Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: TAzeTncTzqd/9OkbvFZUa3YQ3o1+ps65PYEwh3orOcM=
Subject key identifier: 01:9D:A7:C7:CC:6A:6F:4B:08:DA:20:DF:AE:A4:73:D7:F6:FE:C1:2D
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 019D27E088F4DB8C6732C80DC13525C21E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 0D4E
Signing time: Thu 26 Mar 2026 02:01:59 +0000
Manifest this update: Thu 26 Mar 2026 02:01:59 +0000
Manifest next update: Fri 27 Mar 2026 02:01:59 +0000
Files and hashes: 1: 12UJF4HYmWUHj7PV3zv7e2Gsrnc.roa (hash: MFtJUTjKP5EZY8W9GLM2rnUmvMbXeeAVoqfoR4gu6rY=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: ItwGhSrJg64hRSajGKrmJ+3PEfZs5J8t4HXFXYzHoA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:88:f4:db:8c:67:32:c8:0d:c1:35:25:c2:1e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Mar 26 02:01:59 2026 GMT
Not After : Mar 27 02:01:59 2026 GMT
Subject: CN=019da7c7cc6a6f4b08da20dfaea473d7f6fec12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:ef:30:59:59:91:32:3b:43:6f:2b:35:bb:
45:e7:cc:0b:c0:74:4a:07:fb:5a:36:59:a9:5e:06:
6d:ad:de:bb:c3:ad:3d:74:21:f1:72:16:65:2f:ae:
0b:49:e1:60:8e:63:bd:a7:0f:73:9f:ac:cd:67:fe:
6a:4d:98:cc:76:8c:4b:2e:96:33:b6:96:b1:81:39:
62:37:3b:7f:19:0d:6c:fb:38:70:2a:90:cd:80:9d:
6f:46:3a:00:9e:9a:f3:61:e7:47:53:d4:72:ca:01:
36:ba:1f:35:63:ac:be:4f:fa:01:23:c9:c5:5a:9c:
0d:7e:06:c4:b2:9a:ee:2d:89:64:4f:d0:5b:e5:86:
5f:6c:4c:7e:8d:58:0b:c4:d7:52:e3:cd:5a:f3:2b:
f7:ae:66:b4:c4:a6:39:cd:c7:17:9e:f5:79:34:fa:
b9:ee:eb:3b:a3:64:42:8c:7b:9e:c7:e2:43:eb:d0:
d2:13:9f:70:02:9a:24:e5:14:63:75:59:57:af:50:
d7:3e:60:2e:dc:0c:1f:50:68:28:0e:14:1e:f5:a0:
17:80:d8:fc:de:ad:65:43:03:18:be:1c:1d:ba:00:
0e:39:c1:88:ae:e6:ac:77:d0:85:5f:1d:65:fa:13:
2f:91:d0:ad:1c:56:20:28:a8:60:e6:ac:a3:1b:96:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9D:A7:C7:CC:6A:6F:4B:08:DA:20:DF:AE:A4:73:D7:F6:FE:C1:2D
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d5:0e:49:d3:f9:69:eb:94:60:25:43:96:2f:a7:31:ae:4c:
49:db:16:b9:43:59:13:34:8e:07:71:1d:20:e8:72:a1:7b:82:
03:d9:0e:0a:43:c9:32:5e:c2:3c:84:3a:80:a8:8c:c0:9f:c0:
5b:0d:58:93:89:3c:a9:e7:fa:e8:03:7b:7a:19:a4:f6:de:20:
96:61:76:75:b7:32:93:ee:2d:f8:bc:07:0b:55:68:c3:49:a0:
36:10:eb:64:40:28:36:fd:68:96:5c:02:16:4c:f9:70:60:be:
ac:ca:bf:a0:55:e6:61:d7:a9:e0:83:03:52:ad:a6:03:2a:87:
c6:01:6e:a5:50:90:3e:c0:5e:c1:44:9f:02:a6:e9:e7:01:ef:
6f:91:3c:a0:2b:fa:3a:10:b1:e1:2b:a3:c9:30:fc:a0:b2:10:
b2:7a:9d:fe:9c:13:16:86:78:a9:b8:02:96:83:91:9f:0a:76:
a3:5d:57:39:90:a2:bf:7a:71:31:83:ce:cd:74:77:84:61:53:
eb:41:7f:29:37:c8:3a:3a:f9:e8:ff:2f:4c:50:79:56:07:3d:
f4:34:90:28:3e:1b:a7:8e:68:84:0a:37:ef:73:b5:de:14:db:
87:fa:c6:fc:9b:94:94:2c:33:46:53:4d:0a:c6:35:6c:f6:67:
c8:bd:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:14 2026 by rpki-client