Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
File: fhN6p6PGSUQ0z09AqLSOz8Agye8.mft (raw, json)
Hash identifier: KH2nvgaAtGmEligyKOmwcDf5JGKwB/ofFjiTULVX9VA=
Subject key identifier: 2E:74:33:A2:2E:9F:B7:17:82:2D:C6:35:BB:1B:01:ED:1A:95:7D:ED
Authority key identifier: 7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
Certificate issuer: /CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Certificate serial: 019D2772CAF94DD7DE71DC6C5A8DA90AAD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
Manifest number: 026E
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: 9Srvn7WkPvAkxmGJNBo0PeKuqeE.roa (hash: 4/kn8//kMdNf7GsYCYVFUpw6FQ06SMpgTw2lQ8uxiZY=)
2: fhN6p6PGSUQ0z09AqLSOz8Agye8.crl (hash: 086jtOU4gmLC9CK9zU5HXDdjIitz+ACKrgshto4OFJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ca:f9:4d:d7:de:71:dc:6c:5a:8d:a9:0a:ad:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=2e7433a22e9fb717822dc635bb1b01ed1a957ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:9b:6f:0d:e3:b6:cc:4b:63:7e:83:58:e5:
cc:27:55:44:33:b7:98:05:dc:af:99:ff:94:07:3c:
ac:b7:89:29:15:d5:e1:7e:9f:a2:ea:cc:7b:55:97:
7c:8d:c1:fd:27:03:c8:a7:72:2c:8e:80:0a:e3:49:
8e:9f:b9:a9:5f:d0:b2:77:46:06:8d:04:be:a2:d4:
3a:a8:67:8f:ea:12:cd:74:eb:b6:29:33:4f:61:f2:
52:43:79:5d:ed:43:28:3e:5e:04:5e:e6:6f:19:28:
16:4f:ec:37:65:83:a2:ca:ed:94:a0:fe:bb:a3:f1:
8d:9a:b8:2f:ef:07:83:0a:a9:f7:a8:6b:22:5a:a5:
d0:9b:43:7b:06:06:0b:0a:5d:14:49:4a:fc:12:e8:
0b:25:57:59:d4:bf:e0:59:50:14:02:72:ce:fd:8d:
e2:22:74:fa:d2:11:50:77:c4:b7:5a:db:3c:6e:d3:
bf:9e:69:8d:b3:f2:25:da:30:07:3a:9e:b3:b7:c7:
c5:0e:c0:4a:5c:a7:66:31:eb:25:42:d3:8f:0c:6d:
97:a5:95:72:cf:9d:f9:72:f7:54:dc:90:65:78:e4:
98:c2:45:c4:40:82:45:17:ca:7d:74:6b:9c:6f:b8:
76:19:4e:8a:10:43:09:7b:1c:3f:45:ba:21:2a:c5:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:74:33:A2:2E:9F:B7:17:82:2D:C6:35:BB:1B:01:ED:1A:95:7D:ED
X509v3 Authority Key Identifier:
keyid:7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f9:f8:c3:b3:97:a6:bf:2c:7b:6c:fd:12:a7:a2:f2:db:ac:
b6:d8:0d:e1:c6:31:a0:74:9d:e2:2f:15:75:4b:e9:bf:a8:7f:
80:4d:1a:6c:04:57:0f:6b:c7:a8:c2:ed:7d:f6:b8:82:7a:8d:
39:d5:b3:31:a7:c5:ec:52:35:d8:37:75:c3:d3:e8:e2:cd:bf:
19:f1:b0:df:c7:53:48:02:8b:c4:dd:d4:59:9f:a4:97:d2:ba:
5c:63:1d:44:83:5b:53:cb:b6:45:2b:60:a3:c1:42:73:67:3a:
0f:13:45:c4:b7:6f:be:a4:98:72:16:8e:72:aa:da:38:ea:36:
8a:b8:e4:1b:e4:b9:48:eb:74:4c:24:1b:02:98:98:28:35:22:
80:13:76:bb:6d:bb:fa:36:3e:c8:23:05:aa:41:3c:ee:f8:37:
d4:53:89:91:78:6d:55:10:b3:52:0f:33:d2:3b:7a:e9:04:10:
5b:e8:1b:ef:17:1b:d6:e6:7e:8a:02:99:e9:b0:f0:da:7b:30:
f0:4b:da:28:c5:1e:26:5f:ca:31:67:bc:bd:2f:b2:39:8b:4a:
29:01:bd:56:86:8e:92:50:34:3f:7b:79:c2:9e:50:93:93:53:
2c:31:03:67:48:6c:94:2a:0a:20:7b:67:64:5e:84:8b:cf:bb:
8b:d0:9d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:51 2026 by rpki-client