Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
File: fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json)
Hash identifier: o6XI5qlRqY0PboATeMAn4SHaIqc0Wg+ggrFo5faaLiA=
Subject key identifier: CF:ED:21:4C:DB:FC:B5:A4:E9:69:A4:76:02:58:F0:3C:45:9A:94:E7
Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Certificate serial: 019D28BB0E6CAECF141700697FB7A6600C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
Manifest number: 1766
Signing time: Thu 26 Mar 2026 06:00:40 +0000
Manifest this update: Thu 26 Mar 2026 06:00:40 +0000
Manifest next update: Fri 27 Mar 2026 06:00:40 +0000
Files and hashes: 1: 05QJdDPCq2Q_jznqerhgP5BoCxg.roa (hash: gU+YSQWmwa9r8UbcwqPCuU94QjYr5yYj3Kh8Xri7um4=)
2: 1nEI4ofN7-_O7YLfMqtxBcLAnwA.roa (hash: 3NhBeQVEE89mf7lTmcAscd7f117hY++nWIP6cov6PBQ=)
3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: oqqDuL6RH3mvhqdAZz6jdJW6YQG6YhywyNfYgUsog4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0e:6c:ae:cf:14:17:00:69:7f:b7:a6:60:0c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2
Validity
Not Before: Mar 26 06:00:40 2026 GMT
Not After : Mar 27 06:00:40 2026 GMT
Subject: CN=cfed214cdbfcb5a4e969a4760258f03c459a94e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:47:04:ac:73:ce:76:0f:5b:a4:f8:3f:8d:
52:2e:e4:1f:7e:0c:0b:59:26:50:1e:48:64:de:93:
b9:bc:a4:cd:35:fc:30:f0:59:c2:72:85:24:61:c4:
09:b2:29:52:8a:80:90:99:96:0b:72:71:9d:b9:5b:
c8:2a:72:4a:1f:68:08:27:ef:62:34:79:be:f0:66:
99:d6:67:60:f2:eb:3a:b4:ec:e5:23:4b:00:ac:35:
dd:a4:1d:5e:0a:95:48:21:c7:e1:3c:90:6a:9c:cc:
b7:e4:0b:58:24:ef:19:e5:27:aa:a0:38:07:94:f1:
b0:b1:85:dc:b8:f9:8b:b3:be:22:83:f2:4e:fb:9f:
96:d6:5c:e8:9f:a6:29:37:b7:94:00:23:3e:65:f8:
4f:ab:a1:76:5e:02:5d:c9:43:b9:47:a8:3d:e6:2a:
37:15:00:f5:a4:09:86:b1:7b:e2:86:01:f2:42:1d:
72:3b:0b:10:38:68:ec:0d:83:05:48:f2:c5:7f:fc:
de:d1:39:71:0a:98:3d:64:57:70:af:91:27:52:95:
38:2e:b5:d0:c7:8c:48:bd:11:64:84:57:8f:4a:37:
85:ff:52:e5:fd:70:ef:28:0e:e4:85:0b:7a:ab:7e:
aa:bd:d0:a8:95:ba:51:0b:5e:e4:30:dd:81:14:6b:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:ED:21:4C:DB:FC:B5:A4:E9:69:A4:76:02:58:F0:3C:45:9A:94:E7
X509v3 Authority Key Identifier:
keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:83:ff:b6:18:1a:e1:90:c7:fd:c0:5a:42:5e:c1:0b:21:1d:
11:31:d8:fe:4d:72:4e:bd:04:35:15:ac:3a:86:23:96:d0:d4:
72:28:64:80:71:21:d8:32:89:15:90:72:69:df:f1:bd:c5:04:
97:a7:92:62:1b:aa:ef:d1:c7:18:0b:2d:2c:87:82:9c:e3:29:
57:dd:c4:99:54:e5:22:8b:94:99:c3:26:62:c9:8d:a8:1a:5a:
bd:10:7c:67:4e:c7:00:69:97:94:0e:23:a1:2c:27:31:59:04:
61:73:33:1f:01:67:2d:ac:88:fe:13:d5:3d:85:f3:dc:50:49:
46:97:62:ae:f4:96:2c:a1:4f:5d:7f:2b:e8:86:36:b8:58:55:
3f:3b:ed:71:aa:54:52:64:b0:83:06:3f:20:24:ed:bc:d5:b2:
37:df:ed:26:a6:f1:10:62:ef:c6:d5:70:3f:0a:8f:bc:df:ce:
9f:9e:c9:a2:ed:cc:44:0a:1d:19:dc:17:9d:1d:15:57:f1:40:
fd:db:e8:4a:cd:2e:a0:fc:66:99:a8:9e:1f:35:39:f5:9d:82:
dc:8e:d6:fe:20:b9:75:a7:6d:8e:62:7f:69:27:89:9f:12:4d:
f8:dc:64:15:07:eb:67:ca:d7:42:ce:06:0c:cc:61:0d:2d:72:
50:4a:0f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:03 2026 by rpki-client