Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: a/wGraRxhhQ5oaxqIODVzXqpfXdVvKFIhnDsA155j64=
Subject key identifier: F8:B9:3B:14:FA:5A:AA:1A:9D:C1:D4:07:62:35:CD:8B:44:53:D9:5F
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 019D29CEE0C58426A396747F6BB1E1BABA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 07C8
Signing time: Thu 26 Mar 2026 11:01:56 +0000
Manifest this update: Thu 26 Mar 2026 11:01:56 +0000
Manifest next update: Fri 27 Mar 2026 11:01:56 +0000
Files and hashes: 1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: YWY9iAbUUvU3eQCdsKI6tLqKCx/diDOqKtxixj5ONc8=)
2: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (hash: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:e0:c5:84:26:a3:96:74:7f:6b:b1:e1:ba:ba:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Mar 26 11:01:56 2026 GMT
Not After : Mar 27 11:01:56 2026 GMT
Subject: CN=f8b93b14fa5aaa1a9dc1d4076235cd8b4453d95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:8d:06:24:2d:e1:6f:d7:db:36:0c:0c:ee:
73:bf:73:8d:54:39:6d:6f:b5:7c:0c:0b:b4:b1:5a:
d1:2d:cf:e0:22:04:8f:26:09:91:80:b6:ca:21:1b:
ce:b2:66:c5:7c:31:74:40:63:e8:35:70:cc:a0:48:
ee:f4:93:d1:50:9f:64:b7:30:dc:a6:10:d8:17:db:
56:f3:a4:5f:d0:ab:6d:0b:f8:fe:d7:a0:4d:1c:ab:
44:bf:0d:7a:8b:b8:cd:16:d7:f7:43:ee:4f:ff:ee:
37:6a:4e:ce:d7:f6:1a:58:f1:d1:cf:c2:b0:5b:74:
dd:68:dd:b2:16:41:31:bd:b3:13:89:59:20:5b:13:
a9:b0:b6:05:cb:3a:dd:23:bd:1b:ea:88:87:26:a5:
4c:10:51:9c:d8:e0:0a:95:ef:32:d7:4e:9f:d7:50:
19:cd:53:b7:8b:98:a7:d0:47:54:58:3f:d9:7f:44:
56:52:69:ef:42:23:8e:16:eb:ce:dd:4c:1c:ca:8e:
08:a5:7e:ed:b0:c8:51:cd:78:0f:21:82:64:b9:8d:
bb:c8:ac:d3:c5:c3:2d:81:a2:62:93:1c:56:32:30:
b9:b1:63:d7:9f:cf:53:34:7d:c3:ba:0c:87:24:ce:
43:c7:f4:f6:e0:92:c1:d4:76:2e:8c:a3:64:ae:fb:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B9:3B:14:FA:5A:AA:1A:9D:C1:D4:07:62:35:CD:8B:44:53:D9:5F
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ba:09:15:6b:2e:22:56:6f:ad:07:d5:bc:2c:b5:bd:8d:1f:
80:f4:17:c2:42:5b:20:9b:a1:66:bd:f1:22:e0:35:46:c0:fc:
54:34:3b:99:26:c0:e6:39:85:e5:31:3c:51:6a:af:2e:31:72:
51:1d:29:22:7a:62:e2:22:b6:67:3a:de:51:3d:4d:4e:37:24:
c8:4c:c8:e2:4e:47:f0:a2:a3:ab:3e:9f:80:e4:1d:25:8b:c7:
4e:45:89:32:79:fe:d4:0a:58:a9:14:9c:93:db:d3:4d:5a:f0:
d1:38:80:69:87:98:c8:3e:5a:f6:ad:da:36:d4:e3:f0:54:9f:
2b:97:22:dd:22:d2:67:bc:41:17:fc:76:a0:55:9b:12:60:12:
45:b1:2a:ff:37:33:1b:b0:48:49:52:ac:75:2b:8b:f9:cb:c0:
80:84:6c:bf:2d:5e:fc:45:25:97:b4:b2:a8:aa:09:a5:ce:c9:
f6:42:01:38:07:d4:42:6a:e0:ad:7a:90:b2:c8:9c:d5:49:58:
a5:9a:08:ab:e0:d8:2a:42:da:8b:a4:b3:34:3f:e4:ba:bc:0b:
98:dc:ca:e0:0b:bc:7c:6b:2d:66:7c:5e:42:ad:51:2f:41:c2:
36:58:52:e9:f3:1d:b7:5c:26:a1:b1:2e:c5:02:7a:59:91:d9:
c9:aa:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:17:14 2026 by rpki-client