Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: SWqxvyqSYb0CY5c4L2Tj5Gs71J59u4zq1edMzecC7as=
Subject key identifier: 0C:79:C6:33:AA:BA:66:0C:53:58:87:78:37:CF:30:05:12:C0:BD:B3
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 019CAB6BBAB2A89F71005747357A8B91072E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:01:29 +0000
Manifest this update: Sun 01 Mar 2026 22:01:29 +0000
Manifest next update: Mon 02 Mar 2026 22:01:29 +0000
Files and hashes: 1: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: +aSNCmj65sIwt1Pr29VZmSFSKLUxJMVyi6L8In6xYKc=)
2: srGtxdotdL1gGYebpFyhRC2KgLw.roa (hash: peHYPQm6+m6K0GIm1p2M4aZrPJFnCNdM3/dYTyUbnoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ba:b2:a8:9f:71:00:57:47:35:7a:8b:91:07:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Mar 1 22:01:29 2026 GMT
Not After : Mar 2 22:01:29 2026 GMT
Subject: CN=0c79c633aaba660c5358877837cf300512c0bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:31:62:32:7c:87:44:ab:ef:f1:7d:8e:59:
f2:d5:48:6e:bd:41:aa:b0:57:52:92:8e:c5:90:6f:
f2:f5:b8:1c:3f:4c:2c:18:0d:f3:ea:ef:72:07:38:
11:9f:b9:27:98:98:b3:45:00:56:42:3e:1a:3f:b1:
21:db:9c:bd:04:f0:46:56:b6:99:9c:05:2b:5e:de:
35:6c:90:5e:18:3c:48:8a:3e:2b:96:39:08:3f:31:
e7:9a:77:95:b0:80:2f:0b:5d:19:47:e4:32:e0:87:
ac:e7:5a:ec:e4:96:64:76:ef:26:fb:d0:c2:75:67:
6b:c4:34:54:99:ab:cc:4e:cc:88:64:91:90:4d:53:
a9:78:e5:c5:00:13:b2:91:cd:b8:e0:d8:be:5f:de:
30:b1:34:2d:b5:36:21:ba:4c:17:2b:63:a5:e9:74:
2c:e4:5f:e3:86:dc:1c:9f:cf:49:59:0e:4f:df:f6:
2e:66:94:4f:8f:16:29:b8:c9:77:19:ef:92:3e:35:
a0:69:25:f0:59:bf:02:56:81:1b:84:36:34:3c:9a:
8d:9d:cc:0a:2d:e4:bd:97:1b:5b:0f:42:e7:4f:57:
1c:6f:80:b4:09:54:1a:b7:b1:6d:ca:64:54:26:66:
72:f1:9f:26:3a:c3:34:05:5b:3b:09:7e:07:f6:9b:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:79:C6:33:AA:BA:66:0C:53:58:87:78:37:CF:30:05:12:C0:BD:B3
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:61:14:47:b1:37:d5:1d:95:f0:cb:a8:06:1b:2b:8a:a9:fa:
ae:87:92:e1:26:01:71:c9:99:9c:ba:35:71:c4:4f:6c:cb:4c:
17:95:a4:40:31:3d:26:4f:f7:f9:c1:f5:0e:4e:e9:c3:3e:44:
ec:b1:5d:58:26:16:a5:f5:12:6a:6b:0a:b1:7f:47:e6:86:02:
17:bf:ec:d6:84:29:58:2d:e1:3c:0b:a1:5f:83:91:71:9c:8f:
30:5b:46:2d:c7:8b:23:32:35:67:17:2e:4f:b5:fa:79:6e:04:
cf:d7:1f:38:77:b0:bc:7e:d7:66:fb:c4:e8:b7:b6:83:cb:65:
b3:28:e8:a4:b8:6e:9e:3f:e8:da:98:76:50:7e:e1:9e:5d:eb:
7c:83:df:15:26:84:f5:29:55:9a:80:7f:51:9d:82:1e:5f:5e:
9a:fd:26:48:cd:5e:2d:fb:62:e0:82:c7:5e:68:25:50:25:8f:
db:bd:33:a1:d3:28:da:4c:e0:8b:71:b4:c5:8c:8a:01:53:13:
3e:e6:b3:7e:44:45:a2:f2:d9:e3:9b:da:c6:5b:96:7b:cc:5d:
43:73:2d:ac:09:89:5a:a1:63:d8:86:de:a9:a2:d1:61:88:b5:
81:da:5d:29:43:ce:10:20:fc:d5:af:7c:9b:bd:8a:56:21:45:
b5:57:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:33 2026 by rpki-client