Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: 7csnENy6c5zvuxjYPR9g2H+zhlBEkUR960OfWQo1/Kk=
Subject key identifier: 96:72:F3:EC:DA:AA:96:35:93:53:E4:A0:A6:4D:EE:96:85:BE:B1:17
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 019D28F27481B8B01E76D847930BFFCC52F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 185F
Signing time: Thu 26 Mar 2026 07:01:11 +0000
Manifest this update: Thu 26 Mar 2026 07:01:11 +0000
Manifest next update: Fri 27 Mar 2026 07:01:11 +0000
Files and hashes: 1: 7S2s5NvMEWjMmdP4tHVPuR44TrM.roa (hash: tQYbzfuvYbUtsAHpJGcR8MOd0wYit8Udr+nLe5FW+kY=)
2: N_rd1-iO2Zco7czWxcygCkfPMco.roa (hash: fNgSQr1pcqvcbsbdFSVdiphe05QVeyRTAnd6yBvX/h0=)
3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: g0j/MZRpeTdRBbGwAZOnsSWPDKgi35Ro1iYbDX0+b9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:74:81:b8:b0:1e:76:d8:47:93:0b:ff:cc:52:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Mar 26 07:01:11 2026 GMT
Not After : Mar 27 07:01:11 2026 GMT
Subject: CN=9672f3ecdaaa96359353e4a0a64dee9685beb117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:ca:28:7b:2e:a9:0e:8e:55:64:ea:97:f2:
75:f0:cf:26:2a:fd:0d:f2:fe:5a:ad:e6:c0:cb:ce:
d2:18:54:78:26:ab:a0:86:0b:74:11:28:a3:f6:99:
51:5b:18:20:33:0e:a0:34:b0:2e:df:e3:6e:01:bf:
19:d8:7a:9f:9f:38:54:85:37:4f:f4:34:33:3c:d1:
db:54:ce:f4:e3:3f:42:ec:62:7f:2b:6f:c5:03:0e:
ab:3d:10:e0:56:b5:94:92:05:f4:da:d2:1f:46:c1:
c0:78:1a:87:79:29:8b:1f:2b:da:4b:4f:3b:e3:2b:
fa:9c:4b:8e:2e:d2:5c:60:9c:08:bf:71:95:ef:de:
33:00:01:2b:89:c2:92:9d:02:df:ad:61:8f:39:78:
dd:63:8a:96:fd:50:6e:6c:cc:dc:57:7d:4b:0d:43:
c4:56:b4:51:9d:b8:31:fc:ca:4d:f0:5b:e9:5b:4e:
bf:93:e3:13:de:8b:21:c4:48:5b:71:3d:8a:ea:0b:
6b:63:36:fe:2d:9e:d6:68:11:68:e8:a9:84:06:a3:
a0:ed:c7:5e:ad:9c:67:83:10:58:7c:8b:32:25:11:
1b:54:74:8f:af:31:ea:be:1e:69:ca:9e:a8:09:ca:
59:c5:ac:17:5c:63:48:0c:47:ad:42:12:d4:f5:ab:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:72:F3:EC:DA:AA:96:35:93:53:E4:A0:A6:4D:EE:96:85:BE:B1:17
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cd:46:88:5d:20:35:ed:3b:ad:8b:f1:f7:51:75:2e:14:4c:
af:00:b3:43:0e:e0:57:91:dd:20:75:fb:6b:31:fd:ae:a6:67:
61:b3:f6:be:51:41:22:56:be:09:ee:1c:e0:8d:4c:72:01:13:
7c:cb:1b:87:1c:0c:65:b6:1e:bc:10:d1:03:42:b7:79:fc:71:
a5:dd:dd:9d:44:10:7f:2d:05:9b:7a:d3:ba:37:c5:fe:66:f1:
0a:fa:b0:8e:0e:83:b9:16:7a:06:c0:1b:e3:6d:b8:fd:77:ae:
5d:dd:30:66:f7:cf:53:0c:4e:ab:20:49:71:e0:0c:a2:f1:cc:
66:40:7c:8f:9c:4d:30:e8:28:57:b1:d6:7c:cf:e8:84:3a:c7:
22:97:f1:58:f0:fa:a7:cc:72:58:7b:ec:b9:a6:2c:18:df:81:
fc:df:ef:73:6f:3d:75:64:bc:34:58:6a:f5:3e:5a:c6:13:0e:
07:ac:b8:20:f0:f9:2c:83:43:3c:af:1c:94:85:a0:0b:a1:72:
a8:7e:78:5a:5a:e1:fa:cf:73:33:01:01:0d:d4:4c:5c:40:06:
21:04:68:86:56:f7:6d:46:73:95:70:d6:9f:73:2d:78:c1:3c:
c5:1b:b8:ec:60:c5:b5:b2:2f:1c:74:65:44:27:6e:4b:d1:a0:
ed:42:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:10:36 2026 by rpki-client