Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier: ZECBYO9csU5XYYy/TqdSy6WPzbt1GKWnSoR4rO7xor0=
Subject key identifier: 5D:2E:BE:35:9C:81:C7:BD:41:D2:A1:14:62:A1:B6:76:99:7C:36:36
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 019DCF07C6063963491799A8CA5399BA77A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number: 0D04
Signing time: Mon 27 Apr 2026 13:01:26 +0000
Manifest this update: Mon 27 Apr 2026 13:01:26 +0000
Manifest next update: Tue 28 Apr 2026 13:01:26 +0000
Files and hashes: 1: 08gQk2AeldcK_y6tYivNi31VDhw.roa (hash: iDSr2+dL188PsGjLi4V4pKrhdyzfHy95/dG6MIkWF8U=)
2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: zeTUq0nzR3S/R9sbXXQwW4FUYizampCcclpcX54HAfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:c6:06:39:63:49:17:99:a8:ca:53:99:ba:77:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Apr 27 13:01:26 2026 GMT
Not After : Apr 28 13:01:26 2026 GMT
Subject: CN=5d2ebe359c81c7bd41d2a11462a1b676997c3636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:e3:ac:24:1c:ac:01:eb:e4:b4:4a:4d:b5:
dc:ff:73:db:23:c6:ca:7d:a3:98:fa:c5:b2:45:b2:
a4:fa:08:4e:4d:6b:20:b3:77:da:af:c7:c5:ab:c9:
3d:30:7c:10:92:25:ad:99:0d:de:97:8d:86:32:b1:
f5:95:bf:a1:c7:7d:f2:94:1a:91:37:88:16:a1:b8:
86:b5:49:e0:c4:0b:ef:73:29:37:50:ea:cc:bd:c1:
ce:4b:5c:c7:fd:81:de:d8:42:bb:4f:ab:70:5e:88:
69:ca:04:89:86:08:c6:fe:d1:51:3a:90:4b:d6:3b:
50:7d:e3:3b:0e:d6:32:05:66:50:fa:65:c7:fb:01:
9d:8c:83:76:09:a6:aa:bd:71:50:4f:a7:d4:77:96:
e9:dc:07:91:02:a0:81:0d:56:5c:c8:71:e8:69:53:
19:6c:ad:6b:64:77:9b:72:3f:92:3a:00:de:21:92:
2f:8e:b0:55:9a:ac:9f:a2:95:db:7d:12:a2:61:90:
c6:02:33:c7:2e:2d:25:ea:f5:b2:5a:7f:1e:b2:a2:
24:ca:c0:ac:84:b4:11:11:1f:49:f1:f7:8c:ce:8a:
ad:de:3f:8d:1f:79:d7:e1:29:3c:fa:b1:a8:22:b2:
12:63:af:61:dd:a4:c1:36:f8:68:d0:26:eb:48:1a:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2E:BE:35:9C:81:C7:BD:41:D2:A1:14:62:A1:B6:76:99:7C:36:36
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:89:7d:d0:c3:29:1a:6b:65:11:c1:89:5d:07:67:8a:6a:48:
ef:9c:7d:02:6b:fa:79:cf:de:a0:61:b0:2d:aa:e2:a9:8c:48:
a1:bc:97:66:32:04:56:e8:2b:cc:5a:62:ca:d1:40:5c:aa:55:
6a:31:5c:a4:25:39:48:c1:6d:e9:92:2a:c5:84:46:3d:46:0d:
32:fd:f6:3e:5f:59:b2:65:bc:30:6c:72:7d:69:04:36:4a:3d:
41:06:f5:3a:c2:ce:3c:d7:df:ad:df:f8:c6:bf:60:23:33:f9:
d4:d3:99:08:c7:81:45:42:eb:12:fe:80:bd:89:8f:53:42:fa:
e9:f6:df:b0:4d:3d:31:d1:86:87:32:43:4a:de:52:e5:a3:39:
51:65:79:91:23:0e:00:27:aa:c6:a1:c2:d9:63:06:88:69:c5:
f4:7d:b3:bf:e9:87:5a:4e:39:d7:94:ba:49:57:d2:df:7f:5a:
26:48:cc:bc:92:d3:e0:df:17:37:df:ad:5d:10:37:f2:a1:3f:
7f:fd:ee:32:34:89:2b:f4:b7:85:d2:5b:27:15:70:0f:0b:a8:
48:6b:29:6f:a6:eb:77:12:88:cb:aa:c3:42:a1:1c:71:0a:2b:
b9:42:d9:bd:84:cc:4a:64:49:24:b2:96:5d:1c:ae:64:d4:b3:
cf:25:44:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:11:29 2026 by rpki-client