Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier: ZxyBshDiijtabP8nPrBdm83VPn3eXUw2l8+oIUw+2CM=
Subject key identifier: 48:86:A1:03:70:A8:D4:78:8E:CE:FB:71:EC:81:BC:07:1F:A5:D1:EE
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 019D2996EF48ADCAE3B61BA0D477CD950642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number: 12D0
Signing time: Thu 26 Mar 2026 10:00:50 +0000
Manifest this update: Thu 26 Mar 2026 10:00:50 +0000
Manifest next update: Fri 27 Mar 2026 10:00:50 +0000
Files and hashes: 1: beJshXTCFytgHzjAamZUfkQuubM.roa (hash: Lh9/62VbhV+tIPQCobGS97fKdIV26rAllSw/ibORPkA=)
2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: P7nd1/ry/0rwK/7JO2pTO3Ifi5W5l1+LLCWV92BmQek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:ef:48:ad:ca:e3:b6:1b:a0:d4:77:cd:95:06:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Mar 26 10:00:50 2026 GMT
Not After : Mar 27 10:00:50 2026 GMT
Subject: CN=4886a10370a8d4788ecefb71ec81bc071fa5d1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:1b:29:d0:f3:c8:15:e4:6a:de:de:ea:70:
80:93:24:86:08:7b:59:5d:5c:a1:ae:7e:fa:85:e9:
5e:7b:ea:fd:62:76:90:f8:1c:70:7d:2e:12:ea:5f:
f2:31:d1:42:b4:89:7a:42:71:de:9c:61:b2:23:da:
16:df:5a:14:bb:75:8a:dc:e6:bc:c0:e0:5f:c2:86:
79:c4:9e:62:98:40:3c:09:8c:af:96:91:63:b1:e3:
eb:b0:1e:0e:aa:33:4a:41:bf:7b:67:27:95:78:88:
ed:d9:13:90:85:64:71:b4:76:d6:29:70:f0:b2:26:
02:fc:8d:96:1b:b6:48:bf:9e:9c:85:8b:af:81:9c:
55:68:9d:d5:4e:f7:c3:8e:0f:4c:5c:0a:ab:7a:a7:
17:ea:fb:45:cd:a8:fe:e4:4b:2f:7f:94:73:dd:e6:
1b:82:cc:d7:a3:30:d9:22:bd:26:eb:09:a0:94:10:
0c:40:69:a4:c3:61:d0:82:a3:e6:1a:23:1f:f9:e6:
01:c8:db:db:8f:81:d3:96:88:4e:95:51:11:01:a1:
11:5a:fe:52:17:6f:32:27:7e:fb:d5:5e:c2:b5:6f:
29:4e:67:d0:95:83:5e:9d:41:d0:6a:4d:53:dc:e0:
71:af:43:98:bc:a8:89:e3:34:9a:70:d5:24:e6:58:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:A1:03:70:A8:D4:78:8E:CE:FB:71:EC:81:BC:07:1F:A5:D1:EE
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ac:4c:4b:76:fb:f3:44:a7:18:e8:1a:88:16:e1:60:3e:05:
d6:59:e5:b2:01:94:d6:7a:67:56:df:a0:c6:40:6b:14:60:06:
56:54:e6:9a:8a:6a:44:25:15:f0:89:76:81:55:b9:47:70:7a:
f3:54:bc:47:e1:ac:99:48:d2:3c:71:3a:4d:9d:ef:e2:07:d3:
26:cc:d4:d8:51:5e:15:51:7a:0b:bf:6e:ab:1d:03:b5:73:63:
09:4b:6d:11:64:6a:8c:1e:01:50:08:41:54:29:26:89:10:81:
dc:d9:56:3e:d2:3e:51:9c:85:f1:4b:37:5c:ce:2e:0b:06:c2:
f6:a8:e3:36:32:4c:b8:80:bf:71:d8:81:45:64:98:91:c7:0d:
5a:73:18:57:11:30:8f:8c:69:53:31:c5:f4:11:58:98:3f:19:
e5:d6:e7:01:27:21:58:50:c4:c3:9e:49:7b:0a:bf:d3:fd:46:
aa:f5:f2:2f:c5:06:be:b9:80:2c:51:f4:d5:2d:43:a9:82:bf:
e6:34:93:cb:0a:1f:e2:dc:f9:32:ad:a1:4e:38:57:73:4d:53:
4a:c2:64:50:9f:c5:79:3f:0b:6e:ce:f4:ed:2b:7e:dc:0b:b8:
06:12:3a:ea:6e:90:97:8a:3d:fc:15:1b:79:3c:54:1f:5c:72:
00:3f:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:33 2026 by rpki-client