Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
File: fUFb7iIlhfLRqvv_unlQMaRRKcc.mft (raw, json)
Hash identifier: 8inihuBzkz06ev75sLODlu8z3+4tLxfbOJoyC4/rkJs=
Subject key identifier: CF:DB:CB:6F:BB:FE:4D:32:6D:24:8D:A2:11:F5:74:BF:0E:5F:19:5E
Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7
Certificate issuer: /CN=7d415bee222585f2d1aafbffba795031a45129c7
Certificate serial: 019D26CD0259AD10A213B9EE2F8EC0D1514B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
Manifest number: 018D
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: EpAV40Ub4Qhm2LrtJvF107eivE0.roa (hash: yMZ2WZA3sacKoy7tu2K5tKAGLGICOq7tZTEgNmenhaU=)
2: az7D72m3aRzcMGuqVgsus2HYPJI.asa (hash: UYH2LQP6yhA1ucYPAXvinazn/8R7Ym8Hnb5ZSwGQQiU=)
3: fUFb7iIlhfLRqvv_unlQMaRRKcc.crl (hash: OdIRSP1yjz8kb2NaFwvTmbfLZh5g8ApAIE0fky1GTi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:02:59:ad:10:a2:13:b9:ee:2f:8e:c0:d1:51:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=cfdbcb6fbbfe4d326d248da211f574bf0e5f195e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:74:4f:72:3e:92:81:bb:24:e3:39:93:f4:
cb:e3:a6:e1:64:69:44:67:e6:4d:09:1a:d8:4b:dd:
30:8f:72:fe:d5:96:76:33:49:40:b2:4b:94:77:9f:
47:55:73:73:3a:8e:d6:58:27:ac:16:3e:38:c2:25:
26:b5:8c:88:0a:4d:34:71:44:ed:db:50:fe:20:65:
d6:ab:07:69:e0:5b:44:1a:ed:9a:f3:74:64:b0:0f:
bb:20:5e:4c:77:0a:77:33:4d:3f:d6:a0:19:04:96:
d8:6c:56:9a:0d:50:f0:9c:5f:64:21:da:54:bd:02:
ed:00:15:07:d0:eb:e6:98:b8:33:03:a2:86:7b:1c:
11:f5:97:91:f0:46:8d:55:91:d6:56:07:d3:b9:a0:
1c:0d:0a:63:9f:f0:02:f5:ef:aa:b0:37:ca:f7:03:
34:d9:e2:ea:e4:5a:0d:9e:41:db:58:d6:6e:a2:6d:
19:42:41:ed:5c:54:3d:a6:20:86:8d:27:05:fe:c1:
ac:29:19:b9:1b:07:f3:d1:99:e0:4d:3d:f3:51:f4:
b5:1c:70:c8:e5:d1:ee:73:6b:c5:49:2f:32:b7:5e:
5e:55:05:fe:7b:ce:35:37:26:96:12:36:d3:aa:6d:
65:4c:41:56:52:75:54:c1:8e:c7:c5:58:02:7a:21:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DB:CB:6F:BB:FE:4D:32:6D:24:8D:A2:11:F5:74:BF:0E:5F:19:5E
X509v3 Authority Key Identifier:
keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ce:89:d2:22:d9:82:66:42:18:72:66:30:8b:29:5e:aa:9d:
b1:5b:ab:5f:61:aa:3a:46:1b:bf:5c:5a:e9:6a:70:49:62:b7:
c3:9e:97:84:ee:06:4f:c1:df:49:51:0f:94:23:14:ea:65:e0:
4d:17:6d:f8:08:f4:d5:1f:b9:bc:f2:15:69:52:3d:b2:75:93:
5e:4c:2c:e0:42:46:13:70:26:c1:96:ae:ef:2f:6b:ee:fe:0b:
18:73:c3:1d:91:a3:bf:97:bd:c4:c9:92:ff:2e:67:aa:82:da:
30:96:82:1a:e7:1a:f5:2e:a6:61:3b:bd:8a:b7:74:26:fb:f2:
c2:0a:c7:04:88:be:21:a6:23:ca:d4:2e:53:45:5f:02:3a:e9:
e9:a8:df:17:6c:63:e7:7a:d8:9b:cd:b4:66:11:95:eb:44:88:
a5:0a:62:0f:7a:38:74:1e:ad:65:4c:82:09:cb:d0:a1:59:0f:
6c:34:16:39:c2:82:3f:de:24:82:a5:4b:6f:99:52:13:93:a4:
04:6c:d7:a5:5c:c8:ca:3b:f3:66:ec:5f:91:2d:f8:67:dc:ab:
71:a8:03:c3:a5:d8:36:fd:0d:11:85:38:31:a6:20:5c:e6:84:
5e:7c:a6:c9:3e:ec:65:20:56:bc:34:30:0d:d0:04:ac:00:68:
17:30:5c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:47 2026 by rpki-client