Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier: EpxTVG3jmoZwkB77ETFVy4ll85MiBOjgl/5E5Z2dhp0=
Subject key identifier: 75:8C:C4:99:80:2F:08:03:05:96:8D:05:59:00:5A:AE:4B:6F:EA:D5
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial: 019D2695CB3DFB46318D33D9A1A00B243EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 20:00:44 +0000
Manifest this update: Wed 25 Mar 2026 20:00:44 +0000
Manifest next update: Thu 26 Mar 2026 20:00:44 +0000
Files and hashes: 1: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: G0i9Jrto7CVJApEbGisedd9mitc/ZSJJvu0YsQto0DY=)
2: uuyf9SL1IzQsxC4GwsHv2Aqvi6I.roa (hash: bWBF8Lzkc1fXhVOcL+v1lM3xBjFclLxIjyc/HWhj0fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:cb:3d:fb:46:31:8d:33:d9:a1:a0:0b:24:3e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Validity
Not Before: Mar 25 20:00:44 2026 GMT
Not After : Mar 26 20:00:44 2026 GMT
Subject: CN=758cc499802f080305968d0559005aae4b6fead5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:68:3b:7e:e3:87:3f:be:47:7b:af:94:4d:da:
65:c4:a3:67:89:5f:db:b0:0f:6f:95:d2:5c:fb:25:
b4:a0:f3:86:b2:d0:0f:03:e0:d8:a3:0e:ce:12:97:
9a:8b:db:31:52:15:27:ac:2e:26:ce:b5:3c:cf:10:
b3:cb:2d:44:38:32:94:e0:08:64:4c:9b:f6:85:8c:
2d:78:29:48:f3:a9:b6:cd:fd:b1:84:a9:d8:63:51:
a7:76:87:49:6d:36:3e:c2:cb:2a:dd:82:0c:f1:91:
33:ce:a3:d9:c9:a7:ce:97:e1:20:12:10:6c:be:26:
1d:60:dd:c8:27:a0:7d:75:48:86:44:4c:a5:6e:ed:
50:a8:d9:3a:49:2c:85:15:cd:be:3e:ff:d6:1f:91:
33:85:45:42:24:73:b4:84:50:9a:9c:23:2b:dc:ac:
ef:58:0a:a3:0a:de:e5:dc:6d:b7:79:10:e2:c1:71:
83:36:e5:d8:bd:4e:91:8d:0c:22:f8:d3:80:4f:32:
ae:5f:ec:4b:c3:77:70:49:3c:1c:42:72:02:30:30:
02:de:e4:7b:28:50:a9:77:67:56:5d:f8:6f:32:e4:
9c:91:24:d3:c3:97:16:40:d1:f8:b5:9d:18:5b:b1:
03:68:bc:d0:7f:38:c4:dd:81:09:b7:05:d5:b5:67:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8C:C4:99:80:2F:08:03:05:96:8D:05:59:00:5A:AE:4B:6F:EA:D5
X509v3 Authority Key Identifier:
keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d6:bd:2b:c7:ce:94:82:1e:01:bc:67:de:eb:fb:43:c2:fb:
7e:8c:16:4b:35:43:79:c7:a8:94:3b:ee:94:2a:82:a5:67:27:
aa:b2:a5:62:b5:b5:8a:b0:40:34:6e:56:e7:c8:44:13:9d:bb:
69:ec:ff:6a:0f:be:68:df:79:97:70:05:73:5d:ec:cc:4b:32:
e0:ab:0d:82:89:98:3a:a4:8f:29:a5:7c:7a:50:83:2e:f5:45:
a3:73:66:ff:92:f2:66:8c:86:f0:1d:09:5d:35:14:5b:6e:bc:
39:a8:11:86:09:40:d6:e7:0e:0d:bc:5d:9f:83:74:05:a5:a8:
c1:5a:16:2c:cd:b9:a8:94:21:69:53:d9:9e:d7:01:0a:5a:44:
e9:4e:d5:96:ff:3a:9c:58:5f:50:36:62:1d:b0:e9:4c:37:ff:
9d:28:c6:6b:5a:a3:13:b9:8d:37:4b:9b:0a:b2:8e:56:7c:d6:
da:04:30:5b:95:6a:7d:fc:7f:51:a0:d6:5e:7f:ee:12:49:09:
52:d0:76:a8:b0:e0:b8:93:d6:ec:6f:e0:12:c2:2a:d9:e4:c3:
89:79:ab:70:75:c8:e5:bd:74:2f:99:2b:bf:ee:14:df:2a:b3:
3b:ed:a1:8c:0f:9a:a7:0e:55:c4:bc:5a:a4:b3:f6:0f:ee:3d:
5c:16:99:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:12 2026 by rpki-client