Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json)
Hash identifier: IaYsdiAHPwrSgkn9PqOHljnTCYmdmtPaawOyDuwcA2c=
Subject key identifier: B2:58:33:0B:83:A2:30:B9:16:80:9B:FD:06:6A:7D:46:82:66:33:64
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial: 019D27DF5D1162AB8752A6C2DF5601113E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
Manifest number: 0F42
Signing time: Thu 26 Mar 2026 02:00:42 +0000
Manifest this update: Thu 26 Mar 2026 02:00:42 +0000
Manifest next update: Fri 27 Mar 2026 02:00:42 +0000
Files and hashes: 1: LVBBw3kbDfM8QLo8U8FpkgZWBKY.roa (hash: 3JSgEpOjV3VwZSuSqrVrhNnp29HLqalajVpqLvd8t0Q=)
2: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: 2b8SQdtsitlMhS6yf4vqajcnhdOEnJNi/TLnoUVDrlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5d:11:62:ab:87:52:a6:c2:df:56:01:11:3e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Validity
Not Before: Mar 26 02:00:42 2026 GMT
Not After : Mar 27 02:00:42 2026 GMT
Subject: CN=b258330b83a230b916809bfd066a7d4682663364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:58:eb:76:54:86:ba:4f:02:ec:19:c6:8c:0b:
5e:d6:d8:4f:0f:4f:c4:87:bf:80:ce:db:d8:3b:83:
3e:36:c8:66:aa:24:21:bf:33:65:90:4e:db:5f:47:
59:3c:aa:10:aa:fc:4b:cd:a6:d8:97:1d:45:82:e2:
c8:4a:c6:1a:36:e7:b0:b9:d4:77:d8:4e:a8:96:ef:
8b:04:6f:ff:7a:6b:72:69:d8:80:a3:c0:92:50:b0:
c1:42:dc:b5:f8:6d:0c:93:8f:cd:20:38:b8:52:33:
ed:13:7b:4e:2e:ce:cf:e9:22:af:2c:6a:4d:8e:af:
8e:42:bd:d1:1e:d0:a8:31:91:80:02:0c:83:bc:52:
2a:55:90:1d:87:59:f7:b8:f5:fc:bb:96:6c:f7:a2:
75:53:22:f1:0d:65:bf:52:e1:7b:b2:7f:81:3f:91:
55:70:94:b3:75:6d:14:5e:f2:9d:31:ad:f5:7c:2d:
61:23:5b:9b:54:05:4c:c2:1e:bd:1c:8e:0b:66:84:
93:ef:b0:5c:4f:a1:ee:f8:21:86:c1:ee:74:e4:62:
45:e6:4e:3d:44:35:7f:2e:92:62:69:6e:29:5c:f1:
bb:bc:80:e4:39:b6:b9:2a:db:db:4f:0a:2a:69:a5:
c2:ce:13:fd:a2:e0:cb:37:13:85:55:5a:84:86:02:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:58:33:0B:83:A2:30:B9:16:80:9B:FD:06:6A:7D:46:82:66:33:64
X509v3 Authority Key Identifier:
keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2b:cd:15:b0:a6:ef:50:42:63:b1:41:a4:d7:88:ca:ff:ee:
04:fb:4d:34:c8:98:3b:4a:fa:8e:73:63:0b:09:be:8a:0f:fd:
0a:6b:08:d0:a4:d0:24:a0:e7:0e:23:95:4f:da:b4:22:ba:fd:
a1:6f:20:31:89:41:9e:dc:ff:78:d6:4f:d4:12:d5:13:56:11:
fc:d9:62:77:9a:39:db:58:ff:22:70:5d:c3:9e:f9:9f:5d:a4:
68:bc:a9:b7:9b:ac:63:ef:b6:ef:14:4d:a8:b4:8f:c1:fb:3c:
c4:c8:bc:d8:40:d6:c4:48:47:5f:bc:68:5e:a4:58:b1:95:b3:
3c:07:88:c1:e9:59:0f:a6:3c:3d:38:6c:dd:d1:df:40:33:cc:
27:ae:51:fd:0b:a6:0c:43:4d:fc:43:52:e4:d2:68:e0:d8:5a:
8e:23:6a:c9:08:18:c0:3d:9f:fa:6f:b0:49:ef:e5:a8:56:29:
82:85:b6:2b:f4:9f:28:a2:39:62:5d:40:8a:9c:31:92:ed:e5:
12:ad:d0:95:4c:0b:cf:63:33:0a:b5:aa:01:fb:3c:50:6c:af:
62:dd:35:7b:cc:13:24:55:e2:04:b8:7a:94:b5:84:21:cc:db:
35:66:18:99:20:46:e4:c6:96:8b:e1:b2:bf:2c:15:6e:2f:da:
ec:39:3b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:15:26 2026 by rpki-client