Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
File: fDUy5S6q_vlIxCyLHVEUXKydTJY.mft (raw, json)
Hash identifier: vNW6q/L2UEibHQor2b+8qID5c1qKmoku4MWEu7JKdmM=
Subject key identifier: 90:DE:4A:FA:0D:04:57:AC:7C:43:DB:9C:6B:95:BA:55:D4:8B:F3:E4
Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Certificate serial: 019D2772DAB0483B6387E1B09AA08363F4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
Manifest number: 0E76
Signing time: Thu 26 Mar 2026 00:02:11 +0000
Manifest this update: Thu 26 Mar 2026 00:02:11 +0000
Manifest next update: Fri 27 Mar 2026 00:02:11 +0000
Files and hashes: 1: fDUy5S6q_vlIxCyLHVEUXKydTJY.crl (hash: 9mvKcHp3MgNXyQUAqSe4jYCNzXNP/RB2KW6j4jElDtk=)
2: lWtt-iAmnTnwXom0pRL7GVFndbI.roa (hash: prnIyF9aQP2RrtBIshVQnQnFGHdYcAP10F6Rq04Hw+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:da:b0:48:3b:63:87:e1:b0:9a:a0:83:63:f4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Validity
Not Before: Mar 26 00:02:11 2026 GMT
Not After : Mar 27 00:02:11 2026 GMT
Subject: CN=90de4afa0d0457ac7c43db9c6b95ba55d48bf3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:4a:64:66:73:49:74:75:06:47:82:6b:e9:
fa:8d:15:27:e2:49:b3:c0:8e:98:c6:d8:cc:88:f7:
9e:e1:f9:70:6f:04:89:bb:07:65:ce:be:f5:a6:8f:
79:4f:5f:88:ac:d6:50:49:52:de:f7:3a:d3:c1:b0:
19:8b:bf:78:89:30:50:63:21:07:b8:15:88:15:bd:
f5:c6:45:02:cd:22:85:90:fa:cc:c5:ca:c0:4e:09:
44:d1:aa:76:a2:fd:98:a2:41:0d:eb:52:6d:7d:aa:
f1:13:12:18:51:83:ae:74:24:d0:55:af:a4:83:9a:
8b:56:d5:38:7e:89:09:c8:61:a3:bf:14:29:dc:ed:
70:f1:03:b8:23:c9:50:96:96:b9:55:d5:0d:db:5e:
3d:11:2d:71:94:56:f5:6f:62:e1:28:d5:9f:c2:f2:
43:18:db:00:0d:00:49:ee:a4:58:b7:0f:05:14:3c:
d9:33:4b:bf:a0:fb:b1:80:da:79:44:e3:89:aa:e4:
2f:7e:cc:6d:c5:8c:7b:f8:cc:6f:bf:19:a9:76:08:
01:80:0e:e1:ff:d9:7d:7d:82:5a:47:5c:3e:94:ac:
eb:71:6b:7c:64:76:ff:89:98:cd:1f:98:54:9a:0b:
ca:46:ae:5f:64:9c:ab:63:7c:aa:3c:d6:e6:e9:0e:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DE:4A:FA:0D:04:57:AC:7C:43:DB:9C:6B:95:BA:55:D4:8B:F3:E4
X509v3 Authority Key Identifier:
keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:76:93:25:f4:4d:07:60:1d:2e:07:ac:09:a5:24:16:5c:db:
4f:66:0a:25:79:5f:67:59:a6:bc:8e:2f:91:09:e7:a3:30:88:
69:3b:a9:1e:d2:db:ea:9a:37:29:19:48:de:b9:da:22:96:9c:
e0:09:b3:95:7f:82:59:52:23:9f:3b:ca:d4:ab:06:c6:b6:61:
3a:56:6d:d1:5d:a9:0f:6d:9b:b7:4b:7a:83:8d:20:ae:95:1f:
3e:88:f5:c4:70:9c:33:85:b2:d3:38:db:b4:1f:ac:a1:94:7c:
d0:b9:01:f3:7b:1f:ee:f6:17:8f:e0:dc:32:cf:eb:25:65:fa:
5d:70:79:fa:e6:85:24:e8:9b:bc:45:8e:82:23:16:56:6d:fd:
e9:f3:60:93:fc:1a:0e:fa:f7:0d:1a:7d:47:41:9a:ca:5d:e6:
60:01:f6:c4:74:82:ec:14:00:fa:b9:4d:b6:cd:c2:5e:fc:3f:
d9:f8:79:a1:cd:2e:af:56:1c:4f:92:47:fb:be:53:e1:41:42:
e3:27:c6:ba:a5:b6:37:44:e9:3a:dd:db:8a:85:c2:f7:d5:46:
6e:37:3c:ef:57:d7:02:4e:bd:bf:6e:a2:bc:63:29:ba:14:40:
71:52:e7:dc:c0:39:be:c6:8b:98:0a:1a:bb:58:b6:94:7b:9a:
c6:48:76:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:21 2026 by rpki-client