Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
File: fggLq1W_NHMYjCDHNmpssETHGVw.mft (raw, json)
Hash identifier: Lli0PfrLyKQTYfAJbheXvbWVT2SyscTm7W52elX41nw=
Subject key identifier: DB:9F:01:B6:1A:89:95:E5:FF:E3:AC:28:9E:C6:A7:14:CE:47:5D:29
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 019D26CCD1BCBDB1F8A4CDE6E454467F1872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
Manifest number: 132B
Signing time: Wed 25 Mar 2026 21:00:50 +0000
Manifest this update: Wed 25 Mar 2026 21:00:50 +0000
Manifest next update: Thu 26 Mar 2026 21:00:50 +0000
Files and hashes: 1: 7Xjnrks0V0KJBUvovHU5FPRBPgI.roa (hash: Uj+974AkqjIOmRxxULMnodgkGY00aGKR4YY4cfemHV0=)
2: fggLq1W_NHMYjCDHNmpssETHGVw.crl (hash: s4aABjI7Hi2IGFOLfNI8K4qSM2LsmNUB5Sd0tFfUIJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d1:bc:bd:b1:f8:a4:cd:e6:e4:54:46:7f:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Mar 25 21:00:50 2026 GMT
Not After : Mar 26 21:00:50 2026 GMT
Subject: CN=db9f01b61a8995e5ffe3ac289ec6a714ce475d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:78:92:81:1c:43:b0:6e:76:a9:4f:ce:6f:
b8:6d:e4:66:60:d7:74:4e:aa:2c:3e:db:d1:a8:34:
1e:b0:a5:4f:01:bf:cb:82:c0:2d:44:0c:45:56:13:
0b:bc:ae:4b:d7:33:4f:c0:93:76:4d:e2:d6:d0:2c:
e2:f8:5f:ae:63:65:64:5b:63:7d:37:2e:2b:86:e6:
a0:0d:9f:02:a6:4d:10:05:97:ac:d8:53:0f:1a:21:
be:b1:54:e5:37:1d:89:29:b3:6c:3f:b8:08:09:6b:
b1:b8:fc:33:74:ac:14:0c:17:0c:e9:7f:1e:bd:ad:
0f:0f:f1:68:50:20:7b:bb:c0:4c:94:ed:8e:98:03:
43:e5:ac:eb:37:d9:ae:69:1d:02:55:94:c4:ca:32:
55:6d:21:ce:8e:3e:ff:d3:44:bd:3e:ef:89:9a:c5:
2f:be:f8:50:18:e0:6d:40:a8:9c:e4:59:38:1a:95:
73:20:a3:0d:22:9f:aa:50:79:26:1d:2c:ce:d4:dc:
2b:27:4f:bc:12:6c:cf:e7:59:5c:85:23:59:0f:fa:
af:9a:57:02:a2:35:80:ac:dd:28:44:3d:55:b7:6f:
ff:fa:af:15:8d:b4:db:72:b3:62:8b:8d:da:81:89:
c5:b4:16:12:bc:f0:69:72:cd:9b:e4:89:c0:09:15:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9F:01:B6:1A:89:95:E5:FF:E3:AC:28:9E:C6:A7:14:CE:47:5D:29
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:49:bc:10:d6:e2:a5:db:5f:31:49:e0:5e:51:88:cf:d5:95:
84:d9:e8:e7:ad:0c:10:69:f9:41:a1:8c:0c:b5:89:e5:1d:1c:
82:3e:fe:a9:96:00:09:99:42:df:3c:dc:55:a6:bb:d4:b3:94:
d4:3c:2b:a2:e8:b4:5e:06:56:6a:9f:34:85:37:36:a6:29:37:
07:fe:d8:9b:9a:d1:7b:1c:47:ac:5f:20:9f:05:45:3b:e5:38:
62:27:4c:32:d0:42:53:b5:a1:ea:e9:a7:3f:7b:f5:84:f3:04:
51:f0:4f:73:ba:9b:4d:b9:9d:35:a6:ed:d9:06:71:eb:40:f8:
a2:68:a3:94:46:2d:04:30:e6:5e:e7:4c:86:d8:37:6c:48:bc:
fe:d9:33:b6:61:e6:44:49:7f:8b:4c:3a:e5:f6:ed:9e:a0:6e:
37:e0:ee:c6:6c:74:21:bd:e3:52:fd:49:32:d3:87:56:d0:a1:
9f:61:ed:69:66:3c:66:97:6e:56:26:3f:94:f1:57:fb:ea:63:
9d:1f:ab:0f:fe:38:08:4f:15:ba:56:79:ef:e3:6e:a7:8a:8e:
38:58:5f:1f:b8:a2:86:3d:7e:00:ae:bf:08:fb:85:e8:87:50:
a4:fa:87:f3:af:e3:5a:a2:5d:83:55:e7:07:37:69:3e:93:df:
f9:d7:3f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:20 2026 by rpki-client