Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: IWvQj7kWkD10OXQHmHBLZjG/pLHDYGbcA/pb6oShP4Q=
Subject key identifier: FB:25:49:CC:00:3F:17:F5:37:AC:66:F8:FF:9E:0A:FF:C0:D7:1B:EB
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 019D284D9FA51D242880584FB7FB163D2398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 05A0
Signing time: Thu 26 Mar 2026 04:01:08 +0000
Manifest this update: Thu 26 Mar 2026 04:01:08 +0000
Manifest next update: Fri 27 Mar 2026 04:01:08 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: rl7ucV0J/gyHRBBEw0mnfBN65Tuw3pfn7z81X3ErPQ4=)
2: v5j62T31CGbyesihQ2ZxZfpouT0.roa (hash: /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9f:a5:1d:24:28:80:58:4f:b7:fb:16:3d:23:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Mar 26 04:01:08 2026 GMT
Not After : Mar 27 04:01:08 2026 GMT
Subject: CN=fb2549cc003f17f537ac66f8ff9e0affc0d71beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:c2:aa:49:88:06:4b:54:a1:de:1e:8a:d6:
d9:be:9a:eb:3f:c5:f2:15:1c:3e:4e:9d:80:ae:18:
95:2f:6d:d1:4c:b2:87:90:13:3a:96:ce:33:4e:a7:
07:46:44:71:d6:0a:e9:eb:1a:fd:a6:c1:e8:a7:71:
95:9e:63:84:9e:b8:76:9a:bc:42:22:c2:8d:fb:45:
7d:2f:f4:b0:0e:33:5b:6a:0b:e9:80:bb:c7:02:54:
7a:ef:f9:47:62:44:a2:7c:1c:ee:f8:27:e6:b8:29:
43:fa:6d:99:60:58:37:5e:90:18:43:2f:8f:e2:ff:
81:44:7f:c2:fb:75:27:ef:d9:ee:e7:df:00:3e:10:
51:cb:a9:38:89:7f:0a:28:ac:d5:40:bc:fa:81:15:
a3:fd:d7:c1:82:1c:c7:07:30:1b:e0:e3:52:ec:23:
dc:6e:ec:eb:0a:47:a5:49:86:13:94:53:fa:58:3d:
3c:6d:b2:1e:ac:52:28:56:e6:3a:2b:7f:9b:d2:42:
48:9b:45:a5:bc:91:48:b7:19:60:5c:97:b1:63:66:
18:66:d6:8d:fa:8b:2d:f8:f2:d9:05:c9:86:e7:6e:
47:5b:fa:11:31:6f:a5:2e:6a:81:3a:1a:07:3f:58:
2c:31:fa:0c:43:5e:e1:22:f3:5c:5b:10:b1:be:e4:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:25:49:CC:00:3F:17:F5:37:AC:66:F8:FF:9E:0A:FF:C0:D7:1B:EB
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3e:d1:5e:7c:e3:00:89:41:45:34:a5:f1:15:d4:df:4a:b4:
b7:4c:39:7c:bb:1f:da:46:09:83:46:63:17:f3:6f:9a:73:af:
73:b8:53:38:72:bf:f4:d5:28:c4:ec:6a:00:aa:30:c1:9d:9d:
4e:06:eb:4a:d1:f8:c0:0d:e6:53:53:de:9d:81:2c:79:2a:5a:
91:27:3b:55:30:7c:92:ad:da:40:e8:a8:52:4c:9e:55:02:2c:
34:03:77:db:68:be:ce:06:39:85:2a:ac:36:f0:ef:d3:bf:76:
e7:80:8e:bf:71:a4:c8:93:47:28:dc:a0:c0:b5:69:d7:6e:6d:
72:c9:5e:fa:50:b8:2e:da:f6:ce:29:3c:3c:ab:1e:32:c2:a2:
09:4b:e7:93:ba:61:1e:35:9d:02:81:cd:99:de:81:8e:95:5a:
b3:64:f8:70:af:c2:b1:e3:2d:ea:d2:99:3c:d6:d9:2c:c7:53:
7b:a2:5e:a3:c5:f1:ce:ec:81:74:d9:65:51:d5:58:6b:84:8f:
6d:04:8c:86:39:63:70:8f:ac:6a:d2:b4:01:46:55:f6:71:b9:
7b:32:0d:58:32:20:a7:d4:37:e5:3d:57:97:25:fb:97:49:b6:
ba:5e:ce:b6:20:bb:40:47:09:43:71:38:61:49:94:ca:bb:8c:
26:9e:0d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:36 2026 by rpki-client