Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: oUUxjdhWWybJtuEMZTO2/CWOiZVUUzEaQMQQT7WeewU=
Subject key identifier: 3A:EC:89:0C:F3:40:C6:D5:3D:5D:55:81:C5:48:7D:61:B9:F6:1E:76
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 019D28BB0E257138A46CC647EAAF8F0F794E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0CF8
Signing time: Thu 26 Mar 2026 06:00:40 +0000
Manifest this update: Thu 26 Mar 2026 06:00:40 +0000
Manifest next update: Fri 27 Mar 2026 06:00:40 +0000
Files and hashes: 1: WDfbjRg4ihOKTvhRrJJRD1g3RiM.roa (hash: 27A9TuMLCLsH9w3Xm8KR6AJ2CdSs60GHyEW7+A7yzkw=)
2: bSGb5uF02tbOjdrSh1bjtNrJjuE.roa (hash: lAwN6vNzBd4ncK3Tu/ntqZQQliwHghfg9YdSXdgwSxM=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: TSuTWSDFccuRCfqwu3SeUJrtNyw2MslM87D+q8L+JZU=)
4: xEtH3nZkjZP1cHLTfmkxzgvLsMU.roa (hash: BGUb3g3pcbUOTctA2o1s832xh1EgHk8oxohuvzvEQok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0e:25:71:38:a4:6c:c6:47:ea:af:8f:0f:79:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Mar 26 06:00:40 2026 GMT
Not After : Mar 27 06:00:40 2026 GMT
Subject: CN=3aec890cf340c6d53d5d5581c5487d61b9f61e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:0f:66:94:b8:3d:a7:98:e7:da:db:ac:32:
0d:48:3a:7f:50:21:7c:87:af:d3:1b:9f:70:1e:a6:
27:59:3c:df:ec:18:48:94:b5:d6:c6:54:05:2e:a1:
f9:ec:f7:b6:96:2c:8f:4f:44:e9:26:1f:63:7d:1c:
ba:7b:e1:07:92:84:33:b3:d9:3d:36:5b:0b:a3:9e:
6d:59:be:a0:ab:a5:4d:c0:06:14:ac:aa:ad:45:50:
ba:e9:85:23:2f:51:2d:9b:a0:12:b5:93:3b:f6:0d:
56:d4:1b:83:68:36:3f:c3:2d:e1:75:60:f6:f8:0b:
ac:57:d8:44:52:a8:9d:91:da:2d:4f:de:13:aa:fb:
22:5d:6a:4a:4d:3a:f0:05:9a:c2:98:c9:0a:2b:2a:
5a:ba:6c:74:aa:8b:5c:c8:da:39:84:12:90:6b:2d:
7f:6e:3e:f0:9a:28:fc:73:e5:f7:74:9d:c7:11:ca:
b3:df:04:07:da:8f:17:77:0a:17:37:80:99:fc:c0:
d5:d3:d7:e8:59:dc:36:eb:1f:51:1e:bc:99:8c:07:
20:71:d4:8f:44:03:90:4e:09:f7:cd:30:2b:81:2e:
a3:52:60:3d:e3:d3:1f:2f:2e:6d:a0:e6:34:3b:9a:
14:a8:31:6b:41:88:45:77:f3:2b:9c:93:9c:1a:64:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:89:0C:F3:40:C6:D5:3D:5D:55:81:C5:48:7D:61:B9:F6:1E:76
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:d9:cb:db:1a:88:bf:f8:d9:9e:19:bf:00:88:af:85:a2:8c:
cb:c8:a5:c0:6a:53:0f:50:76:69:13:3f:8c:da:9d:29:77:3a:
4e:56:99:97:e1:10:fc:00:96:5f:8c:89:0c:0c:db:98:af:75:
f0:6d:43:0b:33:cb:52:e9:96:55:16:99:bc:11:d8:b5:f3:d8:
c4:c6:22:75:5e:ba:32:07:78:1a:6e:62:60:72:c2:94:ca:71:
4a:06:00:39:42:07:1a:5a:4b:b2:a3:0d:9c:e1:76:15:65:26:
4a:18:51:c8:a5:e9:b6:ae:9a:7e:49:a5:3d:b3:51:50:33:76:
7b:2c:35:d6:af:b8:65:0a:c7:be:ff:d2:7e:28:c8:f0:cf:e5:
02:80:8b:a9:59:b9:4d:c8:ab:d4:cc:4e:97:f7:ac:a2:a4:97:
4a:07:4a:88:21:a2:6c:a6:97:0b:7d:e5:35:7a:fd:1d:b7:9b:
8d:49:74:5f:bd:0e:7c:49:69:70:de:7b:2c:86:bb:91:4a:30:
e1:ef:18:e5:89:3c:83:e6:c7:cf:4e:05:ce:e7:ee:2f:be:fe:
bf:c5:8e:89:e2:f4:31:bd:2f:fe:cc:a8:f3:74:b8:61:5e:d6:
ff:0f:f1:72:55:9f:70:2a:d0:3b:52:95:06:fa:30:5b:84:94:
38:71:2c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:22:48 2026 by rpki-client