Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier: fcacll6ITsQA2bVmAp3wfG1B3P5U9kiO2+jFLFuk/mc=
Subject key identifier: 88:11:83:6F:82:5E:37:5E:EF:81:3E:D7:9C:E6:2E:37:68:23:EC:9E
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial: 019D265ECBA4D0A78D12468D75B63F31975A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number: 0564
Signing time: Wed 25 Mar 2026 19:00:39 +0000
Manifest this update: Wed 25 Mar 2026 19:00:39 +0000
Manifest next update: Thu 26 Mar 2026 19:00:39 +0000
Files and hashes: 1: d3XCpcyn0uAgmWptpHQjYP7UPLA.roa (hash: ou/aEB+Ce2n+pbDK9cilwO6M3zpwbvFU2gW96y63Kxw=)
2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: 58jRvVVzKh3z23b246dCxpnEQCmBH7KEMD/WYb1C0QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:cb:a4:d0:a7:8d:12:46:8d:75:b6:3f:31:97:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Validity
Not Before: Mar 25 19:00:39 2026 GMT
Not After : Mar 26 19:00:39 2026 GMT
Subject: CN=8811836f825e375eef813ed79ce62e376823ec9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:8b:c5:b9:b7:4c:21:d7:51:97:08:1a:04:
5f:72:b4:98:5d:1a:28:4c:d8:96:20:70:0d:56:ea:
81:c3:af:e7:9f:72:83:f4:23:ae:78:bb:96:99:81:
d0:89:54:dc:cd:d3:6d:5b:33:61:90:c1:10:d6:83:
10:1f:aa:0a:4a:39:4d:67:a4:be:dc:ee:c8:ea:a3:
c6:06:9c:39:71:fa:5e:8b:f4:24:a6:0f:85:48:a4:
f1:de:f2:66:f8:a5:ff:36:3f:42:1a:41:1b:b0:85:
d3:1b:62:03:15:ed:35:fd:07:27:cb:9a:29:9c:00:
3b:b7:a0:3b:42:33:1b:b1:0a:8e:3e:f8:e2:f4:d3:
5a:e7:3f:4e:db:fc:21:c3:88:d2:89:01:7d:00:83:
f7:da:56:fa:c9:13:da:8b:61:56:8f:74:cc:ac:d1:
2c:aa:32:c0:8a:6c:e2:e3:0b:09:11:a7:f4:93:7c:
99:8f:d2:0e:1f:57:1f:68:83:5e:da:d1:67:59:f9:
7a:fa:98:4d:1c:72:a4:aa:31:30:b2:2e:cd:6b:a5:
ac:17:93:da:5d:53:7d:3d:80:c1:bc:8b:56:02:e3:
f3:30:c6:f5:b3:ef:3d:31:3b:51:53:d2:49:8b:37:
58:b2:51:29:10:ff:f3:58:a3:6f:6c:70:14:2f:c9:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:83:6F:82:5E:37:5E:EF:81:3E:D7:9C:E6:2E:37:68:23:EC:9E
X509v3 Authority Key Identifier:
keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dd:61:f1:7c:e9:1a:53:f7:2c:fb:c6:b9:1a:5e:6f:11:3e:
cf:e0:c8:0a:d5:a7:32:c1:5f:c3:27:4f:11:75:7a:46:05:49:
c6:e7:90:ee:9b:39:7f:2b:25:08:65:ee:a0:7b:74:92:a7:7a:
8e:bb:be:14:a5:f9:4f:2c:4d:30:c8:4e:18:88:09:15:a4:ba:
00:f0:19:a3:41:c1:4e:30:c2:9b:a3:0d:29:6e:68:83:78:08:
c7:03:bc:25:e5:71:05:4d:ce:c7:4f:86:93:0e:96:ab:2b:80:
c4:f3:d0:55:4b:8e:09:87:75:fe:b5:1a:57:b1:0f:d6:15:9a:
c3:12:1f:3d:a4:fd:5e:fc:0c:5e:6c:28:53:c6:16:41:7e:30:
91:09:de:ac:b8:da:71:ad:7f:e6:b4:5a:f8:9e:a2:e5:9f:7e:
70:08:da:ca:c1:32:34:b9:6a:fa:e8:53:74:fe:97:21:0d:0d:
e0:96:1a:c9:c6:5e:25:8f:74:34:73:0e:c3:d4:71:96:d7:a8:
a9:bd:06:ed:60:ab:26:36:12:c9:8e:5c:11:25:60:7a:78:e1:
7e:0f:9b:f5:cb:08:1c:78:c3:c7:2a:3c:e4:ce:5a:a0:45:a7:
e2:f8:e1:d2:a5:35:85:4a:fb:74:67:32:09:f9:ea:3e:62:07:
aa:7f:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:14 2026 by rpki-client