Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File: fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier: FxgJHCmN51QVQ+XggxZIzu4NUzjdAe+P+hjBVp1OLmU=
Subject key identifier: A8:64:DE:57:D8:AC:87:78:6B:DE:43:73:E3:65:E0:A0:26:8B:1C:19
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial: 019D27E0409E8B8217C9558B98DC0DAC7D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:41 +0000
Manifest this update: Thu 26 Mar 2026 02:01:41 +0000
Manifest next update: Fri 27 Mar 2026 02:01:41 +0000
Files and hashes: 1: 5ruGjzi72EzHeNevEE3JGyLtXgQ.roa (hash: F631VpzOVt6zeqgnyepT7OlQYefuALhIBPjhvOj+SbM=)
2: MLTMNf6RdXQHgobliz7oe72JkjQ.roa (hash: vynBVcDFPo0FhDEU/VJwzCvxOSeIG5MJSs1ntfusClo=)
3: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: YEpBBu8K+JwU5NmTP0eeHq8wS3BgQIDGB9KCpL+2T+A=)
4: fXZclwjMmJuKFUf7Q9P-NHbNEpQ.roa (hash: anvE7nbyIQqcqcLLGmm77d4AcDLATJhTxcyjOxhWcfo=)
5: qq9jEWnUkq7RixjGSRxp41ikMoQ.roa (hash: YTairbAOKk2TzoyqKR+ve0ERswXp2cOBJyd3vALW04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:40:9e:8b:82:17:c9:55:8b:98:dc:0d:ac:7d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
Validity
Not Before: Mar 26 02:01:41 2026 GMT
Not After : Mar 27 02:01:41 2026 GMT
Subject: CN=a864de57d8ac87786bde4373e365e0a0268b1c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:da:79:8a:54:10:0a:6b:26:4e:06:ca:cf:
83:1f:03:b7:08:c5:86:68:e4:b0:05:ee:79:b5:9c:
cb:c9:dd:f7:fa:e9:0c:7f:db:86:85:bd:8c:b4:c6:
22:5e:12:5d:d1:b0:b2:ca:00:fd:90:27:b3:04:c6:
56:47:1c:ea:7b:3c:7e:09:e7:28:78:bb:0b:6f:76:
51:7a:62:72:e8:b1:1f:ac:3d:fd:fd:79:bb:b6:3d:
a2:39:b4:5c:8c:10:db:98:ff:d0:02:0c:e2:dc:d1:
38:96:96:91:30:79:c1:26:a5:fc:e2:8a:bd:3b:01:
ff:82:eb:d2:5d:62:3d:03:3c:b3:76:63:82:72:fe:
71:6f:4e:52:d3:c8:69:16:3e:19:58:77:43:7d:3c:
ec:13:94:09:8a:78:ba:91:f7:03:9c:65:03:09:cd:
4d:ae:67:c7:9c:4f:ff:e4:e2:08:9f:6b:7b:e3:07:
7a:95:95:8d:c0:d3:87:e5:26:1d:73:2c:66:b3:13:
df:d3:0f:b1:7b:3d:9a:3d:ab:22:84:c7:58:34:1f:
99:19:c1:d2:1d:73:52:94:e8:cb:be:cd:69:5b:12:
6d:ea:91:d2:a6:1e:17:65:18:24:a1:cb:24:d0:93:
54:2b:24:99:7e:99:45:58:46:95:2e:98:72:5f:e4:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:64:DE:57:D8:AC:87:78:6B:DE:43:73:E3:65:E0:A0:26:8B:1C:19
X509v3 Authority Key Identifier:
keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b4:3d:f5:c2:8b:2d:fe:c1:af:4b:ee:83:2c:e8:da:ca:23:
92:07:e1:f5:aa:27:d2:ca:28:10:a5:6e:80:0b:c7:c6:ae:0a:
8b:0f:64:3e:57:64:29:48:89:d2:36:24:7b:0e:01:ad:c7:f8:
ca:96:2f:76:13:ec:d1:5b:86:f4:3c:15:c9:7f:17:cd:b5:33:
34:d3:04:57:7d:d9:ad:2f:eb:60:1d:1a:f7:14:a3:6c:58:8b:
d8:b9:43:92:fa:26:0e:b9:8c:f7:c4:a7:6c:1c:fe:31:15:1e:
a4:9a:56:b8:ad:6c:47:5d:a7:08:12:79:bc:d1:d2:16:0e:1a:
68:1f:95:d8:53:0b:ec:9b:b7:ed:ed:ef:5a:ed:1c:85:17:f1:
90:20:cd:60:5d:53:ad:1c:64:db:07:6d:c0:c0:2b:ad:8b:1e:
7e:7c:21:a9:c7:4f:ba:2e:8b:da:a7:ce:8a:b3:24:35:fa:9a:
2f:e1:49:da:7c:04:1d:b5:40:38:3d:c4:11:ca:00:82:57:c1:
e3:ad:61:69:85:d3:91:51:e1:87:ff:1d:75:d7:a0:1b:bd:a9:
90:e2:b7:b9:c7:d0:3c:2a:22:8c:8e:88:ad:cc:9e:c1:17:c4:
5a:c3:fc:cb:c3:19:9f:45:19:65:12:bc:d5:25:56:7f:a1:b2:
3c:45:bf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:39 2026 by rpki-client