Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier: TTdPIZNaCDIcQOWnbAB9cch90ushEF2NWo21+rzdkg8=
Subject key identifier: 04:96:D5:E6:91:C9:AB:F3:8E:C1:63:57:27:10:7E:AE:44:9C:8C:1A
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial: 019D2A3C792EBC38D87E25768655C1F03208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number: 07EC
Signing time: Thu 26 Mar 2026 13:01:39 +0000
Manifest this update: Thu 26 Mar 2026 13:01:39 +0000
Manifest next update: Fri 27 Mar 2026 13:01:39 +0000
Files and hashes: 1: HlFzm-zahAFjRHtl1bHeIsDoPDc.roa (hash: osKIkxfPFsY8+sDd/0d/lLUvdIHTe/QQACWaNNkv5qM=)
2: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: I6TVYpjBGQszslRg8nsgfUB3B8BN4P/imiqLHEtZGd8=)
3: wFhxeOIRYZRjHE_NR_YMO7VFyJ4.roa (hash: Fmj1myi/dimk9BjIvdN9tLy/wytpW18VOOMvrJoUFtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:79:2e:bc:38:d8:7e:25:76:86:55:c1:f0:32:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Validity
Not Before: Mar 26 13:01:39 2026 GMT
Not After : Mar 27 13:01:39 2026 GMT
Subject: CN=0496d5e691c9abf38ec1635727107eae449c8c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:fa:5d:61:aa:60:f4:a2:e1:ea:75:82:62:
e6:46:20:ed:74:7e:7c:09:1b:37:d2:8d:0b:f2:b0:
04:34:21:33:3e:f3:e0:23:4d:e6:2d:73:a6:82:17:
a8:3f:8b:95:9b:ca:03:8f:4a:ba:bf:7b:f4:f1:82:
e3:e7:bf:34:a9:71:3d:4b:f6:61:8a:11:08:ff:4b:
e4:e9:a5:88:89:4c:27:bd:81:25:9f:4c:f0:94:05:
e3:73:ad:1c:6a:4f:bc:58:48:7f:e6:57:79:5f:fd:
98:3b:fd:9d:3c:66:1a:20:0c:e8:4f:29:a5:a8:0c:
d7:08:6c:d3:0c:ac:f0:a3:6d:17:f8:64:01:05:e1:
01:5e:87:a7:40:08:5f:c4:cc:8f:2f:37:2e:4a:a6:
70:87:76:80:d5:00:a6:56:4a:6d:f6:6a:ef:53:3a:
47:fa:99:f6:a5:ab:3e:eb:c4:2b:3a:eb:fc:20:4e:
bd:43:c2:6f:af:db:87:ac:e0:d9:73:22:2e:bf:8b:
5a:39:3f:1b:9f:11:cd:c4:96:e7:d2:b3:4a:e3:a9:
38:e1:80:ac:31:8f:78:f2:ac:a0:5f:bc:29:bd:ae:
72:e8:bb:9b:4e:52:ff:59:a2:dd:1e:2d:71:e0:e4:
79:b9:ee:69:e2:c5:30:a5:68:be:21:92:84:b8:3e:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:96:D5:E6:91:C9:AB:F3:8E:C1:63:57:27:10:7E:AE:44:9C:8C:1A
X509v3 Authority Key Identifier:
keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:df:1e:35:68:fe:9f:27:e5:ca:f5:ed:07:b4:a1:c5:0b:21:
ce:ff:de:6d:dd:36:f4:d4:14:ad:6c:d2:57:8f:98:33:9d:c8:
61:0f:05:3a:b2:2c:b9:2d:8f:8d:ef:ac:e1:db:78:88:64:3b:
50:1c:f2:de:73:17:9c:d5:0e:6d:4b:52:65:6d:ef:c4:da:ec:
0b:00:a5:bd:52:66:b8:70:49:e8:5a:d2:ca:6b:f5:0a:99:d2:
2b:e1:51:fc:50:d0:b5:24:23:64:cc:0b:91:46:8f:f5:bf:05:
c2:01:e2:a3:58:2f:60:a3:d3:ed:2d:49:a0:71:86:27:ed:90:
f6:44:0f:6e:ab:8b:a8:cf:f0:3f:b9:65:7c:6d:0e:6b:01:28:
4b:33:35:56:80:50:93:40:b9:46:8d:6b:88:ac:a3:64:f3:b3:
55:3b:07:0f:65:6c:d3:d2:80:74:de:5b:46:e7:66:f2:c5:ef:
30:4f:5e:2b:37:9f:81:82:cf:b8:74:78:65:28:30:a2:6c:cd:
bd:8a:0f:ac:01:72:40:8e:c5:a3:88:62:26:36:09:09:cd:7b:
be:56:2f:da:d7:5d:ca:b6:5a:13:85:28:33:0b:e3:c9:af:10:
1b:0b:ed:ef:bd:39:8a:09:28:5b:74:2d:80:87:75:a3:7c:21:
d5:c6:e4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:35 2026 by rpki-client