Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File: fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier: ziVOgytAegNfVC0m9XJPRPRbXGkn7kx3QTw9m6U1rzc=
Subject key identifier: 5A:AF:52:91:2A:83:BA:0B:04:3A:7E:F7:60:2A:CD:24:04:C0:C7:3B
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial: 019E1E6C52FE38730ED467A0EEB81D00F374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number: 16DC
Signing time: Tue 12 May 2026 23:01:15 +0000
Manifest this update: Tue 12 May 2026 23:01:15 +0000
Manifest next update: Wed 13 May 2026 23:01:15 +0000
Files and hashes: 1: CTvb0FUa15u0RFsbQjogkyjXQEo.roa (hash: rc8P8+g7ke0pQjl95RJtZC0Plvgs/SZq9fu71nIHzfo=)
2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: JagKdQkJljI/u8jqnRFx8XaCjKyf7TS8LeGSBmk1n+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:52:fe:38:73:0e:d4:67:a0:ee:b8:1d:00:f3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Validity
Not Before: May 12 23:01:15 2026 GMT
Not After : May 13 23:01:15 2026 GMT
Subject: CN=5aaf52912a83ba0b043a7ef7602acd2404c0c73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:40:ae:64:71:ee:e2:c7:76:75:35:08:41:
fd:c8:ae:8d:a6:22:28:51:c5:01:20:d5:38:7b:fa:
81:54:3d:5f:38:17:b9:50:6c:ca:1a:ce:6d:ec:c8:
f1:da:22:fb:73:c2:12:be:72:d3:32:fb:49:26:bc:
10:ea:ea:0e:bb:7e:0b:f2:49:0a:fd:bc:bc:20:01:
24:aa:f0:31:44:12:08:23:bb:17:df:4f:1f:c7:5f:
8b:66:55:ef:a8:65:dc:33:87:ad:7c:c0:07:6b:7f:
92:8c:11:a5:a4:85:9d:a4:80:ee:10:24:c2:ce:61:
0d:5d:a0:2c:4a:7c:82:94:39:20:0e:f8:4b:06:71:
50:a9:81:36:10:48:01:2e:05:16:84:30:71:52:43:
9d:36:aa:80:64:5f:03:3e:28:92:70:f4:69:e2:03:
62:5c:e4:f6:1c:91:14:3c:97:3d:34:2d:c6:cc:aa:
b8:72:c8:8a:c1:98:4d:ff:03:a4:ab:af:e9:56:06:
77:42:80:a9:1e:ca:84:95:1d:d7:c6:f7:1f:e5:cb:
fa:9f:b3:91:e8:11:f9:dc:e4:7a:59:c6:a8:cd:93:
15:b7:f1:b7:5b:11:e7:6b:62:f9:6e:66:60:41:ff:
0d:c3:9d:df:60:fe:12:a6:78:c5:ef:10:42:54:41:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:52:91:2A:83:BA:0B:04:3A:7E:F7:60:2A:CD:24:04:C0:C7:3B
X509v3 Authority Key Identifier:
keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:50:c5:a2:b2:c5:f1:c2:26:5b:4b:68:59:13:09:cb:58:08:
03:0d:5e:ec:37:d1:3f:b2:ce:3d:c7:44:9c:96:d5:fb:68:89:
de:47:22:3e:8c:30:80:f7:4f:68:0a:33:9e:32:82:26:77:33:
9f:ec:38:c8:6c:e7:8f:5d:fd:32:52:30:40:70:38:f0:f9:a5:
34:6d:80:ea:30:c2:25:86:5b:c3:51:79:90:e3:32:0a:ae:d8:
ca:a1:cb:6f:a8:ef:a3:d5:f0:25:e2:e3:4e:4b:ba:46:65:ad:
83:2e:bd:6a:21:6e:94:07:21:02:a2:3c:1c:c1:75:7b:f2:55:
61:9a:1f:58:c6:8f:a7:64:c8:32:09:ce:0d:a2:23:95:c8:51:
4a:9c:44:fa:ba:58:20:eb:29:a4:78:b6:e1:30:07:f3:b9:30:
fe:9c:0f:82:56:ca:df:96:c0:c6:48:c2:58:0d:42:0a:6d:4e:
42:7f:a4:48:65:74:02:29:e5:ef:90:01:cc:9f:4c:fa:c1:45:
b2:d4:ab:52:21:4f:54:7b:ed:9f:ee:24:12:ec:c4:2e:07:a0:
06:64:90:dc:aa:1d:e5:7e:c5:bc:98:30:af:34:76:da:d0:ea:
0c:ea:69:a9:7b:f7:f0:54:2b:68:85:f1:2d:24:11:a5:ab:b2:
c7:15:b0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:35 2026 by rpki-client