Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: R9SzrLJ+i7BaMxfGIs23UoG8pfWN87eCEEhLUpU9eQo=
Subject key identifier: 6D:61:30:46:C9:FB:E5:CB:4C:1E:00:95:21:79:96:13:31:D0:03:08
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 019D2A7279954DB3023AD0AD0317E591DC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 0204
Signing time: Thu 26 Mar 2026 14:00:38 +0000
Manifest this update: Thu 26 Mar 2026 14:00:38 +0000
Manifest next update: Fri 27 Mar 2026 14:00:38 +0000
Files and hashes: 1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: lIQCSxDDnt/wy/0lH797F5ijmH0wUb1NIH/uxjvwhEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:79:95:4d:b3:02:3a:d0:ad:03:17:e5:91:dc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Mar 26 14:00:38 2026 GMT
Not After : Mar 27 14:00:38 2026 GMT
Subject: CN=6d613046c9fbe5cb4c1e00952179961331d00308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:31:33:7f:d7:60:e0:23:4b:9b:0a:6b:4c:
c8:bd:b3:5b:54:d8:d0:60:0c:d8:4b:30:77:81:d9:
6d:61:6f:15:ce:87:1c:8c:55:0b:46:11:26:9c:59:
01:4f:c8:95:99:ff:9c:fe:82:85:36:a0:92:c6:12:
04:55:74:55:42:a6:4a:f9:70:ca:61:05:4e:f1:6e:
b8:9d:26:bb:2a:4f:93:4c:81:e7:b2:61:00:65:97:
6c:4a:fa:7a:b0:b8:96:8d:5e:90:5a:cb:64:66:2f:
f0:56:48:4b:08:45:e8:8c:a8:97:1e:08:2c:40:c5:
54:5b:3f:3e:af:6c:03:0d:ce:3e:2e:19:35:f7:9e:
cb:fe:75:6d:6b:14:65:f9:e9:a5:ee:6e:25:95:c1:
92:4f:eb:c4:26:f8:95:33:36:61:03:c7:f6:ac:5e:
ed:af:a6:26:ed:79:c7:5d:7a:80:46:98:56:80:5e:
05:79:a2:8d:a0:5d:ca:ce:c0:6c:e9:75:91:b7:8c:
21:95:4c:58:64:eb:70:32:2d:ad:82:cb:b9:94:e2:
3d:1e:b4:b3:3f:00:5f:2e:ef:72:e7:70:95:3f:b4:
1f:1b:ba:73:2d:28:4d:cd:8e:8c:32:aa:aa:c7:b7:
01:47:3c:df:5f:84:f3:39:22:1e:15:db:fd:ed:14:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:61:30:46:C9:FB:E5:CB:4C:1E:00:95:21:79:96:13:31:D0:03:08
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ea:63:df:88:89:a5:7c:fc:8a:2b:04:1f:3c:b7:31:a6:6d:
c8:fb:21:a2:ea:97:2c:55:58:d8:a3:17:3f:84:88:02:f7:aa:
15:26:02:4b:ac:48:f6:49:3a:14:75:c6:81:69:88:c6:79:0b:
d2:99:c1:12:d3:f2:e3:f6:88:21:f0:d4:16:65:19:0a:ce:2b:
f0:95:87:91:58:51:1a:16:ad:88:8e:cf:ad:fb:84:3b:ae:7d:
32:c2:3b:9e:b5:25:99:62:81:99:06:21:bf:88:76:e1:d5:d3:
af:bf:41:fa:91:65:65:ec:da:ed:57:7c:9b:d5:74:51:b8:45:
26:0b:f0:cb:43:b5:62:ec:da:43:af:f3:0c:51:8a:9a:43:dd:
0f:93:02:5f:f8:80:8f:d7:53:24:d7:3c:d1:66:0e:9c:9c:d3:
ab:07:a2:60:9d:eb:ac:4b:a0:47:15:76:05:74:35:96:ed:2f:
a7:28:60:b8:e9:7e:fb:33:17:b8:ee:5d:1c:66:79:1e:89:7f:
94:85:de:72:01:32:53:ef:33:be:fc:ad:4c:83:e5:00:09:9c:
9a:70:c5:ce:85:43:ab:1f:04:a1:8e:15:26:1d:77:02:1c:62:
77:c8:35:c5:50:11:a1:f6:fe:fc:e2:f4:85:a1:37:5f:80:9a:
e5:12:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:50:54 2026 by rpki-client