Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: 09lDra79gT0C7a6Izrxv8JN62IIRbV0WnlIYc5DRSOI=
Subject key identifier: BC:2B:86:14:58:17:49:69:76:64:83:02:A2:0B:92:EF:30:81:5F:54
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 019D2695E016EB7E76F11AFC84E2C8983FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0F6E
Signing time: Wed 25 Mar 2026 20:00:49 +0000
Manifest this update: Wed 25 Mar 2026 20:00:49 +0000
Manifest next update: Thu 26 Mar 2026 20:00:49 +0000
Files and hashes: 1: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (hash: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: b+i1mKSayotXg+E0ozYLDH4zk2gdODHL+RujvhXfRaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e0:16:eb:7e:76:f1:1a:fc:84:e2:c8:98:3f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Mar 25 20:00:49 2026 GMT
Not After : Mar 26 20:00:49 2026 GMT
Subject: CN=bc2b86145817496976648302a20b92ef30815f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:e3:6a:5c:5d:31:ce:a4:26:f1:12:12:01:
b8:08:5f:d9:37:78:b0:4d:15:58:eb:50:c6:1d:09:
39:89:31:1e:74:b1:1f:22:56:e6:03:ad:c3:67:08:
dd:f6:ae:4e:9a:15:93:4d:03:7b:00:a0:0d:0b:d1:
44:ba:cf:f3:8a:a3:29:a6:5e:60:57:2f:53:44:ab:
1d:cd:4a:06:c2:73:20:69:23:39:6d:43:f6:0d:f7:
f4:57:a7:f8:4a:d9:07:72:8b:82:8a:21:46:58:4b:
ed:59:65:25:42:aa:fb:09:d6:90:75:da:b9:2d:f4:
94:39:ae:7f:3b:33:94:d9:3d:3e:c5:30:c9:56:12:
89:8d:63:57:e2:d7:4e:22:d0:5c:fa:f0:ec:e8:ec:
bc:e2:a0:c3:a9:b8:82:dd:a4:84:f2:49:68:73:39:
06:8e:f6:28:89:98:69:34:99:94:72:81:1a:6a:95:
8c:3e:b4:45:ec:42:f6:d9:54:84:e2:a2:8a:7e:79:
df:1a:2c:42:45:12:73:b0:3e:4d:5b:04:48:0c:a3:
0b:f9:17:44:2f:31:14:8a:26:da:3d:99:94:4a:52:
e1:b1:a6:f4:34:5b:fc:ce:71:76:1e:d1:a1:f3:8a:
4d:20:a0:1f:b6:9d:39:d1:1d:2a:70:43:7e:ed:fb:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2B:86:14:58:17:49:69:76:64:83:02:A2:0B:92:EF:30:81:5F:54
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2f:b5:53:9c:7c:c7:b3:4d:35:30:59:72:3d:96:4f:2a:a5:
ca:8a:b5:d7:68:29:06:75:c9:f5:43:b2:82:f3:b0:61:97:ee:
02:90:72:a8:e4:1e:a2:7d:7b:ce:10:4a:e9:9d:4c:2e:5e:40:
24:e7:6a:73:0c:1a:d9:c9:2e:6b:fe:1e:04:93:95:2b:89:eb:
7a:98:99:d6:a6:72:b2:a9:a6:18:35:3f:f1:77:4e:de:45:ef:
ee:a8:59:34:82:20:7f:c9:87:03:0b:d4:c2:b5:6c:e8:84:7f:
f9:87:6c:27:5c:38:72:40:4f:1e:57:f6:cb:4b:3e:30:d2:b5:
92:1e:6e:23:ca:68:70:80:26:c4:32:c6:63:43:92:b7:07:bc:
f4:cb:98:c3:11:cf:4e:66:a0:80:04:39:31:29:5d:95:f9:d1:
60:89:20:df:9f:51:9d:d7:64:e6:19:64:e3:0f:8c:01:b0:f8:
e6:2e:cf:ff:c3:f5:1b:e9:dd:ed:89:79:81:21:c5:70:ee:e3:
43:6d:3b:62:b0:ef:14:ca:ae:1f:cf:d5:03:fd:b6:b0:b8:85:
3d:af:64:27:b4:5b:cd:80:01:16:f7:8d:a0:90:09:ce:77:85:
9b:75:b4:40:a5:dd:d6:95:32:5d:5a:85:25:2b:5a:12:a8:e5:
b7:85:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:53 2026 by rpki-client