Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: F0DCRlpCKnt09tS19mOxHJaJVLXqlOBQn/ovoX/3jtw=
Subject key identifier: 3F:AC:06:66:39:60:E2:5A:0B:78:DE:6E:50:64:8A:A7:98:8B:48:CE
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 019D2B4EAB490D5D612DE3B7ECAD8C522484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 12B0
Signing time: Thu 26 Mar 2026 18:01:09 +0000
Manifest this update: Thu 26 Mar 2026 18:01:09 +0000
Manifest next update: Fri 27 Mar 2026 18:01:09 +0000
Files and hashes: 1: M39X3O93meXiYEZMdDY1T4wsyVE.roa (hash: eG1u14rPe8MIz7sm8dVuxE9spwX9dFAUZNpT/Ys6fi4=)
2: f95OM8NcoOZXSRzDeGxPVA2Zw_o.roa (hash: 1YBKV57aXgzHn2Rt1P5Y2ZBSmwKVR2wirj1B4cjqRz4=)
3: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: oPQJ+PCIAElu6hfhiQjbzMXHY46q5LDLI5g/HmriGvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:ab:49:0d:5d:61:2d:e3:b7:ec:ad:8c:52:24:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Mar 26 18:01:09 2026 GMT
Not After : Mar 27 18:01:09 2026 GMT
Subject: CN=3fac06663960e25a0b78de6e50648aa7988b48ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:fb:25:83:0d:20:6d:cb:eb:80:86:f9:a1:
9b:00:11:db:16:89:32:cd:32:82:39:db:5b:90:31:
3e:a3:0d:18:4b:c2:7f:3e:4a:de:3c:0e:c4:1e:a9:
a6:78:f5:0f:b3:b5:45:54:9f:d7:94:06:55:07:0e:
ab:7d:3b:cd:b4:95:7d:d0:74:c2:8c:76:a9:db:41:
6a:7f:17:ae:0d:2d:48:73:3f:81:5a:51:4b:19:1a:
a4:da:ae:b8:a9:0c:94:8b:c8:af:fb:db:c8:e7:ac:
de:cb:90:b3:92:7d:e9:bb:49:e0:17:36:fe:f4:df:
b5:d4:9d:07:01:6a:f7:74:4f:36:0a:19:38:aa:42:
51:90:64:c7:85:a4:9b:72:0f:e0:50:1b:b1:0b:ed:
7b:a7:67:7d:84:db:13:79:1b:09:ed:ee:7d:43:40:
36:5a:29:a4:28:b9:7c:6f:7d:ab:9f:8b:5a:ac:92:
8c:b1:76:23:24:98:2c:a3:6d:75:1b:6e:1d:44:a1:
ec:df:72:2c:00:3b:c5:5a:32:3a:43:3d:0a:4e:8f:
bd:09:d5:96:79:2b:25:9f:4c:2f:d7:70:be:35:8c:
b8:85:7f:20:7a:aa:40:75:f5:c0:4d:04:b6:bc:9e:
2e:5e:11:89:13:7b:2b:38:58:b1:46:48:28:1e:80:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AC:06:66:39:60:E2:5A:0B:78:DE:6E:50:64:8A:A7:98:8B:48:CE
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:97:54:28:4c:99:d3:97:a1:74:e8:dd:7e:be:9f:b7:f2:5e:
77:d3:c3:41:b4:3e:86:25:14:59:55:fc:27:ee:65:b2:ad:af:
f7:36:95:56:6a:13:5e:2d:7d:d8:8c:44:c9:75:36:2f:bf:35:
f6:3a:be:56:d2:93:86:5e:c7:a6:fe:84:23:d6:ae:23:e5:c4:
b2:aa:58:90:20:0f:48:78:9b:52:8e:e2:cc:4b:e0:d4:ca:68:
80:ad:89:f7:8f:a8:11:c5:56:9b:ba:7e:08:86:5a:ae:e6:7f:
cc:cb:9f:02:bf:20:6f:fe:82:5e:a8:21:22:c4:35:92:db:8e:
48:a5:7b:7d:b6:9d:99:b9:20:cd:4a:db:47:d5:ac:e8:40:73:
46:62:de:cb:b2:0d:50:c2:c1:6f:b1:30:e5:4c:f0:e0:6a:b6:
bb:15:7e:73:34:de:48:db:d1:87:a1:29:db:de:fb:35:db:93:
a3:49:9a:41:80:4a:cd:ca:3d:eb:bf:10:f6:38:7a:86:7c:49:
ca:3a:86:9f:4f:06:81:bc:71:69:92:bf:61:e5:c3:40:e8:59:
6a:93:55:4e:f5:0c:f0:9f:c5:d5:8c:91:f6:80:c2:8a:9d:04:
b7:59:3c:35:cd:13:84:e7:fc:88:26:8a:ce:a3:75:ec:43:40:
82:44:f1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:22:57 2026 by rpki-client