Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: PlYGJxCXabrOII1skX+YXIVneuKM2cCR6PqdIIZd0DQ=
Subject key identifier: BA:FD:22:12:EF:68:68:42:F7:FA:9A:29:7E:F0:E5:12:AF:80:89:6F
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 019E1DC7547E3408EEB01CAFCC540E63B521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 0497
Signing time: Tue 12 May 2026 20:01:02 +0000
Manifest this update: Tue 12 May 2026 20:01:02 +0000
Manifest next update: Wed 13 May 2026 20:01:02 +0000
Files and hashes: 1: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (hash: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8=)
2: a7dc7sTXBG9g6baqXZ5n-zFcW2U.roa (hash: NAb+NkDlWJd04gSzwtykl0+s9KlRgbw76dF4Fu82HXg=)
3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: xRvN4nI8FO8m/eVBzMbo8ymy0pcrgDm22i9lcmqOiBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:54:7e:34:08:ee:b0:1c:af:cc:54:0e:63:b5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: May 12 20:01:02 2026 GMT
Not After : May 13 20:01:02 2026 GMT
Subject: CN=bafd2212ef686842f7fa9a297ef0e512af80896f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:ec:62:3d:fc:03:60:42:83:ee:1d:8a:f5:
05:1c:44:cb:96:53:04:55:af:e8:ff:f3:a8:7b:91:
49:5b:82:85:38:4a:cf:76:86:d2:1d:d6:c4:ee:8f:
e9:c4:e4:f6:55:ad:b2:e0:da:37:3d:7a:c4:ae:00:
f1:bc:03:25:c3:f9:a7:10:f0:03:d2:62:df:1e:18:
ae:e4:a7:79:d8:d2:1f:9c:86:97:b4:8a:33:f9:f8:
e7:25:30:7a:84:b7:49:fe:1f:02:60:30:d8:47:71:
a8:3d:75:76:8a:9d:64:da:f6:db:47:76:13:fb:78:
b3:ba:77:87:04:6a:31:69:3f:cb:cf:e7:90:43:92:
fb:c2:2f:03:da:44:40:28:fc:a3:e7:a4:de:42:cd:
49:b3:b0:5d:cd:49:6c:32:19:a3:dc:77:14:af:8f:
1f:c5:0b:88:2a:53:59:4e:99:5d:46:49:6c:56:a8:
f0:17:e1:cc:36:6c:82:ed:ac:eb:f8:a2:85:ba:1c:
78:1d:29:13:fc:94:da:04:3e:c3:ef:b3:1e:df:6e:
0e:a3:1a:1b:31:86:1f:8b:37:63:7d:25:7f:0a:fd:
b2:21:0a:09:20:f3:84:d4:39:c1:ea:50:6e:77:f2:
11:6b:46:9e:d2:43:c6:5a:70:8d:5b:e5:1b:77:36:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:22:12:EF:68:68:42:F7:FA:9A:29:7E:F0:E5:12:AF:80:89:6F
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b5:c0:f0:3a:7c:8e:7c:5e:1c:1e:ee:a3:27:54:61:e0:0b:
64:dc:6f:9f:29:09:e5:61:25:7f:ad:a7:aa:bc:70:66:94:fc:
43:ae:6a:0a:3c:83:9e:4e:cd:e6:b3:00:fe:d0:52:38:be:6a:
78:67:85:f1:c0:12:0b:1a:33:88:df:e1:00:71:3c:4a:2b:13:
f0:da:a0:05:0a:35:16:8a:ff:63:11:af:c7:27:bc:89:50:91:
60:5c:ea:22:ba:eb:c6:fa:31:a7:b9:96:e5:a1:30:5f:cf:4c:
08:cf:8f:d2:3f:24:e1:a6:50:ea:32:c6:05:f8:dd:e4:4f:c5:
a8:2d:d2:13:b1:50:44:7c:be:65:fc:b0:bd:85:35:f8:69:d9:
29:4c:a0:39:0c:53:85:37:a2:59:d6:52:81:87:03:7e:f4:d4:
4d:f7:b0:c1:ee:44:59:f6:d2:64:47:ae:1f:74:9a:a0:73:bc:
2d:1e:e7:47:a6:e8:a4:aa:1b:23:a3:ae:3c:b6:61:c6:ec:c2:
24:98:84:5c:50:a9:3c:32:52:ac:f8:a3:60:92:c2:e3:82:a5:
6d:21:9c:41:88:98:62:c0:a7:22:24:b1:4a:b7:73:9d:23:a6:
ff:df:cc:a1:e3:8a:3f:30:d1:81:26:d2:22:79:ff:d5:6b:de:
c5:51:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:52 2026 by rpki-client