Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: 5eDu5v64LH4Uu6/uYXXSdbgs3xym32oifaRUJP9tH4Q=
Subject key identifier: 07:6D:5D:E4:D4:47:C2:22:14:E7:D8:5E:1D:AB:BC:76:78:01:20:04
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 019CABD9EB54FC03FA610E8C0069E0D4B0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: 030A
Signing time: Mon 02 Mar 2026 00:01:51 +0000
Manifest this update: Mon 02 Mar 2026 00:01:51 +0000
Manifest next update: Tue 03 Mar 2026 00:01:51 +0000
Files and hashes: 1: 2QUxpcZo42MO8NPw3ViO527hXWk.roa (hash: jXv9njLEXA5SkLC2GOthlPZiLCWl9vdzZCcofBzcG18=)
2: JNor73gXz2ec5FVJvGqRzBpyxSI.roa (hash: k/2ZGjtnrbIQP29sZmOjF46Dom6I0jn9nqS/95MSEu4=)
3: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: IeHRfHelTejsKo75K1b0zSPHkb1z1iI1J2TC4XxN5+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:eb:54:fc:03:fa:61:0e:8c:00:69:e0:d4:b0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: Mar 2 00:01:51 2026 GMT
Not After : Mar 3 00:01:51 2026 GMT
Subject: CN=076d5de4d447c22214e7d85e1dabbc7678012004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:6c:74:aa:dc:a6:6c:8d:3e:92:e2:a2:ba:
cd:7c:57:e3:c6:8a:8b:3b:26:60:17:13:7b:42:4f:
15:0b:21:9e:a6:0c:e4:72:52:27:41:53:e9:9f:a9:
35:22:6e:4f:14:09:ea:8e:be:6e:46:3e:84:60:e3:
62:b5:73:79:d5:63:c7:01:41:03:8b:b7:9a:d1:fb:
a7:e6:12:48:71:be:a0:32:75:34:c2:22:b8:a3:da:
e2:af:ec:2b:d4:1b:1d:66:c1:99:ee:57:5e:6d:9b:
dc:8f:39:e4:d2:45:37:6c:18:9f:24:f6:2e:85:af:
3c:af:06:35:16:c2:18:50:00:93:58:cd:f4:da:79:
aa:44:4a:0f:2b:f0:77:21:79:23:2f:a8:44:39:5d:
43:d5:7f:d1:72:26:f2:f7:81:c2:58:0c:3c:b9:cd:
8e:0f:86:1a:f9:ee:5d:26:d7:08:3a:d2:af:66:76:
a5:68:b9:17:6d:c5:68:22:bf:6f:d5:0a:75:1b:6d:
69:53:ef:dc:6a:47:28:d8:40:f8:20:2e:6b:ef:37:
df:18:d4:2a:7a:cb:8b:e2:fb:ea:b6:02:2e:c5:7f:
a4:14:7d:05:96:ee:b1:35:35:74:8b:40:1b:57:f0:
59:db:50:70:3a:22:1f:7f:0d:13:fe:27:37:6b:eb:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6D:5D:E4:D4:47:C2:22:14:E7:D8:5E:1D:AB:BC:76:78:01:20:04
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ea:0d:28:75:5c:3d:1a:ef:df:d7:99:73:a2:c0:bc:cb:8c:
c7:51:ef:95:f5:d5:0e:1f:b9:92:63:72:87:5f:82:7a:f9:3e:
3b:fe:4d:c1:c0:aa:3f:d1:43:e8:79:d1:7d:62:92:03:80:1e:
3a:a3:c9:87:25:dd:09:e7:55:56:4a:e4:51:21:e0:e8:e7:70:
49:e7:13:13:b7:25:b6:89:1a:b6:55:6e:11:dd:b7:f3:13:b9:
89:f4:cb:49:4e:c2:76:3e:bf:45:ac:a7:7a:d3:b2:e7:01:38:
23:b4:95:27:b5:88:93:cf:04:9f:f3:2c:6f:78:dd:c7:a6:13:
9a:e4:79:a4:bb:db:74:d3:11:5e:1f:38:d3:17:47:24:31:c1:
52:78:9e:fe:db:5d:fb:e2:41:6f:2d:3c:17:6e:5a:a7:92:6b:
6b:43:e5:3a:54:f7:97:b0:64:7b:2b:37:3b:cc:66:e7:68:04:
22:c5:55:28:be:d5:05:72:72:4f:74:7d:70:a7:de:36:f3:41:
8b:9f:9e:ca:e5:1d:07:79:54:15:fa:ce:0e:a2:98:7a:ca:4f:
8e:13:19:1c:cb:8e:0f:34:51:74:9c:4c:23:54:76:56:bb:92:
1b:0d:37:5c:4a:f9:7a:e7:60:0d:92:c7:0d:46:36:55:47:76:
94:34:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:21 2026 by rpki-client