Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
File: fvh727KV4chetLDjVmFTwiGEX4E.mft (raw, json)
Hash identifier: XyrZH5vJnOfCl3SV4vGre25z315SILZF58MHdjaX/18=
Subject key identifier: 28:3C:02:A9:9E:8A:FF:7D:D4:25:C9:E3:5B:FA:B5:26:39:4F:63:3D
Authority key identifier: 7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
Certificate issuer: /CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Certificate serial: 019D2A3C7F6147351D71D355CE644BEC8C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
Manifest number: 03D0
Signing time: Thu 26 Mar 2026 13:01:40 +0000
Manifest this update: Thu 26 Mar 2026 13:01:40 +0000
Manifest next update: Fri 27 Mar 2026 13:01:40 +0000
Files and hashes: 1: 3rus813YuNoFCPm5gVNfCetKB0o.roa (hash: 2Psn64fFe1lFh4gbe2ww6CEoWYkZWI81wssdO4TcKTk=)
2: fvh727KV4chetLDjVmFTwiGEX4E.crl (hash: TNbpCP77gxRyNkQvtScNShpuiWF9mUJAFSp6UPBeYIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:7f:61:47:35:1d:71:d3:55:ce:64:4b:ec:8c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Validity
Not Before: Mar 26 13:01:40 2026 GMT
Not After : Mar 27 13:01:40 2026 GMT
Subject: CN=283c02a99e8aff7dd425c9e35bfab526394f633d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:86:4f:85:c8:df:f1:c3:b6:ef:31:4e:d9:
bd:29:cb:e0:bf:58:21:e4:ec:9a:88:ac:45:c7:30:
87:29:d0:e3:c8:13:01:66:b5:62:8e:54:2c:ac:fb:
bf:1c:e3:44:22:a4:4a:9f:9d:52:6d:98:6b:9b:e0:
0c:b7:84:b6:e7:1d:17:0c:c0:45:9d:b3:2e:99:27:
2e:f8:03:e1:3c:d2:66:1d:8f:db:db:38:f2:73:88:
98:c8:5c:25:b6:af:ae:18:91:63:2c:b0:d0:53:f5:
4b:de:f5:d2:47:4f:ae:b0:5c:2a:8b:0e:50:89:aa:
af:3d:ed:6f:f2:28:f1:19:b3:b2:d0:15:fd:22:7b:
3a:19:5d:81:42:19:32:e3:36:df:1b:2a:b3:96:e6:
13:6d:75:06:86:91:a3:d5:58:4f:e9:a2:c8:1b:69:
11:27:2a:fe:d8:c2:d7:68:3f:32:bb:53:b9:aa:35:
43:71:18:31:02:33:a8:02:c3:e5:89:79:7c:d6:19:
aa:43:5a:53:f3:2d:b7:35:51:cf:44:d5:6f:bc:a8:
52:13:c3:8b:b8:07:51:5c:98:d1:49:13:d3:de:ae:
31:b1:12:a2:2e:af:46:7c:1e:96:98:d5:e1:01:6f:
3d:da:90:fb:45:57:cf:19:88:24:17:d4:0c:0b:b3:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3C:02:A9:9E:8A:FF:7D:D4:25:C9:E3:5B:FA:B5:26:39:4F:63:3D
X509v3 Authority Key Identifier:
keyid:7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:02:ce:38:2c:12:94:ba:89:96:89:e3:04:28:b3:02:3c:b0:
be:49:44:1b:4a:82:b0:36:a5:13:88:ad:e8:26:77:a6:d1:ff:
1f:e5:91:b2:0a:e6:7a:59:3d:3d:c4:7e:70:0d:c3:26:36:25:
29:02:2d:cd:ea:aa:42:ec:26:0f:24:a1:a1:04:50:39:2e:10:
d9:f2:58:18:69:af:00:00:df:99:da:64:fe:17:54:a3:04:ca:
61:82:0c:11:03:c9:f4:3d:2e:2f:55:50:d5:c6:ff:f2:bf:d9:
3d:d5:ec:a0:2e:1e:0e:ec:ba:0c:f0:8d:c1:02:ed:2e:56:92:
0b:e1:57:ef:b8:fb:62:ca:b8:34:a0:fd:76:7b:ec:9d:8c:ed:
94:86:9c:77:9c:fb:3a:18:ba:c3:16:be:61:65:18:c4:25:82:
31:93:b8:11:dd:fc:f1:3e:c3:73:24:01:f6:de:b6:81:33:bf:
1d:25:57:5e:87:d5:32:53:d6:d2:bb:d4:cf:54:fb:a1:cb:62:
b7:68:64:0a:85:13:93:41:94:1c:c5:38:d4:6b:01:ae:b3:49:
3c:3a:00:66:01:02:07:6d:65:b4:5d:30:c5:14:97:69:f4:21:
47:79:93:2e:b4:e0:db:3a:2d:d5:67:09:d7:3a:37:d7:fc:02:
91:62:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:39 2026 by rpki-client