Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: k8Jar4mdhxLITy8LIu4rQnSAIqBnGqS2f0VNhcvR9nc=
Subject key identifier: E0:72:1A:88:D4:67:E8:77:FF:0B:90:F9:FE:25:71:8F:29:A1:7B:6A
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 019D2B1726E7FCA462744FC3118BFEAB0B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 17:00:30 +0000
Manifest this update: Thu 26 Mar 2026 17:00:30 +0000
Manifest next update: Fri 27 Mar 2026 17:00:30 +0000
Files and hashes: 1: dY56PZ-dRsvnKDvXo4McbQsvHAI.roa (hash: SOOatDV7hO/TWrylYWvtGzZm2zHDrCdXyxdW1RoCrrQ=)
2: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: teMN/18lFPrp1e7c9s9Y6OyUkijdihL6yAuXMUcJEo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:26:e7:fc:a4:62:74:4f:c3:11:8b:fe:ab:0b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Mar 26 17:00:30 2026 GMT
Not After : Mar 27 17:00:30 2026 GMT
Subject: CN=e0721a88d467e877ff0b90f9fe25718f29a17b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:01:b8:25:c9:7a:87:ec:d5:22:84:4c:b7:
b7:fa:00:eb:8a:ea:82:82:f4:ea:71:86:c8:de:50:
4d:08:34:a4:01:f2:26:2c:5c:69:33:ce:03:9d:4a:
33:f4:90:f4:b5:5d:4e:98:17:13:0b:b8:ac:1c:0d:
b1:e0:c5:13:00:a4:60:08:56:be:05:12:61:b9:77:
ec:44:2b:e7:f5:b6:42:4b:a7:ae:ea:b9:ad:92:cd:
f8:95:d0:5f:c7:46:e7:2c:d2:d0:a6:82:37:1c:e5:
a9:f9:d3:6b:5c:f5:68:43:72:37:1d:33:44:00:07:
ca:ff:51:d4:4f:1c:38:17:bc:a9:40:e5:d5:7d:e2:
e6:34:a2:da:1d:c3:df:6a:7d:cc:40:70:a6:88:09:
08:43:4b:1a:13:91:10:d6:a6:79:ff:05:13:ed:be:
9f:66:c1:67:18:f9:97:2d:28:ae:26:1f:d3:c5:1c:
cc:da:0f:47:e6:f0:74:d0:de:59:98:d6:ae:98:ee:
e5:2c:2c:b6:cb:54:2b:92:52:d0:c9:f1:72:f3:42:
98:46:13:5b:3d:93:d5:65:b1:33:c6:e2:3f:8f:b1:
42:98:18:5d:cd:f1:25:e0:cb:87:d8:d3:29:bf:c0:
28:23:f5:cc:dc:4d:91:c7:5b:7a:3a:46:f4:18:cf:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:72:1A:88:D4:67:E8:77:FF:0B:90:F9:FE:25:71:8F:29:A1:7B:6A
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:79:d1:8f:73:55:57:e1:65:f5:9e:e6:5b:7d:42:97:00:d0:
f9:05:72:5c:07:6c:f4:a4:7f:79:6f:66:9d:1d:e4:e4:b7:4e:
0b:e1:ef:ec:a1:b6:eb:b3:6f:70:36:54:c1:a9:dd:b6:8f:5f:
11:96:ee:fa:9a:11:1e:15:d8:68:ee:65:d2:76:20:39:81:18:
9d:c1:9f:5a:3e:da:cf:16:0b:d3:95:bc:aa:a2:97:d5:8c:af:
87:35:e3:4c:b6:15:fe:23:61:8e:3c:87:73:2c:53:f2:84:f8:
e6:3f:d0:45:ec:9a:98:06:0a:ec:cb:e5:90:e0:e8:a3:31:f9:
af:08:12:5a:91:4b:d2:7f:28:fc:1d:3e:58:60:b3:b6:13:dd:
95:de:7d:de:0e:c5:26:c1:fb:60:33:fd:2d:06:e3:4a:59:5d:
67:a4:c0:67:bf:39:7d:85:fa:93:6e:b0:65:4a:72:5a:6f:9a:
6b:49:f7:7e:c4:08:e4:0e:cb:fd:0c:78:2c:9f:f1:8b:65:0a:
b4:a1:72:4b:ea:a2:aa:3e:9c:29:57:0b:57:6b:f2:0e:3d:1b:
5e:72:01:a9:f8:1f:22:f8:17:04:f3:5a:e7:a1:cf:75:6d:ba:
d4:60:c2:f9:81:e8:9e:e4:89:26:6e:a5:6b:b6:16:7a:ca:8b:
f2:a2:cf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:00 2026 by rpki-client