83:1e:a4:cc:61:9a:7b:e7:5b:ff:bd:a4:71:a8:cc:
55:e7:65:a5:91:6e:98:07:88:fb:f1:12:5c:04:c5:
a0:8d:3a:db:47:5b:86:47:61:f0:86:71:11:d3:40:
50:3a:d1:12:46:8b:f6:77:f2:d0:e3:1f:95:f3:06:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:12:BE:02:74:24:A3:73:03:94:20:F8:24:56:DA:86:42:33:48:9E
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8b:44:ab:70:c8:48:09:1c:2d:7c:f1:f4:b1:d7:4c:fa:67:
fa:cb:4b:7c:c4:45:39:40:aa:83:e3:16:97:7e:21:89:19:a8:
b6:f4:11:25:cb:ec:c2:fd:5f:4c:4c:85:30:f0:89:7d:4c:66:
cc:6b:ea:a6:fe:92:53:2e:1e:47:28:a2:03:58:c2:1f:7d:cd:
db:7d:6c:e4:f0:fe:4e:d5:8d:c0:00:0d:01:c4:1b:cb:fa:f2:
a0:c1:96:22:5a:4f:d3:2c:11:3d:e5:6a:1e:ec:bc:a5:89:c6:
1b:50:c0:36:b9:28:4a:eb:3a:da:53:1c:d3:8d:ab:59:31:15:
da:95:79:ed:7a:d2:41:6e:40:6a:73:99:c7:81:bd:9e:27:1e:
0b:45:5d:61:8b:b4:49:d8:d3:47:f1:48:08:8b:51:65:c9:7a:
58:c4:20:0f:7b:44:64:dc:54:7e:76:09:74:ab:36:d7:17:ec:
bc:55:2c:ed:ed:79:0e:f4:59:8f:f4:ad:be:c8:2e:5f:80:0f:
59:85:83:9c:71:82:c0:62:12:5c:5b:36:aa:ae:94:ec:a5:3e:
8d:0a:3f:5a:a3:fd:77:76:73:5a:3a:13:fc:d3:81:01:9e:8e:
cb:83:13:a3:33:48:19:6d:69:6f:f9:03:56:7e:9a:3d:56:b3:
d5:60:7e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:18 2026 by rpki-client