Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier: i7meeq2WDJyrvjy0dCmjnGi2n4JdIEfzygvTjdjv2yQ=
Subject key identifier: A3:2D:91:4B:87:F9:7B:B7:14:3F:E9:C5:17:E3:B4:AA:DE:87:8D:CA
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 019D29977D03F85EA08BC15EEEFD9FACC4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 10:01:26 +0000
Manifest this update: Thu 26 Mar 2026 10:01:26 +0000
Manifest next update: Fri 27 Mar 2026 10:01:26 +0000
Files and hashes: 1: MGJZDZy48CKe0KFJgl-NtQKce1M.roa (hash: 7o0STbO6YBA8EIAiJhdAaPfZW/eDmWBTpcQhpZ1hTbI=)
2: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: udIAlWwtCm5mxYEtFnTaEaS+Yl/xSWIcU5kZ1whwx5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:7d:03:f8:5e:a0:8b:c1:5e:ee:fd:9f:ac:c4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Mar 26 10:01:26 2026 GMT
Not After : Mar 27 10:01:26 2026 GMT
Subject: CN=a32d914b87f97bb7143fe9c517e3b4aade878dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1a:52:53:9f:8c:1c:db:b9:72:54:07:a9:40:
7c:c9:7d:4c:07:53:42:58:c8:d5:33:0d:68:79:12:
1d:b5:06:91:29:3e:a8:81:a1:ca:41:93:4f:59:91:
26:99:64:67:81:96:7f:c5:5a:3a:b4:0c:4c:92:5e:
4b:4c:cd:a5:f9:41:55:8f:54:a6:2f:3c:db:15:29:
51:c1:ef:c5:b7:96:e7:85:78:8c:c0:35:74:c3:72:
f3:fa:39:66:b7:43:5f:97:fe:fe:27:b4:3d:4f:0e:
0d:6a:17:76:8e:53:c3:e6:11:8c:91:61:8c:07:b3:
16:17:e1:e4:fb:e8:f7:73:f1:1a:55:24:5a:f0:67:
dc:6f:f2:51:4d:74:6b:5f:de:c9:51:ec:fc:5f:fb:
1e:88:17:29:18:88:bc:d6:01:2e:04:1f:65:22:c0:
8a:08:52:88:e8:29:24:29:83:70:ea:1a:fe:52:dd:
89:3d:13:0e:ca:0b:ec:61:0f:1d:07:22:89:43:1b:
a7:e6:4c:4e:21:01:ba:f9:3a:b0:ad:ff:5c:a9:80:
5a:d6:b0:5d:97:99:1d:13:aa:b2:07:6c:4f:8f:ba:
f8:06:8d:19:37:02:37:a4:6b:f4:7e:9f:23:4d:ba:
d2:27:0a:92:4d:3b:46:c4:6f:7d:b2:70:9d:ab:ee:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2D:91:4B:87:F9:7B:B7:14:3F:E9:C5:17:E3:B4:AA:DE:87:8D:CA
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:82:a4:ea:75:31:36:8a:fd:9e:42:06:c9:50:49:df:c2:a8:
2b:fa:3d:52:f4:95:fb:0d:e1:32:25:23:c7:cb:f7:98:22:f5:
04:fc:a4:bc:ae:f3:c9:8e:12:b4:4a:d0:72:41:47:b2:01:5d:
f0:aa:9e:c5:14:af:1c:02:76:6d:1f:97:b3:7d:93:8c:c9:c3:
ee:9b:ae:5e:62:42:2d:50:f0:6b:93:ec:64:32:98:f6:33:e6:
04:5d:6d:30:6c:3a:be:e5:3b:de:c4:e6:3e:dd:8c:12:2a:fb:
b7:04:de:f8:82:33:8c:3d:03:8f:78:14:38:c8:f5:b3:38:7d:
62:87:bc:5b:9b:69:c3:1b:b3:05:63:bd:c4:4c:b4:2e:0b:57:
fa:1e:d3:dc:6e:4f:d8:0a:9e:c5:4c:11:d4:8e:cd:64:12:64:
b7:b0:fb:1b:13:fd:7e:e5:90:f2:9e:52:6c:22:e7:ca:f4:7a:
7b:3d:87:28:3d:cd:25:b1:a9:a7:26:08:51:5b:58:b1:64:6d:
c9:f5:3e:e9:f4:aa:71:f2:7d:b9:74:f0:06:a8:c7:72:8a:48:
78:43:66:da:75:9a:6f:a2:59:d4:bf:82:a8:8c:61:12:98:56:
fa:0d:ee:0a:43:33:07:84:05:d4:d6:db:59:56:45:15:c9:ca:
8e:4b:e2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:27:54 2026 by rpki-client