Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
File: fi3yT4V3zASMPHn7jbFIPnt14l0.mft (raw, json)
Hash identifier: Xlf+yDfrswvW4SmAMXTKMCG/GqW+huTEK9nJSbEzJSc=
Subject key identifier: 85:70:30:DC:41:C2:BB:49:AB:45:1D:16:7A:32:45:F0:9F:92:42:08
Authority key identifier: 7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D
Certificate issuer: /CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d
Certificate serial: 019D37F6EDFD450FB9409234CB472D2F3453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
Manifest number: 0318
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: SHg6DlIPYSjJdqUQkcfbowdEENo.roa (hash: uNxz49s0oCVTfxNZpUTxqGddLoqN/nonyiaoh+e/0+g=)
2: fi3yT4V3zASMPHn7jbFIPnt14l0.crl (hash: ObW8wkDqy0UDtiO1PQc4eH72pgHK3Cm6x5SLe/LH4jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ed:fd:45:0f:b9:40:92:34:cb:47:2d:2f:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=857030dc41c2bb49ab451d167a3245f09f924208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:62:27:89:ec:ce:97:a4:81:a3:09:fb:69:
bc:8c:e6:d8:1c:dd:6c:35:89:cc:e5:60:4c:2a:7f:
2c:54:ee:65:2d:ad:a8:2d:28:f4:96:3a:4b:28:54:
a7:ea:bf:dc:a0:7c:ac:b1:ce:d4:5c:bc:50:c9:d2:
77:78:8c:42:6f:5a:9f:93:a3:b4:8d:d3:a3:3d:c6:
0d:6c:a1:40:35:9f:4b:a2:b0:cd:f2:87:32:fd:e8:
c5:5d:f7:96:56:36:23:93:1f:b6:4d:92:d6:81:32:
1e:fa:f0:24:d3:ce:65:4a:af:97:19:75:48:39:4e:
03:d3:1c:c5:01:b6:ac:5d:94:dd:d6:21:88:0a:6c:
18:e6:8f:a1:6f:6e:c7:7d:85:1f:36:ce:7d:b1:82:
50:3e:b2:71:bc:1a:6d:17:8c:95:df:a7:2f:ff:72:
e4:eb:4c:8a:28:19:cc:62:92:92:c6:94:6f:01:10:
2e:df:a1:a6:e5:27:bc:df:d6:1b:66:7a:ea:20:64:
87:69:7b:12:c6:ea:70:09:cb:8f:82:05:53:f0:ce:
b0:45:02:1f:bf:d3:7b:8e:b1:8b:aa:3a:ef:ed:2b:
df:dc:db:e4:1b:74:e8:2c:b6:f7:ce:05:69:e0:06:
20:ef:b0:61:79:ff:c2:1b:0c:b7:9f:b0:59:de:cf:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:70:30:DC:41:C2:BB:49:AB:45:1D:16:7A:32:45:F0:9F:92:42:08
X509v3 Authority Key Identifier:
keyid:7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:82:3a:4d:42:bd:70:01:00:d8:b4:14:99:00:db:21:0d:26:
19:34:e8:9a:eb:a1:b9:e6:16:21:01:07:0f:a2:3b:c5:38:1f:
77:90:03:9e:7b:ea:5d:f9:50:4d:a6:4f:46:65:46:06:40:88:
77:22:fa:24:c0:84:36:57:32:77:cd:78:0b:45:03:0b:a8:b9:
f5:ca:a5:c7:1f:9a:dd:a9:0b:24:ab:ed:5c:55:ec:23:c3:60:
c3:51:0c:bd:12:f4:15:3f:16:22:71:28:46:f6:e8:68:b1:7e:
33:df:22:0c:4f:ad:56:52:e8:63:44:98:d8:9a:c4:01:b1:25:
1f:79:2a:17:c3:32:64:b3:f9:df:b6:15:bf:9b:1a:c5:72:7b:
56:63:dd:82:02:06:4c:14:fa:a1:ba:7d:5d:16:b6:1a:fa:c2:
65:3b:21:aa:d3:c8:57:43:77:34:38:df:4e:8b:91:96:78:53:
a2:91:71:83:02:af:5a:c8:13:e1:03:29:06:ee:44:4c:25:3d:
f2:e3:63:da:d2:76:db:3f:a0:1c:f8:c0:27:9b:50:03:6e:1c:
b5:b4:b8:cd:ef:b3:d7:55:b6:a2:e1:fd:92:5d:6e:6b:7f:82:
7c:dd:d2:e0:b2:f9:d0:ea:13:f5:73:ac:a0:6b:90:b8:db:82:
84:84:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:57 2026 by rpki-client