Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: NA1hHFHwVXUtD5Sc25Lga+6MMA0XRaU3NKXzkSgcaME=
Subject key identifier: F5:A0:52:D1:05:96:9D:7C:61:1D:E1:F7:8A:EF:0F:A3:9E:23:DC:F7
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 019D382E0FBB60371E0788E8804D22D1C09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: R59w12pAAIFbZQxg415N0wHOFH+zLiH7RcENeeNu+V4=)
2: grQlShm9Yf4p9v0UY4WRgIC18Rg.roa (hash: 0KLMtmRL0pnGPXXoN5qSCFJywF+voZI8ebkJsYdl6wg=)
3: l1AVp_w4-LVuNkKZXyFJBaRiTqU.roa (hash: pv6l02vTFMwEiJ4PcQNABkmbJULiDmx5aoXWeKtSRA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0f:bb:60:37:1e:07:88:e8:80:4d:22:d1:c0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=f5a052d105969d7c611de1f78aef0fa39e23dcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:8c:b9:d9:5f:fe:17:2c:fc:cf:52:54:f9:
9b:6d:01:dd:6d:e4:bb:3c:57:49:36:d5:09:4d:7a:
60:09:4c:8e:a3:e7:7a:9b:20:ed:96:96:8e:16:2c:
48:90:71:79:27:e3:57:ed:92:8a:da:af:cc:17:d7:
37:b4:43:46:bb:e5:e5:13:b7:07:83:31:f6:25:52:
28:66:d3:37:36:83:bc:e7:39:e0:2f:3a:0b:9f:56:
44:91:b1:91:ea:3f:61:1f:af:49:88:6a:f1:c5:c0:
43:d1:48:3a:f3:24:a5:4d:98:e9:d1:e2:95:73:92:
7a:38:85:18:5d:c5:9f:e2:7d:be:85:c3:84:a9:29:
bb:d4:d9:ab:c9:7f:53:6d:e9:f2:fb:ee:6c:c4:f2:
ff:fc:b2:8d:45:70:26:00:1f:4f:d9:e9:75:dd:79:
25:c0:27:54:6b:50:05:29:cc:a1:8e:a7:cd:ea:3b:
0f:e8:a9:1a:c0:60:22:e5:e1:97:b8:c5:95:26:f1:
a4:b4:0e:97:57:a5:33:55:7c:a3:38:04:75:b7:e5:
64:db:9e:ab:13:6a:35:88:75:89:bd:89:07:27:2f:
cd:8c:0e:14:aa:94:b2:ca:5e:db:94:32:0d:26:5b:
46:52:0b:66:d5:86:5e:90:17:3f:d4:ad:1d:59:5c:
79:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A0:52:D1:05:96:9D:7C:61:1D:E1:F7:8A:EF:0F:A3:9E:23:DC:F7
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7a:ac:87:19:74:7a:64:12:92:18:2f:a0:4c:58:f7:29:c3:
4c:ce:54:5e:58:17:d6:0d:01:b2:93:17:b6:52:1b:1a:3c:fa:
af:86:0e:f0:5f:a6:f6:56:b1:0f:7a:5d:28:33:e1:d1:e8:8f:
c7:f6:87:ca:c8:00:4c:7e:78:3e:08:b7:90:ab:f4:78:92:85:
ee:2b:de:97:36:6e:6b:3e:1b:03:cc:87:6e:58:6e:bb:b0:51:
fb:ee:fa:0f:eb:93:70:23:26:d0:9c:2c:c1:9c:bf:ef:48:13:
b8:a1:c4:87:7b:56:e6:8e:62:b1:7d:ce:16:53:78:ec:45:9c:
af:80:ce:85:e6:79:ea:6a:0e:ba:59:f0:cb:f2:dd:76:93:28:
ad:da:8d:ca:f4:53:84:ba:a7:5e:e0:83:7f:e7:1f:bd:23:b9:
48:cc:d2:8a:14:cd:12:9a:38:b8:b7:08:59:75:16:4e:ad:94:
6f:00:e5:8f:d2:b1:51:35:d6:a2:84:ff:ec:f9:63:04:53:43:
fa:e9:6d:10:ad:32:ad:fc:36:e9:83:53:a0:8b:c2:8c:85:18:
68:5f:45:0d:09:33:70:c4:26:bb:01:1e:83:08:a3:ce:17:2d:
55:b6:85:2a:58:f8:8c:32:91:24:bd:e3:c7:99:dd:b2:91:79:
4f:5b:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:52 2026 by rpki-client