Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
File: fi4pGEMoSetx6V3EDRB56oZfYQk.mft (raw, json)
Hash identifier: bNHXms1PdMJ3VvJaoaisk3xPopS4NBu7DitII0GMJfU=
Subject key identifier: F8:07:5A:B2:6D:6A:DF:0C:F9:F1:15:8D:E6:09:2E:6E:70:46:60:D5
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Certificate issuer: /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial: 019D2B4EB0E49A66C944A6DB840621B4CAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
Manifest number: 0BA4
Signing time: Thu 26 Mar 2026 18:01:10 +0000
Manifest this update: Thu 26 Mar 2026 18:01:10 +0000
Manifest next update: Fri 27 Mar 2026 18:01:10 +0000
Files and hashes: 1: 1qfpefK-IKLyRX2WbiD-8WMvtIo.roa (hash: 92M9a8T4KZ/HeDVtYT2qczbOaea03AQx3PHj+D4fEdU=)
2: fi4pGEMoSetx6V3EDRB56oZfYQk.crl (hash: Ln23GNLwTrZObUYmcA2MQOE90z/ryIMppXHXrUVd+XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:b0:e4:9a:66:c9:44:a6:db:84:06:21:b4:ca:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Validity
Not Before: Mar 26 18:01:10 2026 GMT
Not After : Mar 27 18:01:10 2026 GMT
Subject: CN=f8075ab26d6adf0cf9f1158de6092e6e704660d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:30:50:05:63:6a:0c:8a:31:0b:46:95:02:
94:e8:46:7a:96:7f:e6:5c:d8:d6:74:23:f6:0b:7d:
b6:8d:ed:f4:e6:3f:61:dc:57:ba:12:9d:05:47:84:
33:c5:b5:b3:5f:3e:d7:c5:67:cb:67:74:41:bd:6d:
ae:94:0d:a1:48:28:a6:a6:97:4a:f8:83:8e:72:a3:
ba:96:1b:d4:e8:50:da:41:f9:73:df:14:d2:5b:7f:
dc:e9:e1:65:12:49:35:1f:65:a8:fa:45:b4:0f:0e:
17:42:1a:6f:b0:67:1f:c3:ad:a4:ba:06:0d:7d:f2:
ee:f4:29:06:de:ed:53:64:1e:3d:80:80:e4:fb:f9:
16:58:be:5b:92:de:d3:23:f6:20:6d:e6:d0:56:1f:
1c:01:38:94:96:0a:06:7b:d7:29:81:88:df:b4:e4:
b0:37:56:01:45:f8:24:f1:8c:89:10:9c:04:12:a4:
2b:a2:bc:12:36:8f:76:38:2e:94:a4:9d:a4:54:df:
4f:32:e1:b5:4e:b3:b4:1b:42:29:27:99:39:9c:01:
0f:97:27:63:92:89:6a:df:f8:fb:ed:7d:f9:75:e6:
e8:a2:de:4f:71:dc:ce:63:76:bd:a0:54:a7:26:5d:
22:0c:a0:96:7a:b7:39:ac:35:0d:bc:50:5f:7c:0f:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:07:5A:B2:6D:6A:DF:0C:F9:F1:15:8D:E6:09:2E:6E:70:46:60:D5
X509v3 Authority Key Identifier:
keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b0:c6:d4:7b:6e:e8:d5:9f:c4:9d:21:3a:f4:f0:05:ad:e1:
45:61:13:eb:01:b9:9a:ae:12:68:b6:05:19:ba:02:cf:3f:ef:
ee:e4:0f:6a:5d:32:bc:1e:81:58:81:93:33:5a:e8:55:ff:3d:
77:c1:90:da:c1:b4:93:d6:d7:bc:7b:0d:61:b1:41:42:ff:3c:
5f:ad:41:1e:9c:32:ba:65:d3:73:1c:3d:03:73:f9:0f:49:3a:
e7:33:f6:8e:91:87:1d:7b:0c:fc:33:3a:b4:98:59:a4:a5:d0:
06:e8:ab:8b:f8:c4:5b:88:63:f8:20:98:b7:9c:f5:64:a0:4c:
22:93:86:50:5f:06:e8:59:c5:27:97:aa:91:46:ac:94:75:bc:
db:33:08:7f:db:c7:c1:be:b8:fb:9e:a8:5c:1b:79:48:a9:ae:
b0:e3:e9:b5:ef:3a:af:20:ba:aa:7e:92:1e:3a:b2:d7:9e:0d:
8a:88:2e:7f:74:aa:8e:57:18:58:be:2a:f6:d3:4e:65:b3:38:
04:b8:73:ab:c6:cf:19:cc:41:9f:09:a3:13:fe:cf:fe:01:dd:
62:f0:cc:3f:0e:f1:31:e8:89:71:9f:6b:20:02:60:1c:cd:38:
96:fd:cb:b8:0b:5c:1c:b9:88:e7:29:5b:9a:11:5d:b5:47:15:
02:58:57:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:46 2026 by rpki-client