Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft
File: fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft (raw, json)
Hash identifier: mxvUoY6z1uTFuNjdXHl89+AOk3y5a0CIhmhCe5BL2vo=
Subject key identifier: C4:86:6E:C1:A5:62:02:7E:BB:E3:24:0C:1F:83:CC:9F:50:10:E8:D4
Authority key identifier: 7E:39:87:D5:EE:9C:89:3D:47:1E:44:98:56:64:39:71:91:10:3F:7D
Certificate issuer: /CN=7e3987d5ee9c893d471e44985664397191103f7d
Certificate serial: 019D322C40A51E4C978DB92ADDD6D94F06A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmH1e6ciT1HHkSYVmQ5cZEQP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft
Manifest number: 9C
Signing time: Sat 28 Mar 2026 02:00:54 +0000
Manifest this update: Sat 28 Mar 2026 02:00:54 +0000
Manifest next update: Sun 29 Mar 2026 02:00:54 +0000
Files and hashes: 1: fjmH1e6ciT1HHkSYVmQ5cZEQP30.crl (hash: QoBk1RmICh23C0BXpZR73j/Gf/PS2Zg2qf++xT7yBAo=)
2: hiqnGKYGj-WhG8_O9GaEv4rC0GY.roa (hash: 15L8jWjWJZXBu2em4tCUMNmqfpGGdBu7LQHu48MUm7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjmH1e6ciT1HHkSYVmQ5cZEQP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:40:a5:1e:4c:97:8d:b9:2a:dd:d6:d9:4f:06:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3987d5ee9c893d471e44985664397191103f7d
Validity
Not Before: Mar 28 02:00:54 2026 GMT
Not After : Mar 29 02:00:54 2026 GMT
Subject: CN=c4866ec1a562027ebbe3240c1f83cc9f5010e8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d3:25:90:18:d4:36:89:99:0a:cb:aa:01:d4:
a3:5e:e5:fd:2d:81:c1:08:6a:cc:2d:61:c1:7a:51:
06:6f:80:6b:b9:e9:34:53:a2:bd:70:9b:8f:1d:61:
88:3d:e0:dc:d9:0e:ae:1b:95:9c:c7:b3:42:04:60:
c0:6e:cb:fe:39:b5:7e:0a:61:f9:eb:09:5c:cc:d0:
97:aa:d5:5d:65:cb:89:7a:9b:df:f1:01:8a:01:ab:
9d:d4:f9:94:1c:0c:65:8e:e3:a9:da:c3:fb:72:ba:
6c:2c:e7:4d:98:1a:ad:93:91:b5:69:8c:dc:84:7a:
c5:93:74:33:40:56:b9:4c:96:be:78:14:e4:4d:90:
d4:13:4e:ce:54:50:94:93:96:4c:7b:02:6a:11:1a:
93:da:b9:94:07:5a:2f:c9:e0:f0:8e:64:59:9a:93:
f4:55:0f:53:af:15:49:a5:81:66:52:a9:38:62:b3:
f7:2c:a3:a5:cb:a0:84:c6:86:8b:98:56:74:f0:39:
a7:d2:a1:d6:ec:76:48:09:1f:76:85:96:e4:84:89:
f9:7d:25:07:4e:33:19:0e:b9:6b:56:23:4e:7d:9d:
8d:ec:3a:3a:4f:a8:14:c8:00:87:c6:d2:f1:d6:42:
cd:14:00:dd:c0:d7:d5:89:85:87:bb:2f:1c:0b:3d:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:86:6E:C1:A5:62:02:7E:BB:E3:24:0C:1F:83:CC:9F:50:10:E8:D4
X509v3 Authority Key Identifier:
keyid:7E:39:87:D5:EE:9C:89:3D:47:1E:44:98:56:64:39:71:91:10:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmH1e6ciT1HHkSYVmQ5cZEQP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:81:76:6d:38:fe:86:63:d4:1b:89:10:e4:d7:db:ff:53:bd:
60:06:6f:64:e8:19:0e:57:d4:6b:61:07:96:be:56:3a:a3:aa:
ec:03:66:f5:68:ae:4c:41:93:85:7c:4c:5e:5d:76:92:1a:82:
99:40:38:f7:66:2e:9f:12:7d:00:fb:f2:4a:82:e1:fd:ef:25:
a4:53:80:0b:28:22:df:79:d9:d9:ad:04:c8:9a:31:46:45:35:
bb:7f:85:ea:bb:29:53:4d:4f:06:9b:32:ba:a3:7b:d2:1a:ba:
a0:a8:9c:69:98:f7:8e:ee:9d:1f:f3:9c:67:19:83:a6:7b:00:
e7:26:27:91:fc:81:f7:c8:f9:98:91:17:65:2c:12:bd:ed:23:
56:62:58:8c:cf:b2:4b:47:54:76:48:e5:47:fc:b0:e2:f4:b5:
c4:2a:81:b7:54:63:5f:6b:e3:80:7f:b3:13:79:99:55:02:f9:
4c:fe:55:b3:80:db:63:b6:d5:4b:80:f1:e2:c5:2d:70:e7:5d:
62:84:3c:19:28:4e:47:c3:fe:33:19:41:fa:63:ec:10:42:46:
2d:34:e1:02:a0:b1:ed:a9:cc:97:96:c2:e6:ba:83:c1:5b:49:
2a:f6:ce:43:a6:21:a9:9f:e1:95:b1:b3:ed:b7:b7:49:9a:84:
81:c1:5a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:39 2026 by rpki-client