Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: mvyHlRdOmS1AgoSDc9wW+73EZQiKW/AQNsPethUQpLw=
Subject key identifier: 0C:33:F9:27:C0:BE:48:A7:9A:1C:D4:E5:D3:1F:C0:B6:A8:C2:8A:5B
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 019E1D9101B9639FC92E634B44D0FA5D865F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 0C47
Signing time: Tue 12 May 2026 19:01:42 +0000
Manifest this update: Tue 12 May 2026 19:01:42 +0000
Manifest next update: Wed 13 May 2026 19:01:42 +0000
Files and hashes: 1: 2e8QyLYMT4HWwfUGaImHeP_tGTY.roa (hash: s9h03bDzb0Cy0LO5kY73K6dn/N9HUik5sgJSj+kQ3k8=)
2: Y28Wd-rLHaf4YfijKKoceP6pCO4.roa (hash: T4TEmypQSq/p5gS6mPa8ZhWCLwbTNsBlfya0BmZTPbQ=)
3: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: xutySF1iRrNF3OgA/mcNtb8pI9SwQtxPL4otmM3/W5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:01:b9:63:9f:c9:2e:63:4b:44:d0:fa:5d:86:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: May 12 19:01:42 2026 GMT
Not After : May 13 19:01:42 2026 GMT
Subject: CN=0c33f927c0be48a79a1cd4e5d31fc0b6a8c28a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:78:38:f1:73:ca:d4:8f:05:1b:8f:6d:d9:
5c:36:c2:1a:81:98:44:be:94:b1:51:4e:b2:fe:6b:
bc:a4:4b:23:23:50:40:05:8e:76:a2:2d:28:e7:f0:
b5:cc:a2:48:88:4d:ad:75:71:3e:db:78:e3:d1:1f:
4f:ca:0e:23:c7:32:de:b6:7b:af:88:1f:50:d2:bf:
2a:b7:d2:36:d5:fe:81:b7:8d:17:f5:b3:a2:60:9e:
55:fc:6f:a4:87:60:f2:3a:72:c4:cf:89:11:4c:c7:
8f:56:5f:88:df:eb:be:d1:a8:3f:6d:d8:1f:b0:76:
f8:1e:7d:53:61:7c:b0:a7:52:98:5c:2d:1b:f5:b3:
2e:cb:e4:3c:c1:36:00:7b:01:1a:61:b3:fc:6f:5b:
ff:ec:d6:8b:df:c0:5c:03:68:f9:63:5b:7b:f5:41:
e8:d7:b1:00:48:05:7f:21:08:da:d7:37:fa:1a:12:
1e:4a:05:2f:7c:28:f9:62:88:0c:61:26:86:05:2d:
08:fe:ac:56:03:84:a7:bd:d2:90:b7:93:fb:1a:c1:
13:7f:b0:e8:68:4c:f6:24:9b:8b:eb:35:eb:0b:09:
2d:c9:4d:f4:7d:f4:7d:61:81:66:1d:ce:19:50:18:
14:fe:fa:e2:41:3a:72:d4:98:cf:62:84:dd:2c:c1:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:33:F9:27:C0:BE:48:A7:9A:1C:D4:E5:D3:1F:C0:B6:A8:C2:8A:5B
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2a:f9:8f:3c:c1:15:ad:2c:be:a0:99:0b:4a:e4:7a:60:48:
45:d1:83:57:f7:d0:7c:9d:66:81:e0:44:87:b5:63:17:82:22:
24:b7:06:91:86:b0:ac:a5:97:31:e4:50:34:1e:54:a5:99:42:
ac:fc:81:27:f0:6c:3a:fa:66:f2:64:d4:93:eb:c6:74:08:38:
27:8f:4e:b6:b8:a2:6f:89:30:12:1f:c7:de:c6:cc:1d:d2:46:
5d:b4:99:4a:6e:19:d8:6d:ed:c9:64:59:90:97:a5:69:ff:5a:
bd:90:1b:64:27:bd:3a:4c:f2:9a:8a:70:25:99:ab:cf:86:4b:
74:e2:41:f7:6a:02:8c:03:29:72:00:cc:50:7c:99:61:95:c6:
17:10:e1:fa:06:5e:67:98:97:15:43:ee:94:66:5c:9a:ab:18:
3c:18:62:8b:71:85:68:da:05:98:92:2a:47:47:6b:82:49:54:
0f:e2:ea:53:34:d9:e5:c9:b1:b2:40:e9:c5:5c:64:ac:ed:8f:
71:63:1a:d1:7f:90:48:74:93:65:5a:2a:a3:06:be:f2:ad:4d:
6b:99:86:c8:de:af:80:bf:66:46:7c:51:b7:67:e1:8b:b7:cf:
45:bd:b6:b6:98:60:41:72:75:ee:72:dd:22:3d:a4:9d:8d:04:
91:e6:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:41:24 2026 by rpki-client