Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: GzdCvtiuoelCy9DU8DzVeiAhLCjXLdOWt/cmZ4wc1fU=
Subject key identifier: C0:7A:0F:D3:03:97:31:AE:B6:D1:5D:61:70:61:08:85:75:FC:3B:25
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019CAD22D587379ACBCB8BCE6EBB8FF5D574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0BA9
Signing time: Mon 02 Mar 2026 06:01:07 +0000
Manifest this update: Mon 02 Mar 2026 06:01:07 +0000
Manifest next update: Tue 03 Mar 2026 06:01:07 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: Rdf+o/L+QohI/+iE/fWucljvvNIQl5w9hjhPsqbJ4RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:d5:87:37:9a:cb:cb:8b:ce:6e:bb:8f:f5:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Mar 2 06:01:07 2026 GMT
Not After : Mar 3 06:01:07 2026 GMT
Subject: CN=c07a0fd3039731aeb6d15d617061088575fc3b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:07:6a:e7:f9:b4:6b:db:bd:5c:13:97:cb:c3:
6a:6c:d7:31:95:59:9f:a6:e2:86:3e:5f:02:5e:59:
4b:8c:dc:fb:05:06:51:c6:e3:9f:88:d7:ed:96:f6:
fb:a1:51:30:90:0a:56:9d:b5:09:7b:c5:96:ff:c6:
9e:50:43:bf:7e:7b:f8:6a:5d:90:a2:cc:7c:1b:4b:
28:da:b8:10:da:b3:7a:42:dc:a5:70:3b:38:3b:d7:
dd:37:b5:fe:2c:ea:a3:96:bb:a2:d2:df:54:d2:1e:
f1:bb:7f:0b:f6:25:67:ce:f9:49:a9:27:ca:a1:32:
f5:bb:a8:73:aa:d9:8c:e1:74:aa:3e:fd:63:b0:6e:
2f:68:67:a4:11:71:75:c1:05:b2:07:c7:79:b5:7e:
50:9f:37:f9:c6:1d:a0:4b:87:b6:66:9f:02:72:be:
7d:d5:e8:46:68:0d:0f:b7:2c:26:af:53:7d:a8:7c:
32:4c:08:7d:1a:d1:ef:e8:6e:11:c4:2b:d0:96:c3:
5b:50:8e:5f:cc:04:34:27:f1:46:c0:82:1c:f1:ad:
c8:38:c9:88:ac:f2:9e:03:4d:52:5e:27:99:65:1e:
54:3f:89:2b:de:f7:8d:97:a4:28:5f:50:0b:b7:f5:
d1:c7:09:ba:1c:b2:aa:84:20:cf:24:e9:f1:b5:87:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:0F:D3:03:97:31:AE:B6:D1:5D:61:70:61:08:85:75:FC:3B:25
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a9:41:58:ec:3b:74:6c:4d:90:8f:af:df:d9:a7:15:89:9a:
fc:a5:e0:29:71:ec:8a:83:35:3d:25:a9:61:d8:96:76:d8:cd:
7d:a9:73:ff:43:8a:00:92:5f:ed:da:de:70:1e:12:70:26:99:
9a:21:d3:4f:18:5e:d3:15:5b:8a:c1:e6:3a:e0:9a:aa:80:49:
87:21:8e:d2:01:ea:2c:60:ae:d5:e7:8a:90:ab:54:97:f1:9a:
90:21:58:57:27:39:0a:3d:f5:77:87:f5:61:04:9b:a3:4d:58:
2d:30:25:21:5a:c1:fa:91:9b:b3:43:3d:23:d4:f4:e2:1f:4d:
b4:a3:a1:6f:75:ce:5a:f8:12:0e:77:84:dc:1f:1e:70:f7:68:
6d:35:8d:36:36:4e:38:82:00:8a:2b:83:a7:a9:25:b2:3b:45:
39:c8:67:5b:e9:01:13:d8:84:7e:84:59:16:00:cb:2c:4a:dc:
26:1a:ec:6d:bc:7c:16:86:72:7a:18:17:2f:a2:33:c6:04:6b:
dc:0f:cf:64:bb:63:e5:55:97:7d:11:ff:a9:3e:9d:69:d2:39:
bf:54:8f:1c:69:fe:ce:d2:ab:30:67:c6:8a:11:53:40:73:aa:
6a:ae:3e:97:b1:da:28:3f:ec:9e:e1:11:17:09:44:e8:6a:5d:
bf:52:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:07 2026 by rpki-client