Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: YXkN9ZkMV6Hs+1CrmSwpP94GLDnOOlzlJQZVWBqSljQ=
Subject key identifier: 24:5B:62:73:C4:D4:59:AA:CC:77:40:A3:DF:C5:98:25:97:CF:D1:CC
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019D29CE0C1419FB3CFEEBF0A33BAD20CAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 11:01:02 +0000
Manifest this update: Thu 26 Mar 2026 11:01:02 +0000
Manifest next update: Fri 27 Mar 2026 11:01:02 +0000
Files and hashes: 1: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: CasUvNC6yCadu7pLPDyXE1CRfI8Dj+UjkBGFFu1ML7M=)
2: gFOjbWB7I_w-vrenN-Bunfa99k4.roa (hash: jwgceh/3ITVpquNuTB6w5OIjCduknP3STqxn7Za9hOo=)
3: yDOczuJC_WLHV4Ya3yqTtThAzjc.roa (hash: rUsqBRYV5w6oIt/F9qarEoMetvvYx4/9g1ZMzy8MePc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:0c:14:19:fb:3c:fe:eb:f0:a3:3b:ad:20:ca:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Mar 26 11:01:02 2026 GMT
Not After : Mar 27 11:01:02 2026 GMT
Subject: CN=245b6273c4d459aacc7740a3dfc5982597cfd1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:62:8f:95:00:c0:27:d2:a7:27:d2:b0:74:40:
35:28:90:64:ef:89:e3:e9:ba:43:14:a8:6b:36:39:
5e:0f:33:45:e4:74:ce:53:6d:16:62:56:14:1a:c8:
c3:34:02:ab:6a:9f:36:bc:ac:19:80:e8:95:59:24:
f5:f8:75:02:c7:85:ff:07:24:78:88:e1:ab:ff:ad:
30:08:f5:41:b2:02:73:5b:8d:16:05:2d:80:48:34:
f3:aa:d9:81:53:46:c2:6d:2d:d9:5f:11:44:cc:b0:
98:f3:37:15:4d:45:06:94:d1:cd:42:2f:d9:18:33:
46:ff:ff:14:00:03:fe:fd:00:e5:7e:71:ce:d0:c0:
d1:aa:77:dd:70:a9:65:5a:cf:24:b0:66:0b:9f:be:
6f:a8:31:41:a5:73:69:75:e2:64:44:ff:0d:b2:1b:
65:98:d0:b4:a0:9a:1c:1d:6d:20:0f:51:14:6d:9e:
53:65:e8:40:35:bc:8a:b0:5a:89:92:81:84:dd:41:
3f:c2:78:48:3e:5b:24:8e:ba:06:87:48:56:95:1f:
30:4e:59:71:79:f4:fe:a1:f8:76:08:97:fe:12:aa:
f9:84:a1:ff:37:57:56:03:bf:01:f7:53:1d:b9:f5:
a0:9f:30:02:51:b6:c1:a9:a7:db:62:b2:77:c7:de:
cd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5B:62:73:C4:D4:59:AA:CC:77:40:A3:DF:C5:98:25:97:CF:D1:CC
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:22:2d:07:04:70:f0:d2:d9:d4:9d:53:46:00:10:7f:3d:5b:
d3:24:79:fc:7d:e2:bf:c7:5d:e8:41:b5:59:fb:17:fb:66:df:
6e:5a:70:1b:49:5c:ea:d4:e7:aa:5c:20:7e:79:d4:cc:a7:1f:
04:41:d2:22:68:dd:99:c2:35:c2:62:41:5e:97:54:dc:d9:35:
91:c6:88:2f:9c:d3:00:32:42:6f:a8:8f:45:6b:fe:d6:bc:de:
07:71:57:62:8c:00:d0:0a:b6:60:7d:b8:ae:6b:9e:ed:c6:ec:
df:c9:a9:92:eb:ab:16:66:ae:5a:6f:9c:cd:ed:ec:d8:ff:59:
bf:e1:6f:30:c7:6e:99:27:ae:70:25:32:dd:e9:ee:e2:c4:79:
02:34:d4:0d:cf:0b:6b:8e:4d:ea:78:fe:6b:54:dc:49:03:0d:
07:86:77:14:05:9d:06:11:36:d6:97:08:2a:7c:c4:7b:51:8d:
dc:d2:c1:5b:19:69:11:e7:ed:9c:8f:c1:81:16:d2:0f:c3:15:
58:33:ba:fe:5d:c9:88:6e:83:72:78:44:45:84:bb:75:c9:cd:
17:d5:1e:75:84:38:18:79:7e:1c:72:c2:f9:80:17:ca:c3:f9:
a3:80:cd:de:3f:ec:a0:f7:18:3f:f8:f2:1f:16:03:03:11:3f:
c0:2a:1f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:11 2026 by rpki-client