Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: ziL0Hzrx4kNcU50N1HkFn4PzYkK/8nFMbU4+8nl9Lp0=
Subject key identifier: FD:35:81:43:CE:3C:69:1A:5E:AD:A5:7B:5C:AC:77:44:FC:B4:F3:02
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 019D299784A5D7D4B361A72CE1D0C6226574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 17C7
Signing time: Thu 26 Mar 2026 10:01:28 +0000
Manifest this update: Thu 26 Mar 2026 10:01:28 +0000
Manifest next update: Fri 27 Mar 2026 10:01:28 +0000
Files and hashes: 1: DP2ZVF5XMtIlb8PSMaOqb9pBnpY.roa (hash: jGqjs9xozz6rpTqRrKhgcskeRFoVeCtnOBzJB/wnJHI=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: FwnPhSygeQKOvhqndqR454RX6zhrWx3ygcHtaajB3qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:84:a5:d7:d4:b3:61:a7:2c:e1:d0:c6:22:65:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Mar 26 10:01:28 2026 GMT
Not After : Mar 27 10:01:28 2026 GMT
Subject: CN=fd358143ce3c691a5eada57b5cac7744fcb4f302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:f1:8d:74:db:da:7b:10:5f:b6:cb:b6:c7:
a4:0f:a6:f7:75:09:1b:5d:bb:a1:e1:18:62:3a:b8:
33:4d:5d:9e:05:ff:b4:68:ed:09:69:80:5a:1c:d5:
8c:4e:03:79:f9:67:a9:ad:f6:9b:4d:9f:3d:db:a9:
ea:61:7d:9a:36:75:ed:9a:91:06:a6:8b:08:13:84:
8b:d1:25:27:1a:ec:ca:c9:66:49:7e:5f:c5:3a:75:
6d:82:68:b0:12:0f:29:a3:e8:88:25:7f:b9:cb:cf:
54:3b:55:21:2c:8f:fe:ab:09:70:5f:95:a2:a3:22:
31:c5:f6:4b:87:42:e0:d5:5a:ec:fb:3e:3b:07:b0:
02:ed:72:16:4b:76:92:68:48:7b:bd:18:2a:ee:d8:
3f:60:e6:eb:c8:99:15:4a:d0:e4:fa:39:5e:cf:df:
07:46:07:c4:bc:23:8f:d8:4e:1a:ba:72:cf:f8:5e:
4e:53:30:b5:df:d9:94:88:f4:3e:7d:c1:33:d4:97:
dc:ba:13:f9:f3:0a:65:f8:e3:3c:c3:67:a2:7d:3a:
a2:44:a6:bb:72:58:1e:03:68:e6:3a:5b:0c:83:b5:
e9:be:c7:b0:2e:77:02:63:01:f1:ce:92:95:52:17:
ea:46:be:ad:33:f1:4f:62:f5:f7:82:cf:fa:2f:7e:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:35:81:43:CE:3C:69:1A:5E:AD:A5:7B:5C:AC:77:44:FC:B4:F3:02
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f3:bc:7b:67:71:bb:ec:47:f3:8f:71:bd:e1:c6:d4:29:a8:
65:5a:b7:55:be:c9:5d:cd:30:06:d5:0a:57:25:07:f7:f6:f9:
a3:f4:3f:92:8a:0e:92:07:f3:a5:9a:ef:ff:fe:ce:24:ad:26:
81:ea:ac:23:df:d8:64:13:3e:50:6f:94:ad:14:72:ee:a5:23:
77:1e:78:b7:9e:22:2e:9a:11:30:be:ec:f1:69:87:df:21:95:
6c:05:95:fd:59:35:82:33:d9:7b:d3:3d:8b:fe:ab:a7:ac:71:
ef:8e:a5:a6:e4:e9:5c:6b:0d:3e:64:0b:c7:9e:d6:7b:f7:26:
b5:c1:58:ad:03:63:c6:8b:73:ae:bb:87:2c:5d:05:4b:43:cd:
60:46:8a:81:8d:40:a9:b3:21:cf:4e:b7:d6:d7:35:d0:d1:f2:
de:14:99:d9:02:7e:fc:6b:7e:7e:fe:d7:8b:aa:5a:ee:da:bc:
79:42:60:c0:c4:42:33:34:d7:6e:4b:b1:f8:d9:c9:af:fe:61:
e5:af:50:02:26:68:1a:b0:1c:5c:73:b2:5a:91:e9:0f:13:70:
6b:96:82:f8:76:c6:8f:70:ff:0d:53:2a:48:ab:33:ec:f9:22:
1c:18:7b:ff:6c:85:96:68:c7:02:23:1b:79:9c:78:02:fc:20:
67:cc:d5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:26 2026 by rpki-client