Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File: fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier: SdDrJ/1wUCZkJC2jszC/pk7dMyqJ3bMB2B4Bcrhidtc=
Subject key identifier: C0:A8:2A:48:99:9F:16:12:FE:17:59:0C:7C:2A:B6:DF:1A:5C:71:0E
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial: 019D26284DD250951DB15C5E7F9ECAB1AB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number: 12F9
Signing time: Wed 25 Mar 2026 18:01:08 +0000
Manifest this update: Wed 25 Mar 2026 18:01:08 +0000
Manifest next update: Thu 26 Mar 2026 18:01:08 +0000
Files and hashes: 1: M-YtErUxsBexOppW_oy6TWvdZT0.roa (hash: TZXW/GBDFQYE5cnY/AzLaMpfHnhV7VNLTQcf/qj2o7Y=)
2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: EQekZ9B9DgVIgCYZWGVyhz1Gb3WNy6Tw4RL64jrdZgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:4d:d2:50:95:1d:b1:5c:5e:7f:9e:ca:b1:ab:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
Validity
Not Before: Mar 25 18:01:08 2026 GMT
Not After : Mar 26 18:01:08 2026 GMT
Subject: CN=c0a82a48999f1612fe17590c7c2ab6df1a5c710e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:0c:c2:46:0e:02:3b:9d:e2:45:d1:8c:6a:
26:22:34:8b:83:57:81:17:6e:de:5d:c5:6e:4d:c3:
29:25:00:bc:2e:ec:bc:03:05:9f:dd:9e:ae:0d:ea:
bc:62:0d:54:ae:99:d0:25:c0:0d:a9:1e:31:ec:50:
da:db:44:4c:fb:5c:5b:54:8d:c4:8f:bc:a7:f3:4e:
8f:cf:2c:bc:79:f0:60:28:7e:41:7f:f6:28:2f:9d:
db:28:57:7a:41:87:ad:5c:15:8f:64:a3:8a:d9:9d:
76:83:b4:26:bf:07:10:7d:76:f6:f5:66:79:2b:61:
4c:68:b5:23:cc:a5:46:72:e3:04:06:33:4b:47:1f:
4b:1d:b1:21:ac:79:b4:f6:e1:54:06:72:88:33:d0:
62:99:45:8f:7a:de:d3:0b:74:72:c5:f3:42:28:e8:
8f:96:c6:d3:98:dd:d1:68:91:20:a5:28:46:ab:10:
19:86:c1:57:a0:5f:50:86:03:1a:2c:bf:7a:46:38:
3c:d3:91:92:fb:92:13:b5:eb:fe:98:c9:fa:8b:a6:
f8:34:ee:30:28:3a:a8:18:81:14:50:c7:83:a3:f1:
82:fd:7b:c1:be:76:27:fb:e8:72:29:42:79:92:d2:
a9:d7:99:b6:c0:37:25:46:b4:e2:57:99:27:61:bd:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A8:2A:48:99:9F:16:12:FE:17:59:0C:7C:2A:B6:DF:1A:5C:71:0E
X509v3 Authority Key Identifier:
keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ce:3b:32:85:31:5e:9e:7d:b4:2e:64:da:29:bd:86:16:b3:
9b:46:ae:c8:21:a7:14:29:42:25:62:66:c4:23:ef:5d:74:d3:
28:fe:84:00:c2:d3:41:9d:84:a8:f6:b3:61:5f:7b:e1:bb:13:
1e:c6:0d:e7:13:89:fa:b4:a1:50:60:7a:a7:a8:18:8b:4b:51:
e6:84:0d:4b:25:02:26:c2:88:5f:82:7c:52:5e:70:2d:d8:75:
15:9c:1a:a3:93:4c:b1:c5:76:57:90:74:ae:58:70:ae:ad:7f:
93:73:2c:1d:e4:da:31:a6:fe:5e:ef:1b:58:79:1a:9c:a5:a0:
21:96:b3:6c:ee:e4:88:f0:17:5f:30:26:74:aa:44:d2:f6:bc:
5f:bb:99:26:c5:f3:f5:8f:0c:bd:84:e5:a9:16:61:c7:84:54:
3b:c3:b4:00:2c:91:47:19:c6:76:80:28:d0:d6:f5:4b:19:98:
81:2d:c5:a9:1c:62:1a:77:3d:78:41:52:b1:d3:b2:28:93:d1:
b2:24:09:11:5a:b2:19:52:80:0d:69:82:11:e8:d1:45:38:8f:
4a:e0:48:56:be:76:8e:9e:e8:63:81:25:bb:26:c1:d5:d8:d1:
b6:8e:b8:32:7e:18:7b:a9:5b:d1:c0:8d:b0:90:5b:76:f8:c2:
38:d6:1a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:11 2026 by rpki-client