Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: Vfi6VBrp0oPTJf18jSbWwf7NcmtVkTq+mLRsCB0TFgs=
Subject key identifier: 19:9E:0C:8B:03:4B:DA:69:D2:7A:8B:64:28:3A:97:10:25:21:D8:87
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019CAB34634B6018D7B168C4E606391961AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0BA8
Signing time: Sun 01 Mar 2026 21:01:03 +0000
Manifest this update: Sun 01 Mar 2026 21:01:03 +0000
Manifest next update: Mon 02 Mar 2026 21:01:03 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: d8+yE+uej3bf2rdNWenx2cyYKom2ky1rasj0S++utPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:63:4b:60:18:d7:b1:68:c4:e6:06:39:19:61:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Mar 1 21:01:03 2026 GMT
Not After : Mar 2 21:01:03 2026 GMT
Subject: CN=199e0c8b034bda69d27a8b64283a97102521d887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3e:75:46:08:e8:35:5f:63:a5:44:cb:c3:3d:
3b:0b:b5:be:ae:da:d3:c7:96:a0:95:0c:ca:9f:df:
79:f2:be:46:9c:d6:05:c0:83:41:82:22:4e:a2:df:
5a:2c:2d:3e:17:0c:96:44:c1:5a:df:0b:b7:30:fb:
d9:7d:a9:43:de:31:40:54:51:5a:3d:63:cf:a0:05:
fe:03:3d:03:2b:27:6e:f4:26:8b:b4:f2:93:a4:8d:
c6:8c:bf:b3:a0:42:83:b3:39:4a:0a:6f:6b:f6:6f:
db:41:0f:24:40:5c:05:2a:59:77:81:bc:42:ba:a8:
2d:30:92:cc:2a:ed:99:47:a6:fd:cc:02:cd:a7:b5:
4d:f3:30:9a:b0:ec:00:e4:29:c8:aa:5c:0e:1f:bd:
dd:93:21:74:b3:0f:4c:17:d0:23:1a:db:7a:79:c6:
7e:ee:f3:3d:67:c1:de:b0:04:fb:f8:03:4b:b9:03:
64:5d:84:c9:93:89:5e:fe:03:10:c1:7f:2c:43:38:
e1:7d:8e:75:d7:2e:3c:88:72:2d:bd:e0:ce:d4:a3:
9b:3a:c5:79:05:02:4a:c5:bf:ab:68:4a:ad:d4:b3:
1b:64:77:27:65:d2:33:a2:dd:b3:1a:7f:df:79:0f:
ed:86:e3:96:dc:f7:07:f4:5c:bb:f8:a0:00:c0:9c:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9E:0C:8B:03:4B:DA:69:D2:7A:8B:64:28:3A:97:10:25:21:D8:87
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f4:94:f7:ec:41:db:f2:70:bb:2b:db:a8:21:1e:2f:82:2c:
15:e8:71:e7:14:9f:93:68:12:ac:de:6f:7c:ea:ba:77:48:99:
c5:6d:4e:ff:57:f4:f6:82:3e:05:0b:2e:18:a0:2e:ac:e4:07:
f2:52:f7:5f:40:b8:6e:25:96:03:fa:3f:97:0c:dd:66:b3:bd:
52:9e:d1:f9:04:da:cc:e2:72:d5:f1:c8:92:69:b5:c8:47:1f:
20:c2:a7:48:23:84:e2:00:27:e7:8c:a8:12:df:02:b6:40:d7:
2f:f2:0f:5f:83:6c:d5:ef:f2:fa:18:25:be:3d:e4:31:ad:4c:
64:0d:cf:da:3b:db:63:bc:c6:76:03:2a:d1:b8:c0:ab:c3:ab:
e5:79:c4:8c:10:b2:23:5e:7c:0e:7a:7b:e7:5c:b7:50:e8:e2:
7b:10:0c:5b:2c:21:bc:e8:bd:f1:ba:4e:b0:4b:c4:43:d2:f9:
a3:f9:67:03:17:25:f7:99:ae:b6:eb:ea:74:1a:fe:f0:60:ff:
46:94:d6:c3:5d:44:68:d2:42:dd:ad:48:94:72:93:fe:a9:9b:
b9:ea:49:c7:01:7f:3f:05:2b:f0:a8:db:a0:6c:40:67:2d:92:
1c:40:9f:68:da:7a:82:38:94:c4:de:8f:9e:a1:e1:f7:df:00:
d5:a3:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:05 2026 by rpki-client