Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: zgcGDa4b8n8mw7JvFfGcGawt+WrDGXWX6jIhU0TWato=
Subject key identifier: F6:77:90:35:9D:3D:C4:95:51:34:86:31:F4:2C:02:D9:B5:30:56:20
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 019D26CD2970974580D030F12C61DA44E611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 1567
Signing time: Wed 25 Mar 2026 21:01:12 +0000
Manifest this update: Wed 25 Mar 2026 21:01:12 +0000
Manifest next update: Thu 26 Mar 2026 21:01:12 +0000
Files and hashes: 1: N611FyyDWK9ug4tcbq7YvkQysOc.roa (hash: cBgwqk8mDKhuXD2KmuvuFfz0Mfhld+DUNOT4u8hWcPE=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: MLHZA1jWPhTc4VkPw76bnAYcS/hcrVuUHtWIrOkulQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:29:70:97:45:80:d0:30:f1:2c:61:da:44:e6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Mar 25 21:01:12 2026 GMT
Not After : Mar 26 21:01:12 2026 GMT
Subject: CN=f67790359d3dc49551348631f42c02d9b5305620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:14:c9:20:ee:b4:7d:16:0e:2c:70:e8:8f:
03:f7:9a:ab:00:ff:a3:b0:e0:ca:0e:a9:3b:8a:f6:
cc:e3:f2:35:f9:b7:e6:55:d6:b6:e3:34:2d:60:bf:
29:24:2f:f9:67:c1:e2:6c:c3:7f:2e:cf:a6:fb:67:
df:cc:0b:a1:84:67:80:0a:70:1f:c6:6a:57:5e:2d:
ff:bb:27:60:00:c4:9e:da:5d:41:4e:fa:70:48:bd:
6c:3a:66:30:38:3c:31:26:4d:43:f0:85:20:cc:d1:
62:d6:fe:2e:3f:ac:55:0e:44:d1:03:30:bc:32:9e:
98:3f:79:5c:ec:ac:47:7a:f2:fb:05:09:61:bc:a6:
23:02:fe:47:22:7c:5f:7d:f2:13:d5:bd:9e:21:cd:
20:3d:f1:dd:ae:f5:58:fa:cf:e2:eb:63:57:b4:bd:
12:ac:9f:22:c1:42:4f:d2:20:64:59:0d:58:d7:d0:
e9:6b:e5:56:6f:c2:35:c6:a3:1d:1f:cc:fe:b1:3e:
01:91:39:ee:a2:cf:15:4c:e0:dd:38:af:a7:93:ee:
f4:3c:ae:f5:26:1f:ed:8c:09:b2:d7:88:34:a2:b2:
a3:60:66:d5:c6:6e:77:1b:3d:b6:6d:5d:4d:66:41:
97:fb:54:68:7b:e6:16:ef:34:13:27:06:cf:21:d8:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:77:90:35:9D:3D:C4:95:51:34:86:31:F4:2C:02:D9:B5:30:56:20
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6d:3c:1d:d2:ea:fd:9b:76:d7:a3:bf:9f:c1:b7:fe:99:f3:
ba:52:53:0d:ec:ba:bd:a4:93:5b:53:65:c6:27:29:e6:be:bd:
05:e8:32:f1:e0:41:82:df:b1:2f:e9:c6:9f:c8:58:61:53:cb:
d4:18:2d:cd:fe:37:5a:62:87:12:ca:b7:41:90:57:80:98:49:
68:01:1f:08:ea:fd:e5:ae:aa:3f:05:7b:e6:18:25:e9:75:47:
da:a7:5a:62:4f:83:5c:d6:d0:19:3a:83:eb:f0:7e:1c:6b:b0:
0b:06:d9:ae:dc:7f:5a:2d:f4:60:96:7d:f4:88:d5:ac:a3:46:
30:28:8c:55:85:7f:a9:2c:b3:8a:2e:0e:9b:d2:cb:43:3f:8b:
9c:1b:43:64:d3:15:c6:c2:5b:e9:bc:26:a3:1b:a9:46:ee:09:
1f:85:5e:8c:1b:8d:ff:03:66:f2:5a:7b:86:d7:a7:74:00:4f:
d3:7f:b7:72:93:ab:8d:55:77:88:e5:ad:c7:4a:33:39:ed:ec:
0c:b0:02:8e:91:ea:d6:2d:54:08:ed:73:2a:90:1f:00:42:09:
03:39:a9:49:00:cd:a4:1b:17:86:96:58:13:e2:bc:96:bb:eb:
f5:a1:ee:76:84:d5:8e:77:ee:8e:0a:b3:46:30:f4:13:2b:fd:
ca:e8:73:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:01 2026 by rpki-client