Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: eLz0KDPk3lPuGqzEIUw7SK0MFvEX4gb/I8VBTwSMtEQ=
Subject key identifier: 27:12:96:7C:01:CB:5E:86:25:DD:0C:A0:C2:82:CD:42:62:EC:72:DE
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 019D29CEA95779EC4EB63B4BF3FFF3EF8465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 1231
Signing time: Thu 26 Mar 2026 11:01:42 +0000
Manifest this update: Thu 26 Mar 2026 11:01:42 +0000
Manifest next update: Fri 27 Mar 2026 11:01:42 +0000
Files and hashes: 1: OGNMh9luEfhWYSfkuTxUdvEw3T0.roa (hash: W+Y0DYRWsQtmVscqd/FelKkUl50HuhEP05K5AvhVU6w=)
2: _wcSqPRV5JgTozaPPAply-Zy5SI.roa (hash: kaddq5Zo4l9c0eBW6a1M05v2cAL5RJlZmJFBmkNxnmk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: 3isgQJXZxvGwF5KW2VDVv1cMQ2JmuIqC97Ctb+z6b0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:a9:57:79:ec:4e:b6:3b:4b:f3:ff:f3:ef:84:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Mar 26 11:01:42 2026 GMT
Not After : Mar 27 11:01:42 2026 GMT
Subject: CN=2712967c01cb5e8625dd0ca0c282cd4262ec72de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:6f:d0:67:62:96:f7:29:23:4a:c3:7b:90:
f1:e1:73:8c:87:bc:90:ab:ac:ca:14:ef:e4:db:9c:
e9:22:e7:10:6d:cd:15:a5:3a:d9:b5:d0:aa:41:f7:
f0:6f:25:ac:21:8b:b5:e1:2c:37:17:1a:14:c6:a1:
93:68:12:8b:72:1d:79:91:16:1c:a9:2c:fb:32:7a:
19:6e:66:f0:d0:2b:db:3a:af:90:b3:b0:19:3f:8e:
8b:7e:44:fc:46:58:a8:e7:ca:0e:e2:78:ee:82:1d:
05:bd:bb:5d:e9:09:92:22:f1:f5:0b:1b:67:85:c3:
76:3f:fc:36:93:6f:22:79:9e:f6:26:d5:15:f3:d1:
e4:3a:1f:be:68:eb:81:c1:04:ca:4c:3c:48:0b:75:
bb:39:c7:4d:cb:56:5e:c2:60:59:6d:1c:e5:4c:aa:
5f:c0:7d:b8:8a:f7:02:12:56:81:89:89:e3:df:4d:
17:cd:6b:06:84:06:02:11:25:66:dd:f9:5d:7f:e1:
75:ce:eb:1b:da:35:0d:88:46:a5:29:b7:ab:d3:3b:
16:ee:82:da:08:5d:a9:1e:0e:64:f8:86:bf:6e:63:
c4:ad:d0:e5:af:21:cf:2e:86:42:fd:52:ea:c2:22:
9c:27:46:f4:16:d9:f1:dd:f8:a4:12:f5:1f:99:37:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:96:7C:01:CB:5E:86:25:DD:0C:A0:C2:82:CD:42:62:EC:72:DE
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f1:8b:0e:3e:61:81:ce:a6:25:4b:e2:e3:87:fd:1c:04:e5:
2c:4f:ec:0a:13:5c:ad:89:35:a5:9f:be:48:0a:06:2d:79:9c:
33:ae:4a:3c:52:15:06:84:21:d2:01:52:30:74:28:b7:c1:f1:
c5:62:91:8c:f2:d7:35:17:76:d4:43:1e:5e:7e:5b:3d:cf:09:
50:6f:cb:12:8f:47:e9:87:fd:bc:4d:1a:79:c8:46:5e:ad:66:
8c:0c:99:77:79:e7:b7:54:cc:95:ef:87:0e:ad:5b:2f:a2:0d:
3b:a7:9b:19:bf:d0:a1:be:2f:71:a5:c2:53:e7:30:2c:74:6a:
1f:ae:9b:d0:84:9a:5b:b0:65:35:23:f0:a8:0a:b0:a5:ca:ae:
aa:b2:2d:f7:40:3f:a0:7a:24:a3:21:58:a5:0e:a4:63:30:ff:
a5:a7:7a:74:54:25:c2:49:4f:31:6f:98:5e:a8:d6:2e:42:c0:
8b:16:78:c5:cd:b5:60:6e:f7:5b:97:81:f3:10:45:d1:c4:37:
5b:49:a7:e2:0f:b4:45:55:79:b5:f3:c4:3d:45:34:72:ed:c5:
c1:f7:f6:ef:d5:3e:30:b4:41:6c:71:ae:82:fe:ab:67:d1:64:
4d:9e:45:1b:24:cf:36:ec:4a:f7:e9:42:6d:84:93:92:43:d8:
70:89:36:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:42 2026 by rpki-client