Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: jYI+TqTZdCnazeXWIHIoCEtgXtUCI0OuGIMi0vu8l+0=
Subject key identifier: 89:CD:54:21:1B:61:7C:D2:9E:5B:94:12:17:D7:CF:AE:64:23:B0:96
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 019E21A452FF270B36804B677588BAF236B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 0284
Signing time: Wed 13 May 2026 14:01:17 +0000
Manifest this update: Wed 13 May 2026 14:01:17 +0000
Manifest next update: Thu 14 May 2026 14:01:17 +0000
Files and hashes: 1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: BTyo5HaaoTP+Qj1xOhk4KzHEJMHOX4XRRkN1TwEyU/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a4:52:ff:27:0b:36:80:4b:67:75:88:ba:f2:36:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: May 13 14:01:17 2026 GMT
Not After : May 14 14:01:17 2026 GMT
Subject: CN=89cd54211b617cd29e5b941217d7cfae6423b096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:31:34:0d:74:ea:c4:75:5e:48:a2:ff:e9:
7c:36:e5:eb:7e:0f:04:46:30:37:1f:48:59:7e:e1:
bd:0a:c4:d5:5d:67:cd:0a:6e:d2:7e:96:8e:3b:eb:
54:78:4d:10:30:75:6d:22:8c:c4:7f:21:67:cc:c2:
a1:af:10:31:b7:0f:4d:79:09:c3:dc:7e:fc:d9:3e:
f8:97:70:69:7c:a0:f4:e7:ca:ef:d7:e0:52:1a:f7:
3c:c0:08:d1:24:39:70:25:8a:db:5b:e5:2f:9d:df:
06:77:94:4d:c5:e9:2a:0f:bb:c2:e9:57:b4:51:b9:
32:08:92:97:12:de:df:2f:e8:b1:be:fe:e0:57:8a:
85:a7:64:ff:5e:00:ac:f1:37:14:b4:1f:82:84:97:
3e:72:60:a0:a4:9e:c5:35:bd:c3:a1:2e:c9:f8:21:
09:4b:54:1c:2a:7d:99:56:50:a2:f1:28:0c:57:4c:
17:14:2f:31:69:2c:b4:76:e9:a5:b5:b1:17:85:77:
11:12:4f:a1:cc:e9:c1:d9:a5:fc:85:22:50:df:f1:
c1:bf:01:fa:43:bb:4e:ca:67:f3:ce:58:1c:ce:d8:
22:7a:06:60:84:24:d0:c7:12:df:01:4d:98:04:ed:
96:04:be:06:3d:87:4a:0a:ea:7b:6b:3f:ea:7c:2e:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CD:54:21:1B:61:7C:D2:9E:5B:94:12:17:D7:CF:AE:64:23:B0:96
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c1:bd:f6:92:e2:b8:a6:54:e1:51:e0:0a:d1:30:97:37:c9:
06:ae:80:e8:5c:29:d5:68:1c:af:e7:20:3f:14:5d:6b:24:bc:
37:c2:5a:aa:3c:80:78:ae:a3:78:92:8b:63:26:d1:06:cf:ed:
2d:76:41:90:99:33:5f:aa:27:01:44:c7:21:b5:b3:b5:77:c7:
a2:db:fd:95:52:ca:59:2b:4b:4f:ae:2f:16:23:86:bd:7a:25:
0e:b6:2b:9e:da:6a:92:aa:bf:b4:a8:56:8b:18:c1:83:8d:98:
01:6f:65:d7:aa:17:7e:13:9a:54:74:3e:87:d0:a9:11:40:f3:
79:86:ba:47:84:b2:fe:a8:19:c5:ce:a6:99:4b:45:e7:76:89:
18:6f:cf:a9:02:fc:14:4f:5a:dd:2c:90:90:81:0f:08:00:72:
12:c9:74:ef:82:4e:59:bb:78:0a:1a:33:e9:87:17:01:79:b1:
b5:c6:1f:a3:20:b8:3b:46:08:6a:9d:fb:47:74:d5:21:e7:8a:
40:54:7b:e8:d7:1b:13:a4:2f:22:7c:6f:06:a9:f1:ff:31:63:
6e:05:56:60:6c:70:3b:41:cb:cf:45:bd:15:1c:90:e8:fc:79:
53:c9:a0:3c:44:73:09:38:b6:f2:2e:fe:9f:ef:23:2f:67:dc:
30:90:1b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:18:39 2026 by rpki-client