Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File: fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier: VeBmN/Drowgqx/ZH5wFnJPcyCdAOBafuCwDIlUxPeM4=
Subject key identifier: 05:64:EC:B5:E9:09:9D:B7:87:8F:B3:0E:13:1C:2B:97:B6:27:0A:83
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial: 019D25F162AF16F045566FAA25D10E3AF669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number: 1186
Signing time: Wed 25 Mar 2026 17:01:09 +0000
Manifest this update: Wed 25 Mar 2026 17:01:09 +0000
Manifest next update: Thu 26 Mar 2026 17:01:09 +0000
Files and hashes: 1: 2lNKUKMFEbf99s5ruYSyx3kpqBA.roa (hash: frbfhLN2U1B/a1tCRS0GooGGeNzUszrYFqD6uG7ghHw=)
2: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: 0aMeLFdjb9oomPwUatuw3VOYsiZZGGqPldCb1uFh9ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:62:af:16:f0:45:56:6f:aa:25:d1:0e:3a:f6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Validity
Not Before: Mar 25 17:01:09 2026 GMT
Not After : Mar 26 17:01:09 2026 GMT
Subject: CN=0564ecb5e9099db7878fb30e131c2b97b6270a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:1a:7f:80:82:ee:d1:34:f5:93:85:be:7b:
de:94:4b:6b:f6:60:f1:e1:97:c0:aa:3c:67:85:7d:
64:3f:2c:90:fe:04:16:f6:85:1f:d7:20:fa:bc:b1:
ae:c9:87:b2:96:0b:a8:dc:a8:e7:4c:49:32:e7:25:
b2:05:b3:6a:33:94:db:a6:af:b6:46:5e:09:68:43:
ff:0d:56:86:a0:4d:b6:95:aa:1c:3a:08:d4:50:b5:
53:9d:d0:67:35:17:5c:d7:55:3a:96:a0:46:92:bf:
00:2b:78:d2:10:49:94:61:a2:2e:1f:f5:bb:b6:e3:
5a:84:fe:7b:2b:b2:67:55:f2:a0:cc:55:14:a0:07:
bf:f6:f3:f5:19:de:ea:c1:7d:ae:d2:b8:98:61:ea:
3d:c3:79:17:52:d5:31:3e:86:ba:75:c9:ab:1a:2b:
cc:75:e2:20:cb:94:27:48:9c:97:cb:a0:d0:fb:bb:
76:95:79:4d:23:dd:42:90:c8:b9:b6:b4:e7:7d:5c:
0a:c0:5a:d1:e0:97:e1:2f:e7:de:5d:84:52:ff:83:
ed:13:9e:b3:41:94:05:8f:e1:03:67:d2:6c:b9:e8:
df:cd:81:fd:20:25:30:9b:d3:40:20:2b:90:97:8b:
68:e3:fb:43:5e:f5:7d:0a:5e:be:05:df:41:0e:0e:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:64:EC:B5:E9:09:9D:B7:87:8F:B3:0E:13:1C:2B:97:B6:27:0A:83
X509v3 Authority Key Identifier:
keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5a:2c:36:e4:c0:4f:9e:9c:b2:fa:6b:99:06:b3:b2:be:55:
b1:5a:71:a3:2e:9f:22:5b:5e:a7:38:74:16:27:08:2c:d4:6f:
98:6b:38:50:0a:36:3b:f6:1a:b6:ec:aa:08:90:27:65:05:28:
5c:9b:74:b7:24:b1:71:94:2b:94:69:28:33:4a:f3:bc:fc:0b:
13:ce:00:c7:57:0a:71:af:81:58:10:40:c9:d4:fe:9d:ec:df:
08:0a:eb:7b:e8:c2:13:fe:a5:78:00:76:1e:6c:df:19:63:af:
7e:76:e2:d7:a1:62:51:33:60:26:2e:8b:26:09:67:a1:21:98:
2d:70:4f:f7:a8:08:5d:87:33:cd:9e:8c:fd:0c:06:0b:bd:5b:
47:fd:9d:62:33:85:91:b4:07:e3:e7:57:65:14:dd:97:0a:c9:
55:1e:6a:3e:04:a2:3e:5d:20:63:52:5f:13:c3:e8:f0:1a:eb:
c6:0e:df:3a:c4:78:ab:79:a2:fd:bc:01:c0:ad:63:9a:cc:ea:
0b:9e:fb:7f:10:cd:e0:05:5e:2b:cf:01:43:fa:c9:a1:4e:86:
93:f4:b8:b7:2a:25:93:d1:3c:71:94:6f:b7:a2:72:26:5e:ad:
90:c5:7e:07:fe:16:b8:b1:31:b1:29:7c:f4:8c:04:64:6b:e0:
ca:6a:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:43 2026 by rpki-client