Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
File: fGHj2B8FrLVr33mO1K4q9jd5QgE.mft (raw, json)
Hash identifier: wUWA9Y+OezI6U9LiKDiK6fr/LL3QYkIczm9tRsUH6+s=
Subject key identifier: CD:00:EE:96:25:A0:E2:C5:DB:DA:DD:DD:DA:90:D0:12:BE:4E:C4:1B
Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
Certificate issuer: /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Certificate serial: 019D26CCA8E5BDD33DD068C3EB9663D33B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
Manifest number: 0EAB
Signing time: Wed 25 Mar 2026 21:00:39 +0000
Manifest this update: Wed 25 Mar 2026 21:00:39 +0000
Manifest next update: Thu 26 Mar 2026 21:00:39 +0000
Files and hashes: 1: OM1cSFU8Ho_5gGRm9_J5AM__9Vo.roa (hash: gWCTvEKc3tzachY7brHH1xI78OvzIY3uE0uOo2Zryuw=)
2: fGHj2B8FrLVr33mO1K4q9jd5QgE.crl (hash: +xr4d8tAGsNc5+/gAlFsdKz3y8R6whqRfJkmauZmqKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:a8:e5:bd:d3:3d:d0:68:c3:eb:96:63:d3:3b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Validity
Not Before: Mar 25 21:00:39 2026 GMT
Not After : Mar 26 21:00:39 2026 GMT
Subject: CN=cd00ee9625a0e2c5dbdaddddda90d012be4ec41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:2e:b7:21:76:72:4b:08:0e:bf:71:c1:3e:
bb:df:ab:ca:a5:49:ab:d0:69:b4:d3:9a:71:fd:a5:
36:0b:30:29:ec:b3:c2:b3:f1:7f:8f:79:0e:74:ab:
bc:2c:e7:2b:84:57:ce:21:a8:41:04:31:da:c4:d2:
b2:4f:52:2b:c1:4f:17:56:3d:f0:eb:ad:60:6c:ab:
d3:9d:c3:05:d2:b2:3d:18:95:f5:e8:24:e9:d3:7d:
3e:46:61:7e:12:3d:39:35:63:b4:2d:31:25:06:6c:
57:41:cd:e1:7b:dc:e2:49:a9:a7:44:e0:56:3e:f1:
e1:0a:7a:a2:ad:ea:81:4d:9b:fd:62:b2:59:c9:c1:
5d:95:99:6e:f5:a7:11:91:23:fc:22:8d:69:7b:96:
84:06:db:5c:5e:5a:ab:a3:e3:0d:cb:e2:8b:af:55:
10:1a:94:b0:21:8e:e8:0f:6f:6d:6e:b2:5a:ef:d7:
71:88:64:93:61:14:94:dd:b1:ce:75:c6:de:aa:75:
d3:f3:46:db:38:f5:1d:c7:e9:fb:0d:eb:c9:01:e1:
4d:cd:a0:13:f0:7f:35:0e:02:e4:42:69:c5:53:04:
86:ba:49:bf:df:ed:f9:29:57:13:cd:3d:67:49:3d:
5c:d2:ef:4c:3f:be:6e:5e:f1:d2:1f:8f:13:df:72:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:00:EE:96:25:A0:E2:C5:DB:DA:DD:DD:DA:90:D0:12:BE:4E:C4:1B
X509v3 Authority Key Identifier:
keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bf:ea:4c:07:ee:48:50:e8:0f:60:40:9c:ed:7f:15:f8:b3:
23:d8:6f:2b:3d:98:db:27:06:6b:d1:5e:a3:87:6b:2d:27:e1:
79:0a:f0:c8:fd:6b:97:82:0c:bb:26:4f:6c:4c:d3:ff:47:1c:
75:66:60:df:38:03:0d:92:f2:8e:a9:e9:2d:65:5b:91:be:fd:
da:d3:59:cd:d5:97:81:72:5a:1a:eb:44:46:f1:e8:3d:85:2f:
d4:05:1f:38:28:8d:ab:49:80:2b:33:a0:b9:ce:d6:06:99:f5:
0c:02:00:ef:6c:d1:16:dd:4e:9a:a8:d6:dd:9a:7b:ab:a1:97:
7c:c6:97:95:1a:f4:1f:f6:bb:36:7a:e5:90:40:48:b4:5c:7e:
b4:8a:2c:ce:7a:d7:4b:37:e8:8e:63:60:6b:3f:61:f2:46:8d:
92:d2:04:25:b6:35:b2:cb:79:4b:a5:92:2a:e7:fc:e7:8c:40:
f3:ad:be:0d:40:eb:69:20:e6:e4:43:6e:3f:d2:a9:bc:a1:2d:
14:31:7a:1d:ff:0d:a2:45:b2:c9:2e:b0:28:29:9c:bd:78:91:
d9:c5:79:22:e2:d0:88:ef:80:3b:d1:df:aa:96:40:11:2c:4f:
1e:74:97:a1:6c:d4:2e:cb:b2:26:c5:e9:48:35:38:ff:6c:55:
a7:5f:6c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:13 2026 by rpki-client