Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
File: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json)
Hash identifier: d0h+D4DCYQ2TfS4tDCLcITQf5TzyOfItdgeto+mJ7sE=
Subject key identifier: 4F:9D:36:59:C4:FD:06:A8:ED:BC:6D:33:50:91:B9:76:C3:A3:AC:A9
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Certificate issuer: /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial: 019D382E04C4B7954CEBFA091981C6F53CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
Manifest number: 11BA
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: dY8PRHODabkygNlq6-JaDEHqZls.asa (hash: wO6s5irr+VwBuwHpzpyaBiPqP7VqY55H1NCOsRyEv68=)
2: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: kRfKjI0HpoxA85l9r00RwiWEbDxgGEkWJbt1XHx0aiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:04:c4:b7:95:4c:eb:fa:09:19:81:c6:f5:3c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=4f9d3659c4fd06a8edbc6d335091b976c3a3aca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:41:a8:a3:fb:72:58:93:99:fd:b2:7a:27:
42:58:08:ba:f2:32:cb:c5:7e:1b:a4:53:a5:ab:b6:
65:49:d5:14:13:eb:82:1e:4a:c0:66:38:d7:cf:95:
11:64:e3:5a:9b:df:e2:1e:1d:c0:ed:c5:2e:96:8a:
47:39:bc:23:2a:df:92:19:f8:22:1b:8d:39:cb:fb:
24:c7:05:99:5b:5f:8c:b5:76:79:e0:81:be:8e:a4:
f6:b1:a0:1b:21:ab:2a:c7:ff:ff:6c:0f:19:00:59:
0c:9a:ec:e5:91:93:87:c0:bb:6b:67:14:3e:bd:01:
ed:51:96:8f:23:33:ce:e4:ca:89:1e:83:33:40:34:
75:44:0e:a7:71:b9:fb:50:09:65:47:ab:ab:c3:d0:
16:3b:78:4d:69:2e:3a:22:ab:b2:34:03:0a:ad:b5:
e7:e8:14:89:ba:07:78:29:fd:b8:33:27:bd:4e:37:
49:5a:d9:87:27:2f:56:20:eb:d0:13:69:86:2c:01:
c2:b7:73:5a:2f:59:d1:8b:0c:86:51:83:aa:bc:19:
82:7a:4d:72:bf:b2:4b:68:15:49:d4:a2:d1:57:5d:
4f:3c:f3:05:9f:b2:b6:24:92:ab:33:f3:28:15:b5:
c0:10:f3:85:31:f7:98:f1:25:50:97:61:ca:f2:7c:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9D:36:59:C4:FD:06:A8:ED:BC:6D:33:50:91:B9:76:C3:A3:AC:A9
X509v3 Authority Key Identifier:
keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:da:bf:73:6c:fc:10:4b:ea:22:18:00:b8:6b:c6:6a:cd:71:
10:99:ea:ce:59:e4:e5:82:0a:c5:d3:d6:2a:c8:dc:95:06:15:
88:38:2a:10:54:c0:12:7f:86:f7:a6:b1:61:a1:9a:1c:1f:47:
ff:d7:8d:e8:70:61:a0:21:89:71:69:cf:18:b3:2b:10:8f:87:
ab:5d:2c:eb:60:fd:ab:51:28:0d:59:05:8b:21:3f:7c:d8:5f:
6b:33:7d:87:38:ff:95:d4:7c:0e:69:95:4a:2d:7a:03:a3:c5:
96:05:d4:61:7c:bc:0a:da:5f:a4:b7:32:cb:68:2a:29:38:43:
a2:55:54:e1:17:54:1d:36:11:a8:7f:63:b4:3b:6c:91:62:4e:
5e:fc:4c:ca:95:a8:21:c3:17:ed:d6:4c:65:fe:cc:ae:46:a0:
1f:66:d0:14:87:78:79:86:b7:f2:a7:05:80:c4:63:ae:91:50:
70:f0:05:40:7c:f2:b2:91:e5:ce:77:7a:c2:e3:78:09:85:72:
af:dc:77:8b:6b:3f:27:80:fa:53:15:cd:56:25:ae:15:2d:65:
7d:b4:0e:d7:01:bf:81:fd:a0:58:90:19:a7:fa:1e:0b:01:c6:
7a:47:ac:a7:ed:5d:c7:d0:a0:a6:3b:29:4a:65:de:25:d0:e1:
33:0b:b7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:30 2026 by rpki-client