Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: iOJoVsz1H/pCtnIzUNRLJKp9XzKmcSivu/1nC12CGec=
Subject key identifier: 9C:85:E1:2F:CA:41:4B:2F:5D:63:2A:EF:C7:92:FC:7C:34:D5:07:45
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 019E21DAAA6C9A5F35E529D0CCB7D56CC581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 11E1
Signing time: Wed 13 May 2026 15:00:39 +0000
Manifest this update: Wed 13 May 2026 15:00:39 +0000
Manifest next update: Thu 14 May 2026 15:00:39 +0000
Files and hashes: 1: MSIj_pvmmWV611TPzznzhVyMajg.roa (hash: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: rwXzkzH4zyR2dGb+CBzSo8cFu258Rg7idd2cL0UGfQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:da:aa:6c:9a:5f:35:e5:29:d0:cc:b7:d5:6c:c5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: May 13 15:00:39 2026 GMT
Not After : May 14 15:00:39 2026 GMT
Subject: CN=9c85e12fca414b2f5d632aefc792fc7c34d50745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ef:69:42:11:61:e6:78:61:81:58:c8:2a:f9:
43:f1:c3:17:1f:b1:7e:61:77:0b:97:18:b1:e6:1c:
14:66:ea:aa:01:a3:78:92:ce:4a:de:25:53:80:83:
a6:9e:9d:c8:60:82:ae:ca:a0:b2:cb:2d:7c:fe:dd:
40:76:a1:a1:83:48:4c:34:d4:ca:86:af:b7:b9:6c:
75:20:8c:5c:f5:68:d8:d5:a2:2a:c3:42:0d:21:21:
65:49:5c:7e:cc:3a:ee:f0:1b:dd:39:6d:24:db:5a:
dc:5d:9d:33:a2:eb:69:17:1d:5e:90:3e:25:a6:ad:
97:ca:fd:92:3e:9d:f5:e7:07:9f:22:f1:a3:46:03:
1d:cb:cd:92:69:a5:61:83:75:31:46:82:b4:1f:17:
50:b1:df:1c:30:bb:a3:d9:51:c5:05:05:cf:0a:2b:
19:6b:58:03:93:18:03:79:3c:d4:c9:30:42:20:35:
76:5d:e1:c7:d6:87:99:e7:5b:32:fa:b9:08:f0:6b:
97:9c:f6:dd:84:c9:f0:b6:d1:c2:c3:96:8c:cb:3e:
bb:3e:eb:ff:5a:e2:34:51:dc:3c:9c:ab:bd:3e:69:
ad:38:ef:ee:e1:bd:75:7b:7e:b2:bc:4f:22:32:25:
fd:57:39:23:34:b2:3d:ab:08:86:4c:a8:ab:48:b3:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:85:E1:2F:CA:41:4B:2F:5D:63:2A:EF:C7:92:FC:7C:34:D5:07:45
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:70:7b:eb:16:e2:bf:d9:65:78:8a:3f:72:89:3c:7d:2f:57:
7a:11:57:45:ef:b1:8c:c6:95:ba:f6:3c:3d:36:32:7e:dc:36:
c2:8a:9a:6b:86:4c:75:3d:78:6c:8f:d5:67:bd:1e:91:3a:a1:
de:12:92:fb:e0:05:be:f0:1e:b0:3e:a5:ab:71:10:31:61:b0:
88:da:85:df:af:fe:52:c2:7f:ad:7e:ac:aa:42:b8:60:00:6c:
ee:4f:69:59:90:f4:06:b6:27:1c:02:2a:46:77:14:70:81:17:
76:6f:c0:1b:57:c8:fd:2b:0c:03:86:59:68:ee:8f:b1:fe:72:
2b:81:54:af:36:b7:91:be:da:7f:f6:76:ef:0b:a1:fe:e3:38:
0b:03:52:7d:58:03:d4:3c:a4:fb:dc:ea:37:74:7a:a5:e1:bd:
73:58:b5:7d:21:bb:a4:ac:06:8e:32:64:8c:7d:cb:1a:e7:4e:
19:05:ca:15:fb:b7:e8:7b:24:42:b1:15:08:fd:64:30:4c:60:
1f:57:fd:52:63:c6:9b:5f:c3:18:e6:94:ab:2a:19:a6:79:fe:
ee:5a:cf:3c:04:29:43:91:1b:30:fd:27:48:3b:15:80:5b:d7:
85:81:1f:20:ce:cc:7d:68:1c:b5:87:3f:14:71:f0:a9:7a:47:
8f:40:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:10:08 2026 by rpki-client