Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File: fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier: ZGBmW2WXPpStddl7FEw0GTXA2NBO/gUHax7PG0xvoQw=
Subject key identifier: 3F:C5:12:0D:C8:6F:14:F2:24:FB:98:0A:87:C7:AD:97:2D:27:27:2D
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial: 019CAC477A5E52E6EEEDF90ED9D6E23F4F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:01:31 +0000
Manifest this update: Mon 02 Mar 2026 02:01:31 +0000
Manifest next update: Tue 03 Mar 2026 02:01:31 +0000
Files and hashes: 1: 5ruGjzi72EzHeNevEE3JGyLtXgQ.roa (hash: F631VpzOVt6zeqgnyepT7OlQYefuALhIBPjhvOj+SbM=)
2: MLTMNf6RdXQHgobliz7oe72JkjQ.roa (hash: vynBVcDFPo0FhDEU/VJwzCvxOSeIG5MJSs1ntfusClo=)
3: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: 1ndYtWB12FeAdn5qp7JTLFZniAa5QUIs3W+x3nMC4vE=)
4: fXZclwjMmJuKFUf7Q9P-NHbNEpQ.roa (hash: anvE7nbyIQqcqcLLGmm77d4AcDLATJhTxcyjOxhWcfo=)
5: qq9jEWnUkq7RixjGSRxp41ikMoQ.roa (hash: YTairbAOKk2TzoyqKR+ve0ERswXp2cOBJyd3vALW04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:7a:5e:52:e6:ee:ed:f9:0e:d9:d6:e2:3f:4f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
Validity
Not Before: Mar 2 02:01:31 2026 GMT
Not After : Mar 3 02:01:31 2026 GMT
Subject: CN=3fc5120dc86f14f224fb980a87c7ad972d27272d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:34:4c:a1:1b:95:58:a9:8e:65:b4:5d:cd:
b4:f8:28:22:ab:b4:ce:79:9d:e7:49:89:11:77:5a:
e3:32:ff:8a:03:76:c3:33:20:81:c0:f6:f7:1e:97:
97:da:80:77:20:e7:76:c7:dc:c2:12:1c:83:90:20:
56:94:dc:83:df:6e:f7:b7:51:10:d7:49:e9:e2:1d:
30:c5:7d:3c:52:36:f2:58:6d:ed:a5:f5:e5:dd:2c:
dc:21:52:4e:88:a2:8b:32:3d:be:43:c1:12:ea:0e:
39:be:7b:c0:62:76:1c:95:45:d6:fe:ad:df:37:d0:
29:de:bb:e3:1d:98:9d:d5:79:31:1a:0c:8b:40:86:
c1:f5:d7:6c:da:d0:b4:3e:3d:aa:3a:36:08:49:e8:
d1:bf:51:1d:e4:cd:70:30:75:82:b5:0b:24:76:a6:
1c:d0:a9:45:08:22:0f:7f:4c:29:4a:a7:a4:ec:4a:
4c:92:cf:c0:f7:62:e1:f4:c1:a0:45:b5:a6:8d:38:
cb:db:8f:31:7b:50:fd:2b:24:d5:66:47:50:ac:2d:
e0:f4:34:98:e6:c4:4d:28:6b:97:44:1e:5e:3c:ca:
5b:8c:d9:8e:47:b0:95:de:01:0f:09:28:e9:5f:fc:
35:6b:21:83:69:40:bc:ee:c3:ce:f4:df:86:85:f2:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C5:12:0D:C8:6F:14:F2:24:FB:98:0A:87:C7:AD:97:2D:27:27:2D
X509v3 Authority Key Identifier:
keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d6:64:c7:99:2b:b5:91:78:be:ae:80:2c:86:37:18:61:e4:
ff:5f:f7:8a:c7:75:b9:f8:15:1e:c0:ec:57:39:02:db:d1:80:
c1:01:89:ba:d8:62:73:f3:d1:74:d6:6b:a4:0d:b4:e9:b6:b2:
1a:71:8e:e4:e9:13:dd:93:4c:bf:ef:10:b3:96:44:0c:b9:05:
fd:04:01:e2:3e:8f:18:27:0d:65:4e:f4:c3:62:37:2d:6a:02:
cc:14:c8:61:eb:c8:ca:9b:4e:46:37:6e:1b:2a:0d:21:ca:da:
cd:28:7e:7c:99:86:9c:b7:5b:33:b8:58:ac:84:de:8b:44:95:
8f:80:c5:fa:60:d5:9b:55:60:12:5d:9f:5a:85:30:d7:c2:96:
ee:0d:ce:5c:bc:a8:d9:8c:04:22:ca:c3:58:44:76:2e:55:c1:
38:08:b4:48:54:59:91:f4:5b:2e:85:02:c3:ac:bd:c2:05:37:
69:e6:31:3a:ea:5d:1c:06:93:98:99:82:15:47:1c:f9:73:52:
fe:89:2e:df:16:88:94:25:b3:79:c5:c4:32:a8:c0:e2:c1:04:
1f:51:d6:4f:ce:f4:31:13:1a:26:21:07:1a:e5:34:54:29:36:
f7:2a:a6:4c:3e:25:96:8d:7f:2d:e3:a1:ea:bd:21:82:f1:1e:
3d:61:a3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:02 2026 by rpki-client