Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft
File: fHwxHo7uu82iiQYtY6wOLtYdsd8.mft (raw, json)
Hash identifier: MgxFiFaG1VIQO5dC8W12Y3Oy8whDMb8DOpyGRgamVdY=
Subject key identifier: 18:56:5A:A1:65:29:77:8C:58:FB:A3:9C:1D:6A:80:E0:89:68:10:C2
Authority key identifier: 7C:7C:31:1E:8E:EE:BB:CD:A2:89:06:2D:63:AC:0E:2E:D6:1D:B1:DF
Certificate issuer: /CN=7c7c311e8eeebbcda289062d63ac0e2ed61db1df
Certificate serial: 019D28F24A40FD3C552F75BE2498EB7F944B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft
Manifest number: 012D
Signing time: Thu 26 Mar 2026 07:01:00 +0000
Manifest this update: Thu 26 Mar 2026 07:01:00 +0000
Manifest next update: Fri 27 Mar 2026 07:01:00 +0000
Files and hashes: 1: fHwxHo7uu82iiQYtY6wOLtYdsd8.crl (hash: uWyViiHoPiNYQTpCqpkeV9Q4CLrFChZ7YcI9zxWV9jY=)
2: pdv56zaEJ9mRbrRBEwgNZcGH6CY.roa (hash: nBOAy5CPDcItDwXemTNgV+jnGvA8HHTlGKSlk/4UJ2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:4a:40:fd:3c:55:2f:75:be:24:98:eb:7f:94:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c311e8eeebbcda289062d63ac0e2ed61db1df
Validity
Not Before: Mar 26 07:01:00 2026 GMT
Not After : Mar 27 07:01:00 2026 GMT
Subject: CN=18565aa16529778c58fba39c1d6a80e0896810c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:2f:92:78:e9:11:bd:7e:cf:1e:75:11:cd:
71:33:ba:9f:04:ec:37:ce:28:48:a0:57:15:bd:8d:
5a:34:80:22:81:4c:44:f7:91:c7:60:41:41:6e:86:
87:f5:45:36:9f:37:54:e5:39:24:d1:91:bd:93:19:
33:d3:0e:27:1c:00:0a:4a:49:d3:e6:04:b4:47:8b:
81:36:36:00:99:cb:37:90:1b:1b:3a:37:8a:b8:56:
19:ba:87:66:4d:ca:54:cd:a9:bb:fa:d7:6f:b6:92:
d7:84:dd:27:9f:3f:d4:2e:de:94:65:d8:ad:a4:9b:
04:e3:1e:6e:ac:4b:c5:69:3a:93:d3:d9:d4:ae:4e:
1b:e7:87:ab:21:bd:96:81:4e:a5:a7:0f:9c:7b:c2:
be:cb:ce:57:be:4c:46:a9:9c:5f:71:f4:24:ee:b7:
fd:28:11:07:6c:8a:b2:9a:03:6b:a9:5b:f9:60:64:
37:b1:21:a8:30:f7:3c:32:1d:b7:d8:84:06:d9:a1:
87:86:5d:0b:8b:10:15:9c:4b:40:5b:d4:e3:1e:38:
e8:2f:a4:ea:10:59:1a:e5:db:9d:c6:04:bc:78:cc:
84:2e:c4:f1:01:21:bf:e4:1c:00:98:02:2e:6e:c3:
3b:73:da:8e:46:48:3f:32:da:2a:ef:1f:a5:35:67:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:56:5A:A1:65:29:77:8C:58:FB:A3:9C:1D:6A:80:E0:89:68:10:C2
X509v3 Authority Key Identifier:
keyid:7C:7C:31:1E:8E:EE:BB:CD:A2:89:06:2D:63:AC:0E:2E:D6:1D:B1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:6a:06:51:40:4d:15:7c:9c:04:4e:e1:b4:e0:45:a7:f8:bb:
6b:e2:25:ce:da:94:c4:0c:9e:00:a5:2f:f2:15:5e:15:74:69:
19:3f:f2:cc:ad:9a:e0:c0:cd:12:c4:24:6c:1a:57:ed:e9:1c:
27:1b:b0:dc:7c:a0:86:9c:76:9f:4e:1b:0c:a0:82:82:09:d7:
76:33:3e:cf:c7:b8:0e:45:29:d1:e1:4d:a0:71:cc:1a:05:c5:
9b:8b:bc:75:fe:a2:1a:c1:d8:33:88:96:e9:5e:f7:78:8b:50:
10:d7:e6:8e:b7:36:f9:d0:62:a9:ca:ae:cd:7f:40:4f:4a:5f:
ed:f6:ce:e7:9b:4a:e0:6b:97:85:06:47:f4:3a:f8:35:51:7b:
c9:d7:6a:fb:a1:1a:ff:30:f1:43:b0:0a:62:f9:c7:8e:48:67:
10:c7:8b:a3:ea:fe:ee:bc:87:d2:e4:bc:d4:de:c4:c0:37:02:
c0:cb:de:03:06:7e:a6:7a:bf:a9:67:12:74:36:e5:07:de:6f:
7a:7d:3d:fb:cc:88:20:63:41:f1:30:09:c0:c6:2e:43:9c:60:
94:ab:7b:fe:4d:29:5d:87:bc:d1:57:5f:9f:e8:76:58:9a:ea:
6a:8c:1e:81:91:41:24:0f:82:e0:2c:0d:4a:11:50:9d:39:c5:
c1:23:c2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:49 2026 by rpki-client