Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
File: fEDTjH5rzUtq76C7Ss17ZEznGkc.mft (raw, json)
Hash identifier: z/ZeItzyhVxP3W65xYVC9qKu+otFObXB1Tr++YzUOaU=
Subject key identifier: FB:EC:7E:B9:D8:44:33:74:FD:4B:AB:5B:54:DF:9F:75:76:C8:31:A2
Authority key identifier: 7C:40:D3:8C:7E:6B:CD:4B:6A:EF:A0:BB:4A:CD:7B:64:4C:E7:1A:47
Certificate issuer: /CN=7c40d38c7e6bcd4b6aefa0bb4acd7b644ce71a47
Certificate serial: 019D2B4E3F105D27C604AA30C25B7FCD7237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
Manifest number: 28
Signing time: Thu 26 Mar 2026 18:00:41 +0000
Manifest this update: Thu 26 Mar 2026 18:00:41 +0000
Manifest next update: Fri 27 Mar 2026 18:00:41 +0000
Files and hashes: 1: JOrZbv5P8xa_uNN_bW2nd8t85fw.roa (hash: +tU3FVRnRItU1Djfz+HewHPi/7UJ09UTc4dbTgRdd4Q=)
2: fEDTjH5rzUtq76C7Ss17ZEznGkc.crl (hash: E0ammDTSaTGQhTdzfGsmlHD61hTgV7swi+ZeBnH7N18=)
3: zOYOJF9DfijezlN9iaw-AlTXC9Y.roa (hash: 9l40cVFv1YhreHGWhH0joF4uHabuY804EXNUsY9cFxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:3f:10:5d:27:c6:04:aa:30:c2:5b:7f:cd:72:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c40d38c7e6bcd4b6aefa0bb4acd7b644ce71a47
Validity
Not Before: Mar 26 18:00:41 2026 GMT
Not After : Mar 27 18:00:41 2026 GMT
Subject: CN=fbec7eb9d8443374fd4bab5b54df9f7576c831a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:36:a0:7d:c1:93:e9:8a:f4:a8:df:cb:60:
b6:6c:6a:44:a9:b7:68:fe:a9:a5:22:00:fd:d8:85:
a4:8f:33:05:dc:53:45:cb:bc:14:07:ef:94:a4:03:
e8:7f:d2:2b:84:20:a1:73:ad:64:17:70:ae:e7:f4:
db:95:67:f1:58:c4:3e:3a:04:d9:ca:09:3a:5e:a0:
a5:bb:65:31:c7:e8:a7:62:e4:25:6e:5e:06:ba:7a:
00:18:7a:57:8c:1f:1b:e9:c0:47:f5:fa:81:52:5a:
4e:cc:9a:21:6e:1f:74:5b:12:57:7e:c7:da:d3:1b:
d0:3b:c6:f0:02:bb:43:ba:30:44:14:62:68:ab:5b:
09:fb:10:bf:f6:cc:bb:77:43:f6:7c:89:df:a5:2b:
6f:1e:6e:93:cd:52:ea:bc:1d:54:2c:cf:24:71:dd:
54:1e:c5:86:9d:79:07:eb:98:99:21:dc:25:71:59:
33:81:98:d4:37:25:23:54:ab:1c:97:a0:ef:3d:80:
26:59:1d:c6:0b:ee:0d:85:51:a1:8e:10:38:18:f3:
eb:8b:13:c6:03:b5:44:b2:3d:35:0c:52:c9:6b:f7:
cb:dc:45:ea:4c:f5:e0:19:ce:01:a2:c2:01:73:94:
46:23:3d:d4:a7:32:a1:53:7d:b7:45:9d:a0:da:9e:
98:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EC:7E:B9:D8:44:33:74:FD:4B:AB:5B:54:DF:9F:75:76:C8:31:A2
X509v3 Authority Key Identifier:
keyid:7C:40:D3:8C:7E:6B:CD:4B:6A:EF:A0:BB:4A:CD:7B:64:4C:E7:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cf:e5:fe:9e:ce:39:83:36:18:af:88:d1:86:89:f3:e4:5e:
0c:b8:7a:08:fd:f0:9f:63:d1:43:9b:5e:74:a2:22:24:d9:5d:
dd:ff:c5:75:45:d5:f9:70:d8:6f:a3:62:7c:6a:c9:f4:dc:95:
69:a6:7c:31:f3:a9:5b:40:cc:5f:0d:e8:ad:42:50:4e:6f:ac:
a1:c6:ad:fb:51:f5:ee:92:aa:50:ef:44:4b:68:2e:fb:4b:c6:
94:08:d8:e2:f9:9d:f1:95:a9:c3:bd:85:21:c2:a3:bc:f8:94:
94:64:de:f9:9f:c4:d3:ee:f9:98:72:2b:07:a7:35:5d:9a:d6:
61:fb:ea:42:c6:68:05:bf:d1:ea:60:b1:e5:b3:2d:83:71:85:
eb:c2:32:68:6d:af:9a:96:bf:50:65:75:88:28:bb:38:17:d5:
e3:3b:24:91:7b:5e:ac:82:2d:79:b3:ec:be:27:78:0d:db:78:
d2:9b:93:12:87:73:e1:67:05:15:71:a3:c1:77:9e:56:53:f0:
25:75:0c:4e:68:3c:55:92:cc:58:10:f3:75:13:95:9e:8d:f4:
88:75:c8:cf:a5:83:00:fc:f3:fc:28:2d:27:0d:42:66:60:f4:
de:d7:08:32:b9:8c:36:b5:1b:ff:be:4e:29:da:04:74:e5:f6:
bf:cb:5e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:25:07 2026 by rpki-client