Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
File: fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json)
Hash identifier: 2cN9rPp9OTsVFerBU/YSj+ePFvFXRJBgBPnPtXKds9E=
Subject key identifier: FB:32:B4:EF:C3:83:8B:DA:38:E8:C8:8D:CB:5C:2C:C2:DC:6F:EF:5C
Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Certificate serial: 019D2704923A8E3EE766D71979E0659DAFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
Manifest number: 026F
Signing time: Wed 25 Mar 2026 22:01:44 +0000
Manifest this update: Wed 25 Mar 2026 22:01:44 +0000
Manifest next update: Thu 26 Mar 2026 22:01:44 +0000
Files and hashes: 1: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: SRSwFUm5gNgPCRTgWhmAOeH9+l4cY+7ijnuqg9DjWxY=)
2: hhYndYmrtj6UVK4MXLjISC5kjY8.roa (hash: Hp6kG7ylNYSrFI+JCOb5ieLSxf03lMDks7YDXEs5v7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:92:3a:8e:3e:e7:66:d7:19:79:e0:65:9d:af:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Validity
Not Before: Mar 25 22:01:44 2026 GMT
Not After : Mar 26 22:01:44 2026 GMT
Subject: CN=fb32b4efc3838bda38e8c88dcb5c2cc2dc6fef5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:a0:0f:d3:dc:26:f3:1d:6d:e9:f7:62:88:
0c:2e:1c:4f:70:fe:e2:87:40:51:9d:ad:2b:b7:77:
31:fa:48:3d:e8:66:f8:49:22:0d:ea:0a:5e:6a:96:
9f:1b:ef:ef:43:3f:d0:4f:04:b8:e0:49:89:d4:be:
41:2b:8c:c4:f0:41:8c:a3:03:51:e4:08:3e:13:65:
5a:59:bb:94:25:d8:2a:ce:20:b9:f6:26:a5:f2:82:
3b:53:1b:d2:a7:3d:54:81:a0:e4:aa:af:3f:cd:a5:
d3:5d:44:29:72:44:f4:48:cd:ab:3e:bc:d1:a0:cd:
7c:1d:7d:69:d2:3d:85:a7:94:8f:c6:fb:ab:57:bc:
c7:e4:91:72:e7:15:7d:65:5b:29:d8:d6:c2:b7:3b:
13:16:bb:06:1a:a7:77:93:18:0e:7b:3f:8d:e4:3a:
80:46:3e:90:f5:b1:bb:3c:d5:6e:3a:8c:3a:c3:cb:
53:ba:4a:db:ea:61:00:3f:70:0b:44:d9:ea:3d:e8:
fa:fd:2f:10:da:1a:c6:81:c3:0b:e7:15:32:c9:15:
b4:64:29:b0:fe:d5:2b:e2:c4:31:c1:b8:b3:6d:2d:
3c:b1:00:ce:89:5a:45:f7:8f:28:5b:dd:d7:4c:ac:
42:5b:b5:08:6f:7b:c2:84:51:ec:96:5a:7c:85:8c:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:32:B4:EF:C3:83:8B:DA:38:E8:C8:8D:CB:5C:2C:C2:DC:6F:EF:5C
X509v3 Authority Key Identifier:
keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:02:c1:e9:0b:b9:44:0b:9a:c9:41:36:80:3d:e7:9e:42:8d:
c7:03:ec:cd:79:80:e6:5d:6d:04:6f:c9:86:88:d0:73:85:f6:
85:f3:a1:03:8c:4a:10:b1:97:b1:29:5b:5e:d8:ba:6b:9f:13:
91:e4:77:85:2f:52:41:25:a7:fc:0f:4f:52:24:f0:63:99:47:
50:81:c5:0d:4a:7b:93:83:87:a7:d1:8a:6c:48:8b:e2:0e:c0:
3a:53:24:21:ef:29:0d:db:dc:32:d7:45:bd:ec:9c:8e:3a:41:
1f:c3:8d:9a:8d:a5:5b:6d:a9:13:c0:03:0f:92:20:e1:40:06:
59:2e:14:c2:dd:f5:fc:66:4f:95:28:6d:91:3e:1c:f2:42:aa:
33:04:43:bc:28:e5:db:62:59:56:a6:92:aa:45:af:f1:7b:ce:
18:ba:46:93:f2:98:04:96:2a:25:5d:9e:b4:cd:21:a8:c3:ec:
f9:5e:c9:2a:91:fc:7d:61:02:21:ed:2c:93:02:6f:b3:c0:6c:
11:c7:7d:3c:fb:d5:33:85:b9:9d:7c:de:f5:a1:05:df:2b:08:
24:17:e0:4e:39:70:af:fc:b9:03:aa:bb:11:94:52:a3:51:50:
55:7c:6d:16:27:5a:a1:89:4b:c5:c8:92:95:ad:0a:25:51:3b:
f2:c7:da:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:43 2026 by rpki-client