Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: qp5AJVieDTvpPSvYtU3gHdR8JHoC4qeHs6n6OEW/s68=
Subject key identifier: 07:B4:7E:67:12:88:1F:63:9F:C9:12:93:2E:58:70:93:27:7C:65:82
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 019D2771B82402FEBB36C62B8129EDC789E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0DBC
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: 86U4rZ2dhWPqLqQMBc7EZqjApSH1Uk7DkZju1vOqi48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:b8:24:02:fe:bb:36:c6:2b:81:29:ed:c7:89:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=07b47e6712881f639fc912932e587093277c6582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:dd:43:ca:6a:cc:89:64:9e:1a:a2:14:b1:
44:d7:6b:1a:47:ed:85:bd:42:1f:32:45:80:4c:0a:
14:25:4d:f4:04:04:55:de:59:a7:e5:5f:63:bd:f3:
87:29:4a:fa:8d:c4:c6:23:ee:a8:f6:3a:d6:e2:26:
69:43:a1:8f:0f:6c:7d:26:7c:af:25:a4:de:96:a3:
62:e4:d6:85:ef:6a:13:8e:c5:33:9b:b0:6f:1a:8e:
7d:d4:b4:f4:79:55:a2:e5:b5:80:1d:ee:75:5f:6a:
3b:ec:c0:ce:a8:dc:6f:ad:43:b3:5c:91:b7:90:40:
4d:98:f3:3d:d2:e4:59:92:4f:d3:0d:e5:83:2b:dd:
12:23:18:cd:a7:93:3d:44:f3:d3:89:c6:e1:be:87:
e2:59:a9:bf:72:fd:8c:90:36:42:23:93:08:8f:aa:
a8:bb:85:71:25:0a:32:9b:f5:ac:d4:03:cd:0a:d2:
cc:bb:74:96:1d:e7:d8:66:7a:55:40:79:63:ac:f2:
94:89:6d:46:6f:a8:9f:7e:cd:dd:f2:c9:0e:ce:69:
db:91:0d:02:12:82:f0:76:b4:9e:63:54:3f:5a:31:
05:41:06:f0:c1:c7:6d:98:49:70:a3:07:cb:4f:8c:
e8:c2:9d:20:55:26:33:44:81:ac:5e:1c:22:f9:78:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B4:7E:67:12:88:1F:63:9F:C9:12:93:2E:58:70:93:27:7C:65:82
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3c:d6:0c:22:a0:67:b2:b1:db:c0:c6:8e:d9:49:f4:d4:fd:
07:24:aa:3b:99:cd:14:30:55:66:8a:e7:6d:0e:5c:cf:f2:ef:
29:3c:3a:d1:90:90:00:3d:f4:3b:2a:b8:1f:05:75:c8:ed:03:
b6:98:c0:6f:f7:a8:9f:c5:db:91:98:3f:6e:b3:40:11:6a:b7:
9e:4f:94:64:31:db:0c:48:15:53:97:40:9e:64:a6:bf:f8:85:
fa:fb:03:69:9f:a1:09:b4:1a:03:9c:19:8d:a4:4c:ea:71:76:
e6:56:f5:8e:60:12:f5:de:b3:7d:9a:66:4a:9c:21:b5:13:70:
51:5e:ba:d4:58:69:bf:fe:1b:09:04:e0:42:33:0c:18:eb:06:
c0:ef:20:9a:7e:a3:9c:b9:80:5f:1c:93:a4:7f:4c:bf:40:8f:
3f:12:d1:f0:6c:c5:6d:bd:1d:87:dd:bf:98:3e:7d:1c:b7:50:
9c:f6:a8:65:95:2b:7c:8e:26:85:49:40:a4:2c:1a:6d:e6:da:
f7:aa:b9:cd:79:14:58:4a:1b:f1:b7:01:40:47:67:7d:58:e7:
ef:c5:cb:b9:33:fa:67:3a:55:4e:7e:b1:97:d7:fa:99:a1:93:
7e:81:94:d0:e0:75:54:09:20:97:ce:5e:e3:cf:fe:ed:e0:14:
40:47:8a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:19 2026 by rpki-client