
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File: fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier: BIs0mbpyuzda6/0Zwc1cjy2RN4VovKCMYQcPgCXbMN0=
Subject key identifier: 51:73:C6:50:99:01:8E:66:E1:0A:70:FA:0D:7F:45:D5:42:7D:ED:71
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial: 019CABD9B38D7BE2B2169A0BC96E58E78A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number: 185A
Signing time: Mon 02 Mar 2026 00:01:36 +0000
Manifest this update: Mon 02 Mar 2026 00:01:36 +0000
Manifest next update: Tue 03 Mar 2026 00:01:36 +0000
Files and hashes: 1: OexBeKcIncb0jKb4JvVZXcJT1Ug.roa (hash: O2kEZ95yzKLiq43k1ys04PPuKi6PpIFY+Xw79K5ILEo=)
2: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: QfSFJ2xqKbvYEMlKDbbAGm7GNROAKuMyXuT/0R1FQv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b3:8d:7b:e2:b2:16:9a:0b:c9:6e:58:e7:8a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Validity
Not Before: Mar 2 00:01:36 2026 GMT
Not After : Mar 3 00:01:36 2026 GMT
Subject: CN=5173c65099018e66e10a70fa0d7f45d5427ded71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:16:c1:d1:f0:f5:48:9b:ad:c7:ec:cf:43:a0:
dc:0f:25:5b:48:ee:14:e3:26:71:71:6e:26:4d:2b:
2e:41:f9:e5:d0:59:08:23:9d:5c:00:e5:b3:da:9a:
54:cc:c7:63:33:59:22:72:c2:86:97:c6:a8:c0:16:
35:be:30:f5:1b:13:47:14:3e:db:63:91:c6:7a:82:
85:0a:ea:f4:9b:83:c9:ec:46:3c:08:d1:d7:80:a2:
24:ef:e4:5f:b1:60:6b:31:2c:05:4c:99:ee:e7:e9:
ee:6b:cb:87:c5:03:e5:50:42:ec:75:90:cc:c1:3d:
3d:3b:6b:2c:d0:b3:b2:94:14:b5:c2:64:0c:f2:b4:
4a:16:96:12:60:df:bb:8e:ed:d8:1b:30:29:9c:93:
9f:cc:a1:a9:78:7d:10:b7:54:67:f0:27:25:d5:fa:
5e:97:1e:f9:e8:06:67:46:df:a4:e0:31:03:89:9f:
58:85:35:98:c6:1b:ad:43:27:8f:ce:fd:c7:a6:7c:
ac:a2:4e:1e:29:a7:a0:95:a5:cb:31:35:2f:9c:35:
6b:2e:8c:b7:33:63:3a:c3:84:36:15:11:a7:4f:b5:
25:29:fb:67:c7:28:0e:5b:d0:3d:e5:16:9b:a2:93:
82:e7:ad:3d:2f:d2:67:7d:da:e2:31:1c:dc:aa:9a:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:C6:50:99:01:8E:66:E1:0A:70:FA:0D:7F:45:D5:42:7D:ED:71
X509v3 Authority Key Identifier:
keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fa:4e:8f:fd:0d:b7:a3:b5:2f:3a:ce:0a:69:62:c2:2c:d8:
f2:8c:7d:4b:76:0a:5a:48:00:4a:a4:ba:07:55:c9:f6:6a:90:
f8:71:d4:54:8f:58:eb:a4:27:05:75:e8:7d:a8:fb:f7:b1:a3:
bd:ee:5c:2f:f0:35:35:78:ab:1a:22:93:b2:eb:2c:c2:af:c0:
37:03:ab:1c:1d:1b:22:99:68:c8:37:60:a2:4f:39:0e:43:7c:
6a:70:9e:b7:b8:3f:da:c5:ce:f7:58:4e:1b:6b:09:1f:0b:dd:
2a:75:51:da:ed:02:24:f7:8f:b2:fc:a7:3d:be:a6:9c:bf:a5:
de:fc:ec:1b:87:e7:28:c2:6a:4a:f1:6d:41:31:05:37:57:e7:
49:ed:57:6c:b2:00:29:58:43:3d:c2:3b:d1:e3:8a:48:90:73:
13:1b:94:11:ae:17:4a:f8:00:52:52:ca:1b:e2:78:cd:1d:db:
33:b5:a6:d2:45:16:00:ce:b9:bd:d1:8b:60:db:7f:a7:42:21:
69:2e:73:91:01:f0:a3:7f:aa:69:3c:94:63:00:fa:e4:f2:ef:
4a:f4:df:12:c7:f4:29:93:47:7b:69:2c:42:bd:1c:8d:ce:62:
99:a1:f7:a3:4e:ab:73:4b:65:74:0f:92:df:63:d7:a7:cd:eb:
77:ee:19:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:19 2026 by rpki-client