Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File: fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier: pcIRQxsmKcc5UACK4yxyXRpNsPFVJS5VfzTwLgNRm48=
Subject key identifier: 55:20:70:BC:9B:56:D2:B8:24:7B:11:A8:EF:4B:A8:15:93:A3:66:FE
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial: 019D38D2A251A7E79D7357AD6ECA12FAAC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number: 07FE
Signing time: Sun 29 Mar 2026 09:00:21 +0000
Manifest this update: Sun 29 Mar 2026 09:00:21 +0000
Manifest next update: Mon 30 Mar 2026 09:00:21 +0000
Files and hashes: 1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: q9tPuQOFMy7xHlLIgMbR+twjgLklajEcm2j0VKSghUY=)
2: prR3St_T-JCudPoZgk4y2vYURI8.roa (hash: 1HOWJUzi0cuRKIHRjrvVgn5q7O99JRjdWW0TYvqs9a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a2:51:a7:e7:9d:73:57:ad:6e:ca:12:fa:ac:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Validity
Not Before: Mar 29 09:00:21 2026 GMT
Not After : Mar 30 09:00:21 2026 GMT
Subject: CN=552070bc9b56d2b8247b11a8ef4ba81593a366fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:b2:19:4f:ec:90:28:e0:b7:dc:61:e5:7e:
15:73:85:92:40:ee:ef:b6:36:b1:60:f8:49:b9:38:
97:55:86:5e:ab:c7:55:63:61:3f:d6:e9:72:24:60:
04:f1:35:96:9b:da:ae:ac:2a:69:62:6e:86:29:0b:
61:9c:76:e2:ee:87:cd:0d:7e:ae:bf:3d:66:99:ea:
e8:49:3c:b7:16:07:90:6f:92:95:fc:21:19:ec:ab:
83:5f:54:d7:8a:53:78:6d:58:38:23:c6:a8:1d:9b:
62:47:c9:a3:3e:52:37:c8:c5:6f:07:0b:e7:82:c0:
47:d7:39:f9:a8:a3:44:ee:ac:14:9b:14:6a:ab:09:
6d:93:0a:be:ae:2f:74:dc:d7:9b:35:ec:9b:c1:26:
d2:4a:87:7f:d7:0e:72:de:1e:eb:b8:aa:d7:e5:ba:
98:1d:f1:4b:70:cc:f4:99:99:db:bc:32:04:a0:81:
49:c7:de:12:0d:79:d8:0c:62:ea:32:c0:d5:16:c8:
82:f3:0b:85:c0:ee:8e:cc:3f:0d:b1:82:db:0d:7f:
9c:86:56:91:56:ad:c5:bd:f9:9b:1d:80:5b:b3:a0:
c8:4a:2f:6a:95:0a:4c:7a:91:de:93:dc:24:8e:ce:
11:77:67:46:b6:fd:47:ae:b9:59:de:8c:64:2d:ce:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:20:70:BC:9B:56:D2:B8:24:7B:11:A8:EF:4B:A8:15:93:A3:66:FE
X509v3 Authority Key Identifier:
keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8d:32:67:7b:f6:86:58:ba:99:c2:49:d9:13:2b:a1:a3:8f:
40:70:ab:2b:dd:b6:4e:0c:c4:50:54:c7:d4:84:49:88:7b:81:
9f:89:f7:ac:1f:1f:ed:5d:51:f4:bd:eb:3f:de:eb:c8:66:18:
c0:03:c6:a5:d9:12:cf:15:87:36:db:59:23:1d:31:8c:1f:84:
e8:58:ad:ba:6c:e4:de:a3:a3:56:bb:d5:3d:e2:1b:1b:f0:a6:
7e:64:de:91:f6:fd:29:ee:db:29:77:17:f5:0a:42:d6:80:e2:
48:3e:70:e8:1c:94:75:8f:7b:bb:7e:34:8a:32:8a:07:85:fd:
b2:55:8c:d2:df:f1:84:71:eb:41:80:ae:b8:cc:3a:eb:10:d7:
3f:e6:c2:14:c5:58:45:1d:83:f5:6c:36:82:a6:c6:b5:52:b9:
92:af:59:66:e6:1c:da:bb:22:25:b2:ea:b1:25:b4:ab:16:3b:
5b:a6:af:f1:da:c3:07:4c:8d:32:2e:68:84:97:d5:14:51:f9:
7b:d0:e7:86:b1:15:5e:9d:a7:7e:6f:c7:c4:8d:a7:22:87:e9:
e1:c2:13:68:54:84:12:44:21:fd:9d:65:6f:3e:9a:30:24:90:
5f:0f:56:3d:1c:02:3c:cb:d7:a3:af:87:27:f8:4f:5f:cd:87:
b1:86:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:35 2026 by rpki-client