Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: OdGU16XDiadkookYUMCANlJRg4potECQxIl9EHvS3/8=
Subject key identifier: A7:42:99:96:C3:E2:AC:E7:51:DD:66:0C:33:C1:DB:1C:F1:6C:EB:61
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 019D28847452CA65B5A2676E8017D2FA881C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 1532
Signing time: Thu 26 Mar 2026 05:01:02 +0000
Manifest this update: Thu 26 Mar 2026 05:01:02 +0000
Manifest next update: Fri 27 Mar 2026 05:01:02 +0000
Files and hashes: 1: M81Qxbtts07Ib9z19i7shUVMtA8.roa (hash: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: OkEIInT0iU/By9Y0owK5/hV3ZYDcBi2s+KAfBJ6dtA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:74:52:ca:65:b5:a2:67:6e:80:17:d2:fa:88:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Mar 26 05:01:02 2026 GMT
Not After : Mar 27 05:01:02 2026 GMT
Subject: CN=a7429996c3e2ace751dd660c33c1db1cf16ceb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:49:63:3f:69:67:d3:af:3a:9e:b8:25:35:
06:d5:b1:c0:50:e9:cf:9a:8b:ae:59:d2:36:06:1d:
f5:f2:a7:c9:3a:f3:82:3e:54:6e:0a:b7:23:6c:a5:
6b:37:b9:9f:21:49:35:32:85:ca:25:63:60:f9:94:
eb:9f:d7:b8:2e:a4:31:21:e1:d6:f6:6e:89:20:39:
9b:89:c9:12:c6:7f:7b:da:8c:68:c2:de:9e:82:b7:
57:9b:d8:be:ae:f8:b1:f7:d4:70:b3:df:6e:e3:66:
af:9e:78:7c:28:e5:69:9c:bb:63:6c:48:ad:29:5b:
91:ce:af:ae:bf:b2:56:62:33:d8:77:a4:f7:f6:2f:
4d:3e:d4:cf:91:61:eb:de:3d:64:09:06:aa:79:61:
15:e4:11:63:a7:2a:c9:99:a1:96:ff:9c:68:3f:ec:
bd:3a:db:42:b0:fa:9e:64:62:6d:c4:30:a0:2e:41:
f1:50:bb:52:fc:26:85:a9:7d:73:9d:be:da:fa:79:
a5:d0:86:c0:a2:a1:32:48:66:67:f8:c2:a1:97:71:
64:fa:7d:9a:ca:a9:1c:69:94:2b:82:bc:0c:eb:56:
05:eb:7d:c5:b8:62:ea:64:5d:f2:e2:d1:01:f3:6f:
2c:cb:ed:f9:4b:be:15:86:ef:14:ae:36:a7:49:01:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:42:99:96:C3:E2:AC:E7:51:DD:66:0C:33:C1:DB:1C:F1:6C:EB:61
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b5:33:cf:10:18:68:16:55:92:5b:9d:73:b6:3c:5c:78:66:
ec:f6:a8:e2:0d:99:3b:c3:85:07:f9:54:ce:d2:a5:4c:51:f7:
a7:c7:f8:f1:ec:57:6b:78:5b:81:ce:a3:70:c3:29:a1:94:85:
67:6c:da:00:9f:9b:5e:99:f6:11:12:68:13:7b:38:a4:3e:1d:
ee:ca:82:58:3c:38:bb:e8:c0:97:6d:5c:e3:af:5b:c7:0f:09:
9c:bf:38:9e:2a:c4:2f:9c:59:1e:c8:d2:af:91:57:d2:8f:55:
ee:28:2e:c8:50:66:95:4e:56:2e:35:78:46:9d:22:89:84:1c:
a4:75:d1:da:a7:e8:02:4f:2a:ec:d9:f3:4b:22:5c:df:4d:00:
a3:e8:a7:a3:97:09:e3:a2:ab:af:e6:65:3b:cc:18:f4:02:8e:
22:f7:0c:0e:3f:15:5f:a1:e1:33:a7:15:0e:1f:c4:fc:f5:1d:
17:f5:0b:03:94:ab:e8:cc:23:7d:d4:a2:d5:37:43:48:7c:03:
c8:30:b9:37:8e:28:0e:6b:26:26:e7:04:84:34:b9:3c:f2:f7:
d3:cf:e1:16:65:2a:89:9f:48:6e:d7:56:8f:ff:1f:41:1e:4f:
56:32:b1:6f:12:72:22:ce:fd:08:47:07:2b:61:c3:15:34:44:
21:23:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:31 2026 by rpki-client