Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File: fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier: oHLFAQ2xQX2TplU6ofYKvpBjd0K1I4/ic5W8gMm1aaE=
Subject key identifier: 15:4D:C9:EB:53:93:A9:CB:51:AA:4A:47:7D:54:F9:26:35:87:C1:AF
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 019D265EEAB5897A84BCFA1EE57C3243C477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number: 0FE5
Signing time: Wed 25 Mar 2026 19:00:47 +0000
Manifest this update: Wed 25 Mar 2026 19:00:47 +0000
Manifest next update: Thu 26 Mar 2026 19:00:47 +0000
Files and hashes: 1: Oz9Ttp-AVh76JnAb-kMb1xzkjno.roa (hash: sEZiAkfsJFCuDJdfukBNYz0nrUtamX75upkoItAaXTU=)
2: bvjL4ilRFW0KRgukAA7c6bj--pM.roa (hash: NB7wiQjjbBAzpwPNdbh06lraiRIpqpLN7dXPm6C9Qc0=)
3: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: WSOuhn4g3IXKbkuYq/xcqhzCxol/CvqlSF/4sBb9nvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ea:b5:89:7a:84:bc:fa:1e:e5:7c:32:43:c4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Mar 25 19:00:47 2026 GMT
Not After : Mar 26 19:00:47 2026 GMT
Subject: CN=154dc9eb5393a9cb51aa4a477d54f9263587c1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:6a:b6:00:ce:14:90:cd:c5:c9:e1:5d:5e:
20:03:a4:7c:85:d4:a6:de:33:42:5e:3a:91:dd:4f:
7e:3d:5a:fa:21:3b:b6:8d:b5:f0:94:1f:9e:84:83:
dc:86:74:1d:2f:1d:d1:22:57:b4:e7:c8:c5:f0:d3:
5f:59:bf:81:67:e1:4e:2d:ba:b6:f3:93:7a:65:5a:
a1:42:b7:37:24:7e:9f:b8:66:5d:58:ea:56:37:b3:
7a:c4:c5:a0:2d:41:df:8c:26:4b:8b:b1:25:15:fd:
a7:6e:5f:da:03:71:e2:55:52:c6:cc:f3:e6:b9:d2:
ae:a0:19:a5:98:4f:69:55:96:57:13:b4:fa:c3:7b:
9b:20:83:08:1f:ad:21:58:3f:00:ec:2d:16:20:b1:
ca:99:32:b6:25:6b:55:f2:3e:1e:eb:7f:45:12:d8:
de:b4:75:14:97:37:a8:51:78:16:cc:84:ae:50:45:
df:54:89:ca:d0:d4:af:d1:d1:a2:61:a4:f6:20:37:
54:e2:b1:ae:5d:e1:b3:35:bf:ec:fb:c3:0f:d0:ff:
9c:b2:d9:9c:bc:58:40:f9:8f:3c:21:c3:72:3d:0f:
7f:99:7e:51:7d:5e:cd:8a:b1:08:f8:d7:d0:06:28:
0c:67:ce:2a:ce:d3:d4:ed:56:ae:83:94:9e:c7:34:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:C9:EB:53:93:A9:CB:51:AA:4A:47:7D:54:F9:26:35:87:C1:AF
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8e:78:8e:09:1a:d4:2c:6e:a7:1f:c5:df:32:63:39:58:36:
98:8b:8e:5b:1e:fe:1f:4b:a5:b5:72:00:b3:f0:3f:01:26:5b:
15:66:48:8e:e4:a3:9c:10:43:64:84:62:e8:c0:3c:fc:a8:6a:
1d:21:93:79:15:ad:09:c8:70:30:fa:9a:9b:40:02:b4:6e:5e:
51:23:61:f0:ba:fd:a1:33:03:c8:e0:27:20:01:d8:fd:fc:13:
22:74:91:8b:2b:ed:ec:26:cc:25:4e:f5:10:a5:b3:b0:df:17:
d3:cd:f3:24:0d:f4:d4:f2:bf:01:eb:9b:73:5b:df:2f:50:b1:
51:78:19:11:45:09:2e:bc:63:63:31:86:91:e9:c2:ed:84:ac:
ce:de:62:8a:e6:55:ed:42:5d:bc:a2:46:a7:59:1d:12:21:4a:
81:36:53:91:1b:4c:f2:c5:69:ff:b6:2e:40:36:47:f0:01:75:
6a:84:63:b6:01:96:0e:b1:41:82:64:9c:84:fb:a1:eb:a2:33:
59:0b:99:24:f2:8c:1b:85:31:6f:61:db:64:00:00:ed:6d:68:
11:f1:84:4b:35:f5:d2:b2:4b:2c:2b:18:4a:6a:66:1e:07:34:
84:f7:f9:b4:63:8a:18:2a:1d:c7:b9:d9:df:84:18:8a:78:24:
c1:51:3e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:28 2026 by rpki-client