Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
File: fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft (raw, json)
Hash identifier: AU7BnTVM38epkoBlWk0kzeevKY1e9BjisksYadOBzp8=
Subject key identifier: 3F:C7:6C:E4:D1:5D:95:36:46:FA:70:75:E4:04:16:3A:51:1A:F4:F8
Authority key identifier: 7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
Certificate issuer: /CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Certificate serial: 019D265F29ADEA03EBBFF773AE67F0C568FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
Manifest number: 016D
Signing time: Wed 25 Mar 2026 19:01:03 +0000
Manifest this update: Wed 25 Mar 2026 19:01:03 +0000
Manifest next update: Thu 26 Mar 2026 19:01:03 +0000
Files and hashes: 1: 1-DzzhuQacybavI0JEFJ_Pxy7kt4.roa (hash: uRHVp/iNbMxJaaaPObGWSNEIFbTXLqpiK+JCvtnSoQ4=)
2: fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl (hash: O9WlZdOK9/no64gGTezNcWHzHVXSBnTpYJFALGRdZ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:29:ad:ea:03:eb:bf:f7:73:ae:67:f0:c5:68:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Validity
Not Before: Mar 25 19:01:03 2026 GMT
Not After : Mar 26 19:01:03 2026 GMT
Subject: CN=3fc76ce4d15d953646fa7075e404163a511af4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:73:0e:4e:a0:9d:bb:ab:c8:3d:d6:3b:18:
7c:98:87:7c:e8:d9:fb:6f:05:2c:94:33:9b:39:64:
24:ac:01:4c:a8:79:b6:aa:d1:5e:c8:0a:d5:36:d2:
1f:8c:e9:b6:5f:a0:19:60:68:44:a9:8e:d2:6b:7c:
1d:a5:5e:e9:07:b7:97:d0:24:ed:3e:1a:9c:59:79:
48:dd:74:d4:67:e7:01:ca:b5:6b:61:91:b6:d0:12:
ed:2f:ed:6f:6a:a2:27:c7:43:6f:1a:0f:83:01:98:
b0:c1:42:5c:ab:3f:8b:36:23:e6:55:0f:a3:4b:8f:
e0:38:3c:be:8d:e8:3d:aa:7d:3d:fb:98:70:e0:d8:
a5:b0:46:07:24:2e:db:62:f1:27:88:8b:28:ce:f8:
92:08:4e:08:f9:d0:57:f5:b8:fd:3d:19:df:76:b5:
e8:c6:9a:0b:92:db:3d:24:c0:79:4d:b5:90:6e:8e:
9f:5d:cf:3c:63:a8:5d:27:11:ed:f9:99:1c:a2:bc:
39:36:20:c8:dc:74:5f:ea:95:2c:8e:f6:5c:12:e6:
16:f6:be:bc:ac:a7:66:10:83:12:60:66:bb:30:03:
c1:48:b5:73:ff:eb:78:3f:47:5b:86:41:14:d5:4b:
f4:e0:42:fa:17:2d:8a:28:4c:ea:c9:af:66:f5:24:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C7:6C:E4:D1:5D:95:36:46:FA:70:75:E4:04:16:3A:51:1A:F4:F8
X509v3 Authority Key Identifier:
keyid:7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1f:89:52:a6:a7:b9:95:8a:fd:ab:76:eb:4e:1b:c8:67:29:
6d:38:79:58:d8:45:bf:dc:f2:09:fa:af:1b:9f:ab:a9:0b:66:
5d:65:18:0d:dc:f9:e4:b0:ca:d2:e5:31:e7:ba:d5:a8:1d:99:
97:11:e6:8e:5b:e3:b7:6b:51:71:00:8f:02:c3:19:5e:e0:b4:
99:c5:8c:c7:2b:25:8a:cf:44:f6:58:8e:e9:18:10:02:3d:6f:
19:03:52:43:1f:58:ac:8a:1a:ed:f7:2a:f4:cd:33:f1:47:f7:
16:fc:71:40:09:40:9a:96:85:32:25:20:ef:67:d2:98:3a:eb:
23:82:2e:9a:83:18:c0:ec:99:ee:87:6a:a7:80:fa:10:7b:2f:
d7:5f:3e:15:44:71:1c:fb:50:f4:12:05:79:de:2e:26:80:30:
bc:0b:72:c8:31:bb:8d:02:ab:67:d4:44:c7:ae:d3:a4:61:1e:
d2:a7:3f:d3:fa:8e:69:83:73:e0:ee:a8:b9:49:83:1f:08:a4:
b8:e9:2b:42:d6:67:41:e2:8f:9b:0c:5e:82:02:48:9c:c3:ec:
8f:6f:e7:aa:06:c9:46:8e:5d:b8:c9:82:7a:44:8d:0c:52:0f:
f0:ed:8f:35:3d:b3:97:92:f9:fe:cc:a8:7b:32:22:ea:0c:4d:
5e:7e:8f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:40 2026 by rpki-client