Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: ZT+0dqQBdlhmj5i8hzF/UkipIv27duUpJ0Uc2/JikyU=
Subject key identifier: 7D:66:AE:32:1E:09:9E:19:9E:F0:54:D6:6F:AD:B6:64:B0:DB:B3:8E
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 019D2929611442FC30D3E0D9965722F33F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 0418
Signing time: Thu 26 Mar 2026 08:01:10 +0000
Manifest this update: Thu 26 Mar 2026 08:01:10 +0000
Manifest next update: Fri 27 Mar 2026 08:01:10 +0000
Files and hashes: 1: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (hash: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8=)
2: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: pN90xwycKjZkQaRrMVGsrfbJTH+kd7T5mn2yfueRDmc=)
3: r9NWEPI6u6L0HITxoVcmXnXadCs.roa (hash: os9y7CavhWu63QlaCtuG1FYwA+ohXqqwFQrtt1Hmj8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:61:14:42:fc:30:d3:e0:d9:96:57:22:f3:3f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Mar 26 08:01:10 2026 GMT
Not After : Mar 27 08:01:10 2026 GMT
Subject: CN=7d66ae321e099e199ef054d66fadb664b0dbb38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:b2:53:4e:5c:30:66:0a:2a:72:9c:92:c7:
01:6b:22:47:99:ed:d4:1f:d9:f9:1d:ee:20:74:47:
6c:b6:38:62:5b:0e:b9:8f:96:6f:d2:e7:5a:9b:21:
79:eb:59:3e:89:93:39:89:7a:af:82:98:32:79:a9:
74:77:40:d4:08:be:72:cc:ce:fd:4c:24:bc:74:3d:
c2:d1:e0:5d:4c:0c:1d:e0:10:b2:4c:48:aa:85:cb:
93:30:01:a6:be:a1:8b:98:98:a7:85:20:cf:e4:a4:
28:ca:e0:da:21:0c:b7:19:8c:63:00:29:0f:74:2f:
58:42:de:c3:f8:fa:68:9e:b1:94:b0:b3:fb:d7:06:
e1:3a:f1:14:90:10:9e:ce:b6:8f:67:fa:2f:f7:06:
cc:06:b9:e3:b9:bd:9f:f3:08:51:7c:ca:40:1e:40:
c9:27:48:59:aa:dd:c8:e6:b5:e8:56:0c:2d:8e:b5:
4e:eb:d7:bf:40:f7:6f:56:dd:e9:8f:62:75:07:28:
e6:e1:90:87:7d:14:ad:98:0b:26:37:0f:54:b1:c8:
6c:cb:cb:2c:1f:5f:dd:65:5a:b6:a2:96:55:11:c1:
3e:ca:58:3e:7c:70:d4:40:3f:bc:06:b1:77:c4:e8:
dd:a4:aa:5f:df:c8:f9:ca:17:58:c7:f7:da:18:3e:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:66:AE:32:1E:09:9E:19:9E:F0:54:D6:6F:AD:B6:64:B0:DB:B3:8E
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3b:ce:f4:b4:b9:33:07:6c:16:98:d3:ad:c2:40:32:60:3f:
4b:93:01:df:17:30:78:8f:c7:f7:7e:06:3e:f6:d1:ae:6f:d8:
8b:d7:c6:e5:bc:43:66:33:c8:9c:7e:8b:8c:07:fc:d6:21:75:
61:8a:91:7b:80:98:74:7b:7f:3b:67:e2:81:69:2b:16:c8:d7:
47:79:5a:84:2b:36:f0:1f:f3:b0:2d:e2:4c:3e:67:06:ff:10:
6c:7c:d8:8c:8c:b5:3e:e4:2a:9b:8c:44:43:eb:74:ac:68:17:
db:5b:57:98:b4:79:8a:e4:5f:8e:39:59:ba:ed:f0:eb:4f:65:
2f:29:17:06:b8:1f:82:4d:9c:0f:a3:bd:00:f9:07:1d:d7:55:
f9:d2:b1:8c:71:bf:45:5d:28:d5:b6:7e:90:49:87:11:d6:7d:
8d:f8:8c:2f:63:76:c3:68:d7:9a:50:69:13:fa:98:34:83:e3:
70:2e:fe:df:20:a0:ec:2b:2a:ec:db:28:36:f6:78:a8:81:87:
a6:11:f8:a6:80:c8:86:a8:8d:59:89:12:c7:04:bc:f7:10:fe:
06:43:0e:1e:c4:01:87:b0:68:46:04:c3:3b:89:ed:90:09:2c:
69:44:d5:89:ef:04:40:41:01:f6:06:d3:69:1c:bb:a1:53:a5:
8e:1a:ca:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:11 2026 by rpki-client