Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
File: fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json)
Hash identifier: W+2b2XFKGYUMKZE0LAipOi1XtkntMMYDBDKXxdzvfr8=
Subject key identifier: 9A:72:1B:58:B7:24:F8:9E:EA:5A:31:E2:62:05:78:23:02:BE:C5:32
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 019D2AE0F2F32B064E3F201A3A0CE8C3393B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
Manifest number: 189D
Signing time: Thu 26 Mar 2026 16:01:18 +0000
Manifest this update: Thu 26 Mar 2026 16:01:18 +0000
Manifest next update: Fri 27 Mar 2026 16:01:18 +0000
Files and hashes: 1: E7wjJIpp_incFIPPoxFXkTVNOZ4.roa (hash: dWCBkyUED92Ky9/PvSo7QQdS38SvVtpgkoIQkxWKNdI=)
2: IuJcF4mH2-0BSlT6G6AhKea-qcA.roa (hash: T022zetJkpJSmZy29rCTHnD8e/gW5HPSAFMOxFPo87E=)
3: NCBS6S7dbPRbVbMZAA5wdXMKQ5k.roa (hash: Nny9mwkO9g7Ta3xJG9twAHrYNKWRzZdme681CxunWuM=)
4: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: 0fe8K5bSkl2+EYniBXrL7NDh9NHFhlBphzN87nY/48Q=)
5: i5uiOxUKql3E_IHTtTBz9-Sb4xc.roa (hash: tZ8uEFMzEFAwyadWPmY+Ye5B1UCKISaztWjCzXC/FxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:f2:f3:2b:06:4e:3f:20:1a:3a:0c:e8:c3:39:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Mar 26 16:01:18 2026 GMT
Not After : Mar 27 16:01:18 2026 GMT
Subject: CN=9a721b58b724f89eea5a31e26205782302bec532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:18:27:34:a8:5a:9b:7f:e9:ee:74:76:b9:
ac:33:7a:1a:d9:7e:56:87:b6:58:0e:60:c2:42:43:
a4:9c:b3:78:a1:dc:60:15:77:1e:ab:88:9d:21:0d:
2b:0e:9b:75:1c:fd:19:bd:01:e4:73:84:f9:3b:77:
95:13:6f:1f:57:b8:8a:5e:66:94:e2:58:06:25:3d:
42:6f:94:f4:28:df:59:63:7a:4f:88:3a:63:61:02:
8b:2e:a0:7a:8e:57:2d:ae:cd:fb:c1:f9:71:89:e5:
b5:4b:6e:f1:6a:12:2f:76:2a:5d:c6:8a:3e:eb:24:
d7:fd:68:c1:8f:ac:89:7c:8a:40:b2:b3:f3:c5:4f:
0c:d4:21:44:cb:fe:0b:76:06:82:17:db:28:5d:82:
ef:93:52:47:51:76:32:a5:23:a3:fb:92:21:44:df:
d8:49:48:02:64:00:44:fb:0b:83:60:84:38:0c:ec:
16:f6:85:d1:8c:dd:f9:88:1c:02:e7:32:f1:91:90:
32:ba:2c:cb:9b:60:4d:ab:02:cb:77:3d:67:d7:de:
1c:b5:5c:11:d0:4b:f1:dc:9e:b0:4c:66:fd:f9:a7:
0a:27:91:53:7c:fc:79:42:b4:c9:32:fa:3a:3b:bd:
81:fc:3e:c8:9e:70:4d:6c:5b:4d:44:fc:37:82:7e:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:72:1B:58:B7:24:F8:9E:EA:5A:31:E2:62:05:78:23:02:BE:C5:32
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:56:02:c3:c6:7f:ec:e2:98:cc:ce:b7:27:b0:5f:b1:41:28:
0b:65:15:18:9b:aa:ca:6f:86:04:2d:eb:91:7b:7b:59:79:5a:
65:48:7e:a5:d6:e9:44:dd:6f:5e:b4:bd:62:d2:a2:81:1b:da:
f5:62:2f:c3:e0:0d:76:b2:f2:e5:7a:d1:03:65:3f:0e:6b:7d:
46:57:f2:2b:95:70:4f:90:55:f9:3e:e2:42:8f:a6:98:3d:49:
c9:5a:d3:0b:7f:e1:50:a1:f1:44:15:e9:32:e9:78:17:9e:a3:
21:85:fc:5b:0a:06:8f:01:b7:49:08:e4:19:f5:fd:18:60:95:
89:b8:3f:ee:e6:60:28:cb:31:67:3f:f4:fb:b8:e2:48:a8:66:
0c:c5:16:8c:f0:55:d6:28:08:6b:04:79:e9:fe:27:49:c8:08:
c8:25:9b:e8:dd:46:41:51:94:26:fa:b8:1f:16:23:4a:40:f3:
cc:a1:92:ad:64:a8:c9:ba:b4:61:8b:94:b4:3b:bb:8c:43:03:
09:ac:5d:80:2d:50:64:e8:3b:be:22:fa:5e:55:b4:c4:ef:86:
4a:5d:31:20:bd:1f:d4:41:e0:8b:d9:9f:4b:8b:86:d7:4e:72:
e7:51:d0:6d:d3:31:44:0e:be:b2:58:c9:23:97:6e:94:02:05:
41:07:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:46:54 2026 by rpki-client