Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
File: tE-FORdNAL-ov95JBD9IXDpYdSU.mft (raw, json)
Hash identifier: f6oWJmOIb/xPEHYT9/oV3pZGjvE/EUZQFwdpS5+Aq58=
Subject key identifier: 8E:36:0A:B2:A5:99:DD:87:72:B9:11:67:28:C9:73:4C:00:78:CB:4E
Authority key identifier: B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
Certificate issuer: /CN=b44f8539174d00bfa8bfde49043f485c3a587525
Certificate serial: 019CAA8F4D3D2693C3C04D53B8D12AA7FC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 18:00:44 +0000
Manifest this update: Sun 01 Mar 2026 18:00:44 +0000
Manifest next update: Mon 02 Mar 2026 18:00:44 +0000
Files and hashes: 1: Som9pdt2cBfqpNs_uoKUr5V86tc.roa (hash: Er0ATXdFVQI+dlPzaVCGDkbogKEk2cw3WoLgdwrv/rM=)
2: tE-FORdNAL-ov95JBD9IXDpYdSU.crl (hash: 64Ys4wofPWKXF+OKwRZmdVaBtVTpCDjsGHc5VQur46E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:4d:3d:26:93:c3:c0:4d:53:b8:d1:2a:a7:fc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44f8539174d00bfa8bfde49043f485c3a587525
Validity
Not Before: Mar 1 18:00:44 2026 GMT
Not After : Mar 2 18:00:44 2026 GMT
Subject: CN=8e360ab2a599dd8772b9116728c9734c0078cb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:66:d7:4f:3b:a6:35:76:47:00:5c:fd:a0:
3a:85:fa:13:3c:be:93:d0:ea:4c:15:bd:8c:0d:ee:
6d:6b:6c:8c:56:56:fb:2f:91:1e:f9:ab:f5:e9:d7:
17:25:95:87:93:0b:a6:ce:c0:67:d7:8e:d1:cb:71:
76:46:91:96:9e:e3:61:8a:48:d9:c3:d6:f6:25:65:
48:d8:c9:f6:c5:69:63:31:a4:2e:6f:43:66:98:29:
a1:37:73:fc:4a:ee:d4:e3:39:25:30:40:98:33:bc:
ac:9c:40:2e:8a:27:f8:44:a0:52:94:0d:6d:a1:92:
db:d5:62:41:de:c5:1e:0f:69:08:2f:44:4c:95:83:
81:bf:e4:1a:09:be:99:3a:09:cc:10:a8:ee:32:7c:
d4:77:51:de:0e:12:20:4a:8d:35:3e:23:d4:9a:91:
e9:dc:d0:f7:04:92:de:e7:dd:b5:ff:e0:9f:5b:3f:
e9:8c:f9:10:ca:c8:28:57:3e:f1:c5:b7:bc:cc:38:
c5:29:f6:ff:2d:ef:31:72:fa:8a:0e:c1:48:d2:61:
85:40:5f:17:ce:a0:cf:5d:44:01:14:9a:45:a9:4f:
d6:59:d3:84:40:bf:3f:34:7f:48:3a:8f:ed:a6:48:
de:6f:11:7d:c8:29:5c:98:3e:30:da:f8:8a:ce:18:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:36:0A:B2:A5:99:DD:87:72:B9:11:67:28:C9:73:4C:00:78:CB:4E
X509v3 Authority Key Identifier:
keyid:B4:4F:85:39:17:4D:00:BF:A8:BF:DE:49:04:3F:48:5C:3A:58:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE-FORdNAL-ov95JBD9IXDpYdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f75596-7790-432c-88cd-333e53cfa021/1/tE-FORdNAL-ov95JBD9IXDpYdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:86:f0:7b:28:98:7f:66:fe:f1:97:99:08:c9:43:ce:0e:e8:
dd:92:07:d1:8d:95:dd:ca:d9:a3:7a:73:96:1a:2a:7b:9c:65:
eb:47:34:17:3f:fb:06:b1:63:4d:85:5d:78:65:ff:48:98:2b:
56:b9:a3:49:ec:46:f5:3e:fe:73:c6:2a:9e:54:3d:00:5d:b1:
90:03:da:41:b3:31:b1:79:ed:5e:07:c3:47:ac:bb:51:b5:b6:
fb:59:91:38:d6:47:be:07:fc:c4:c1:fc:9d:bb:50:18:d7:4e:
92:e9:22:75:86:5d:18:37:a0:03:71:2f:4b:75:3e:48:12:5d:
3d:ae:8b:4a:a5:9d:86:4a:45:2d:7b:d2:6d:45:80:00:16:8e:
90:91:0e:f4:9c:24:f0:63:5d:2c:77:04:0c:e5:3e:59:47:20:
a0:0a:13:0b:a9:e2:68:6f:df:86:17:49:95:f0:25:83:ed:ca:
3e:6a:25:bf:f0:00:99:9f:e6:72:3e:ed:90:1b:82:7e:31:df:
12:92:2c:81:f5:4e:e3:42:30:3b:4f:4e:53:bf:4b:fb:9c:a1:
29:03:59:6b:78:3d:50:8b:f9:d9:d1:f2:26:df:cd:55:af:22:
2e:1f:49:d4:69:25:a5:4c:af:cf:d6:f7:dc:52:56:bb:94:0e:
37:2a:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:46 2026 by rpki-client