Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier: RP2FBJwR+wa14XCxccQ+Bt/FkpnsRiBlZoptMfCygQs=
Subject key identifier: 4C:89:98:23:B2:44:DC:6E:47:D8:5A:8B:58:8F:08:A5:BE:59:12:F4
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial: 019D2960C220E701883F17BAC4534610F467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number: 0D12
Signing time: Thu 26 Mar 2026 09:01:40 +0000
Manifest this update: Thu 26 Mar 2026 09:01:40 +0000
Manifest next update: Fri 27 Mar 2026 09:01:40 +0000
Files and hashes: 1: Yc6S2U-P88_n_iZTloXSN0V0Eao.roa (hash: AY1UxXU5qK5SakiZ4km0VoIyNHZTCKedI3Fo2P7nvNY=)
2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: Ksg6t6ceFrzabxfQ+ew8287cTA/uP1kBz8U8gxzJPls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c2:20:e7:01:88:3f:17:ba:c4:53:46:10:f4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Validity
Not Before: Mar 26 09:01:40 2026 GMT
Not After : Mar 27 09:01:40 2026 GMT
Subject: CN=4c899823b244dc6e47d85a8b588f08a5be5912f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:44:aa:c7:08:e1:3c:25:c4:a8:35:20:a0:
0f:92:c9:7c:17:25:61:97:ef:fd:ec:25:2e:d5:9c:
0d:bd:3f:c9:ea:2c:67:7c:28:02:09:de:69:46:76:
f4:ed:ab:39:d4:78:86:e7:e1:80:8b:dc:30:8c:63:
b8:ad:29:10:01:13:9c:aa:d2:55:3b:de:7d:59:b9:
b3:e8:56:42:b3:dc:e0:3f:70:eb:46:29:2d:69:c0:
56:c1:12:c6:15:3d:26:7e:40:f1:8c:71:0e:40:f4:
46:f2:83:69:cb:26:cd:e8:48:d1:9a:0f:a9:c7:52:
7e:25:6a:45:7e:b9:b6:ff:b2:24:54:04:f2:b1:4b:
fe:4c:4f:f0:4b:4e:d1:a1:87:0f:41:a3:e8:1e:95:
5c:81:09:60:0f:f3:6a:98:59:8f:78:c0:8e:ea:c0:
77:0a:4c:b9:68:ac:b2:fe:a4:c1:a3:ca:a5:d7:82:
9c:55:87:eb:48:e4:82:7c:f3:77:c8:f2:af:f8:f2:
f2:ef:6b:bf:71:80:0b:07:16:6b:e6:7a:a9:d0:0a:
90:04:41:81:fb:56:27:70:68:fc:1f:db:1b:35:85:
9d:68:b0:97:9f:98:14:a5:a1:d8:67:1a:21:06:88:
f4:d6:8d:13:fa:dc:f9:f1:f8:0f:86:dc:80:8e:fe:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:98:23:B2:44:DC:6E:47:D8:5A:8B:58:8F:08:A5:BE:59:12:F4
X509v3 Authority Key Identifier:
keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c6:20:99:3d:10:6e:ed:15:16:6a:a3:51:b5:d3:21:83:08:
7a:28:a8:bb:ec:a9:53:50:50:b8:ed:76:e4:d7:bd:38:8d:3e:
93:47:76:e2:17:87:4a:72:85:fc:a2:ec:93:d3:3e:2d:2a:c9:
fa:44:4f:d4:65:eb:71:bc:64:6b:75:c9:f5:9a:ba:03:4d:5c:
05:15:a5:19:18:63:f6:7f:66:75:df:fe:cf:12:82:ef:b8:9c:
4f:f8:87:3c:eb:cf:9d:79:fe:d2:26:cc:b1:f0:60:31:95:8d:
8f:c9:f4:c7:b2:70:01:87:a6:dd:9c:7f:a7:98:b4:0f:dc:38:
fb:20:f8:cb:24:d8:a4:0a:3a:87:58:ae:b2:6f:26:49:40:60:
e0:a8:97:fa:9f:98:eb:2c:b6:67:e5:5c:49:04:63:bc:b2:db:
34:ec:4c:06:cf:21:dd:17:ff:e5:ac:10:3d:80:95:1d:85:72:
4b:bb:8e:33:95:96:1e:9b:bd:7f:ef:05:b6:9e:b5:22:8f:68:
9e:93:1a:bf:a5:d5:7f:df:90:62:d6:92:43:11:a9:31:c4:ed:
65:c8:3d:7b:02:bd:a8:e1:c4:38:b5:72:5b:af:1a:6a:46:8b:
8b:57:f2:4f:c0:5e:6f:43:65:7c:99:b3:9c:3c:6e:a4:fd:6a:
ad:5e:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:19 2026 by rpki-client