Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
File: fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft (raw, json)
Hash identifier: Pima6zE+S+GhsxIZwpkTygl4NA9b2K8qlHr78xf173I=
Subject key identifier: B8:10:8B:5C:27:37:08:9B:5F:93:38:04:19:FF:CF:C8:02:F7:DD:E8
Authority key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
Certificate issuer: /CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Certificate serial: 019D2A3B9AAD005476509D25803406FEFF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
Manifest number: 06D1
Signing time: Thu 26 Mar 2026 13:00:42 +0000
Manifest this update: Thu 26 Mar 2026 13:00:42 +0000
Manifest next update: Fri 27 Mar 2026 13:00:42 +0000
Files and hashes: 1: A0kDV6HOq6FdY-LkUzRoio2xA9Q.roa (hash: i9DOUjMa7c5ZM14JioAbWMihtBuOPOBDq4Dq7r6lxQg=)
2: fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl (hash: IRYfLGrYLR0e9An2lzOLLBnRpiEjsbnPAIigN16El9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:9a:ad:00:54:76:50:9d:25:80:34:06:fe:ff:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Validity
Not Before: Mar 26 13:00:42 2026 GMT
Not After : Mar 27 13:00:42 2026 GMT
Subject: CN=b8108b5c2737089b5f93380419ffcfc802f7dde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:64:88:b6:f2:21:a3:a0:c3:c3:f6:41:a1:
ab:c7:8a:db:4e:f8:b0:2a:b4:54:45:a9:bd:ef:d6:
84:af:26:09:3e:f8:13:67:11:6f:1d:5a:ef:d9:1f:
30:6c:82:bd:18:a7:01:73:69:bd:ff:89:bc:f7:5c:
26:43:50:c4:0f:fc:8d:0a:ff:fd:33:cc:4e:72:98:
12:4f:8d:07:9a:e5:65:f0:f2:a7:db:a2:4f:2f:6c:
fa:1d:7d:c9:4e:c8:1a:73:55:bc:2b:5b:9f:86:4a:
19:d8:40:91:0a:72:9b:8a:6d:97:18:a2:13:2a:34:
2b:76:7b:72:03:7f:4b:6a:7c:d5:8b:96:0b:fa:5f:
03:46:0a:e1:c3:0f:c6:60:3f:2e:db:7f:43:9d:3f:
6d:65:c6:01:15:7e:ed:9f:3a:a0:da:64:af:8d:45:
1f:58:e1:4e:fe:dc:2f:4d:46:54:da:d3:0f:fa:09:
2d:55:b3:97:ed:3c:72:bf:a7:fb:b9:03:c8:aa:d0:
28:e4:96:00:dd:3c:6e:65:5d:be:b3:fb:18:e8:90:
ab:45:f6:78:d7:d1:dd:78:bb:ac:9d:3e:33:0e:8d:
e2:51:f5:bd:05:93:29:8c:92:d1:18:5f:e3:52:92:
83:dc:9a:d4:63:82:ff:e3:a9:00:28:dc:80:5a:95:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:10:8B:5C:27:37:08:9B:5F:93:38:04:19:FF:CF:C8:02:F7:DD:E8
X509v3 Authority Key Identifier:
keyid:7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ba:82:33:25:2f:1b:1a:cf:45:07:34:76:1a:70:a7:80:68:
9b:9b:15:21:ac:b9:1c:f3:df:cb:a9:58:c6:14:40:47:16:10:
4e:7c:87:a3:bf:2f:8e:7c:d9:b9:61:60:ca:43:04:01:d5:19:
3e:fc:6c:85:48:08:4d:ed:70:1c:63:51:89:c8:30:a8:28:47:
ef:42:13:36:ee:13:b0:92:05:32:a9:b2:0b:30:b0:99:61:ea:
31:9b:11:f3:87:ec:7a:f5:10:28:bd:c8:bf:1b:c6:67:2f:0c:
7f:94:f8:16:bc:7e:09:26:82:21:6c:c1:4e:d1:35:bc:85:c1:
0f:31:67:65:be:de:34:96:57:9b:dd:3e:81:b6:be:72:98:fd:
3e:fe:96:ca:96:da:16:4f:e5:23:43:d8:6f:5f:14:1f:b9:fc:
89:13:ad:a6:e4:04:77:72:0c:6e:61:42:18:e1:72:4a:cc:ea:
67:83:4d:ad:d7:13:d7:56:4b:33:48:b1:91:c0:98:02:2f:0f:
c5:0f:e6:d1:f2:b1:fd:ea:41:14:e8:d9:37:a9:0c:98:68:0c:
ef:e3:68:52:71:13:cc:76:2f:91:1c:33:16:66:89:e4:e5:b2:
a6:f0:49:35:59:11:97:3a:a8:7b:41:07:43:56:73:63:fb:49:
d6:3b:01:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:13 2026 by rpki-client