Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: L/XQmIWq70/FawuZvTzBrnseD5M8lsVutHnL49JhybM=
Subject key identifier: F5:3A:77:4B:89:6B:79:5C:E6:4C:74:68:9A:64:5F:73:2F:A3:84:29
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019D2BBC22DC3B4BAB364AF6E55409A1B67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 20:00:43 +0000
Manifest this update: Thu 26 Mar 2026 20:00:43 +0000
Manifest next update: Fri 27 Mar 2026 20:00:43 +0000
Files and hashes: 1: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: rgWOq6QNr6EnDKh+DRH1jg97ZSHy3gPb8dpN5HSpSqo=)
2: gFOjbWB7I_w-vrenN-Bunfa99k4.roa (hash: jwgceh/3ITVpquNuTB6w5OIjCduknP3STqxn7Za9hOo=)
3: yDOczuJC_WLHV4Ya3yqTtThAzjc.roa (hash: rUsqBRYV5w6oIt/F9qarEoMetvvYx4/9g1ZMzy8MePc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:22:dc:3b:4b:ab:36:4a:f6:e5:54:09:a1:b6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Mar 26 20:00:43 2026 GMT
Not After : Mar 27 20:00:43 2026 GMT
Subject: CN=f53a774b896b795ce64c74689a645f732fa38429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:f2:b8:30:be:92:69:0b:93:a6:94:dc:b3:
e8:07:13:08:ff:80:50:f9:0b:1d:88:3c:9b:27:60:
3a:ce:39:61:76:c8:20:c5:d1:df:6c:b9:50:22:40:
bf:19:f4:77:1c:f3:0e:10:76:cd:d1:81:1b:bb:e7:
db:42:42:62:0a:c0:10:6b:51:82:30:7b:fb:7b:c4:
43:cf:e2:ac:72:5d:59:6a:1a:c6:9c:66:c6:b3:51:
f3:f7:7d:e1:be:4c:f2:68:ea:79:ce:b6:cf:49:85:
6b:ee:24:41:96:f5:39:c8:13:5d:fc:18:12:e3:4c:
1f:37:c3:9d:81:c6:a2:fa:d3:d6:f3:b2:1c:95:e7:
20:f7:0e:fa:8f:03:62:f9:03:8d:81:48:ec:08:5c:
37:45:19:07:37:3d:5c:30:97:12:cb:5a:db:86:f1:
ae:d6:93:4e:e4:ac:ac:be:0b:0f:11:3a:40:9e:1b:
8e:c5:72:94:73:44:94:62:63:22:22:1c:76:97:6d:
ca:9b:84:dd:be:cc:9c:11:25:16:a4:1a:6f:66:ed:
60:c0:42:a1:cd:44:68:73:81:91:38:8c:70:72:c6:
79:f9:86:2a:44:05:00:83:35:54:72:dd:ff:00:f9:
09:7b:74:7d:14:b2:2f:89:8b:dd:eb:69:1b:28:12:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:77:4B:89:6B:79:5C:E6:4C:74:68:9A:64:5F:73:2F:A3:84:29
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8d:e8:c6:1b:16:64:10:60:b4:a4:df:ed:8f:49:9d:b5:73:
e5:11:fd:34:8f:e3:0b:a0:c3:7f:e9:e2:43:61:4f:41:87:e3:
7c:ba:cb:4f:6a:68:9e:57:cb:24:78:11:ce:22:e2:1a:c7:36:
6a:8d:b0:4e:37:6c:cf:a7:58:ea:72:58:f6:cf:f7:3b:1b:2f:
a7:c0:25:ea:d8:69:52:66:ce:6b:05:3a:35:ff:1f:a7:46:80:
ff:f5:18:bf:11:6c:a4:2b:23:06:9e:9e:e6:96:5f:86:46:95:
48:fc:24:ef:3f:de:6d:1c:e9:24:f2:3b:e7:34:77:1e:10:fe:
b5:55:12:77:c4:dd:a8:25:51:de:f9:1f:e2:06:57:72:e4:97:
f9:cc:2b:b7:e2:99:0e:e5:8b:9b:c5:6e:db:93:4f:ea:ba:c1:
25:88:2d:40:ee:26:89:4a:cc:22:1a:a8:c7:ce:1a:4b:b4:b5:
1e:35:b7:65:8e:e4:2c:c1:76:13:95:bd:5f:16:2c:a1:d0:6a:
8f:35:41:07:fe:f2:60:23:c2:8d:59:58:c6:86:ee:cf:01:9a:
1e:bf:56:f2:38:79:0c:8b:fa:22:0c:6a:f0:b1:26:71:2a:3a:
d2:50:fd:8d:ac:f3:74:b1:43:2c:3e:ad:25:45:63:77:9c:dc:
3d:69:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:04:22 2026 by rpki-client