Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
File: fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft (raw, json)
Hash identifier: r0TSsDPVgybu06c4c0kvOh3nDOVx2GGO/1xZlW08Kvc=
Subject key identifier: B4:91:13:1C:7D:2B:DD:4A:72:E9:D2:8C:46:2F:1B:C8:5B:67:75:3E
Authority key identifier: 7F:10:B4:B6:2F:14:E6:16:EF:6F:E5:7E:CC:D1:B8:F8:18:24:8B:AA
Certificate issuer: /CN=7f10b4b62f14e616ef6fe57eccd1b8f818248baa
Certificate serial: 019E1D59553331216FEA41AB61BE46C39A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
Manifest number: 43
Signing time: Tue 12 May 2026 18:00:54 +0000
Manifest this update: Tue 12 May 2026 18:00:54 +0000
Manifest next update: Wed 13 May 2026 18:00:54 +0000
Files and hashes: 1: fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl (hash: Hkufrwzw03aMQ2VsdRCHblIXxP8DCL0DRy6o3VofBFc=)
2: qNO-vqMo6CUKbBad3Z7RIqx2J8c.asa (hash: BRtlygNOpn1uRvLhqR+yBcBHhopuo/nmc11EsjchCV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:55:33:31:21:6f:ea:41:ab:61:be:46:c3:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f10b4b62f14e616ef6fe57eccd1b8f818248baa
Validity
Not Before: May 12 18:00:54 2026 GMT
Not After : May 13 18:00:54 2026 GMT
Subject: CN=b491131c7d2bdd4a72e9d28c462f1bc85b67753e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:e5:f5:33:a5:26:25:35:63:2b:18:5a:f4:
77:c7:de:68:28:9c:45:af:f8:65:9f:60:01:52:dc:
d4:7e:a7:06:65:8f:54:74:54:f7:43:f4:f7:b5:c8:
aa:65:5d:70:c6:45:ff:e4:94:77:53:f8:17:aa:4a:
be:cf:39:7b:6c:99:8a:79:cc:ae:32:ab:34:fd:49:
73:7e:94:bf:e5:ee:7d:7b:f7:74:eb:66:41:2a:ba:
a2:70:6f:fb:53:4a:4b:cb:bb:34:6f:e5:f9:1e:4b:
ec:7f:ce:da:35:a4:5f:a1:73:2d:49:34:c1:c5:4f:
5b:db:98:dc:89:f6:68:d3:a2:c2:c8:1d:c8:f6:da:
72:05:21:6f:b8:fb:8d:e1:ef:27:ec:f2:55:9f:00:
a6:67:42:3a:30:87:5f:ac:d0:5f:f9:76:91:99:d1:
bf:91:99:e9:6f:1c:99:96:7d:8b:80:81:d0:e8:9e:
40:9d:db:98:d2:7f:96:f4:1e:1b:aa:88:15:ac:78:
2b:4f:12:7d:7f:86:eb:ed:7f:60:b6:da:e5:20:ed:
f4:4a:82:48:3c:b6:53:c4:51:04:14:74:27:ea:3d:
7a:74:a3:6e:e4:13:d8:ba:9c:e9:a8:90:da:a6:a3:
70:d9:1e:cc:86:30:7d:61:5c:18:1a:31:c3:c8:4b:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:91:13:1C:7D:2B:DD:4A:72:E9:D2:8C:46:2F:1B:C8:5B:67:75:3E
X509v3 Authority Key Identifier:
keyid:7F:10:B4:B6:2F:14:E6:16:EF:6F:E5:7E:CC:D1:B8:F8:18:24:8B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxC0ti8U5hbvb-V-zNG4-Bgki6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0a113c-e9f0-4957-b6ef-90f6c43c9861/1/fxC0ti8U5hbvb-V-zNG4-Bgki6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a7:ef:0c:1a:aa:a1:d1:37:98:61:83:e7:4e:63:fc:61:5b:
c7:54:c9:01:cf:91:d8:3e:6d:1c:db:a4:b8:58:16:e9:4e:2f:
6a:55:f3:47:5f:c2:0f:85:12:d3:8f:d3:60:1c:fa:0a:43:5f:
b8:0a:62:20:43:24:62:8f:88:e5:9d:03:f3:5a:32:fb:67:27:
25:68:bb:30:6d:a0:84:fb:20:25:2c:f2:5e:42:ab:63:fc:aa:
f2:4a:94:07:85:8d:f3:d4:97:05:9d:63:d0:4b:db:84:01:f1:
1b:0a:c5:ce:27:90:a6:63:16:ae:ca:4e:0f:1f:2d:00:45:60:
2f:07:c6:93:ec:75:e8:d8:0c:63:87:98:89:b5:70:14:70:bc:
71:f2:1f:03:1a:cb:97:c4:25:37:15:9c:39:00:ff:8e:f1:9c:
22:a5:c1:b5:72:70:5e:f0:bd:b3:87:b5:f8:0d:3a:dd:7b:d0:
43:fc:64:79:c4:ee:83:c4:af:3c:81:81:34:d1:50:8c:37:9e:
fe:fb:97:af:a0:5c:eb:c3:6d:ed:6d:5e:e5:79:23:c2:c6:48:
10:16:ac:60:a1:e5:03:da:36:42:25:45:6c:f5:a2:ef:e0:36:
5f:b3:c7:bf:45:e1:f0:57:2e:d6:f4:f2:4b:dc:bf:c7:3b:2b:
c2:49:dc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:31 2026 by rpki-client