Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File: fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier: TjGDyzAjiMwFHOztYYz8eiGJHjIABU28mZS8CswHNc8=
Subject key identifier: 59:BD:30:64:D0:26:5B:43:96:38:32:25:35:EB:F2:E1:C6:AC:D3:CD
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial: 019D3AC108BBD61AFABC050430FC6BFAC3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number: 0A5E
Signing time: Sun 29 Mar 2026 18:00:22 +0000
Manifest this update: Sun 29 Mar 2026 18:00:22 +0000
Manifest next update: Mon 30 Mar 2026 18:00:22 +0000
Files and hashes: 1: BVqqb8lSIphtFXGqi1sz49tXm0E.roa (hash: ccDupErLCJ+UOpMWaTKoluVs74aytETrBSW4WCesOvI=)
2: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: LRHqfQH4T9RhZyy6NUhcvJTxzCWauTCPyzBlpSdoWrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:08:bb:d6:1a:fa:bc:05:04:30:fc:6b:fa:c3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Validity
Not Before: Mar 29 18:00:22 2026 GMT
Not After : Mar 30 18:00:22 2026 GMT
Subject: CN=59bd3064d0265b439638322535ebf2e1c6acd3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e7:be:54:e3:8f:d0:db:80:e1:35:a9:6a:90:
d1:43:4e:65:cc:8b:56:f9:ad:42:04:31:14:8c:9a:
ed:28:8c:7d:58:cf:2d:2c:d7:96:79:2a:dd:a4:a0:
c4:2b:cf:2f:68:04:47:6a:2b:f8:54:b9:68:77:ff:
63:ee:44:46:70:33:75:cc:82:c1:b5:a8:3e:c9:1b:
03:bb:96:03:5b:1f:8a:fe:b6:10:3c:57:53:30:60:
46:25:d8:4c:09:4c:d2:12:86:4e:3b:75:d2:72:e3:
68:c5:54:e6:ad:25:76:46:6d:a6:b8:43:0d:46:5c:
18:ff:ee:8b:1d:c7:e6:af:ef:28:a6:b4:58:f5:81:
00:67:b7:40:96:a9:7c:c0:63:98:d1:00:87:9d:3c:
b3:b8:ab:b4:1e:4b:49:e8:35:08:34:f0:93:20:95:
2c:bb:c7:dd:e5:94:ff:60:0c:7d:8b:0d:99:9c:14:
7d:a3:f5:a4:11:47:13:70:2b:85:9a:97:97:11:a9:
bb:45:e6:db:7b:0d:67:c2:a4:4d:49:1a:c9:ff:30:
b9:1b:ad:68:7c:12:55:05:aa:aa:21:ed:71:a2:23:
e2:c4:c0:6c:b2:2e:3a:ad:d4:d4:4d:19:f3:13:6b:
94:7a:e5:c9:bf:94:c9:11:8d:0e:c2:c4:21:cd:8f:
27:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:30:64:D0:26:5B:43:96:38:32:25:35:EB:F2:E1:C6:AC:D3:CD
X509v3 Authority Key Identifier:
keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9b:34:2a:52:3b:1a:a1:d7:00:10:4e:e1:a7:e9:62:ba:4e:
b7:bd:c7:50:b7:3d:a5:2d:b3:3e:cb:3a:f3:a7:66:60:9a:72:
c5:4f:2c:42:b3:e4:8b:4a:44:7f:77:b8:90:5b:0a:3b:eb:73:
46:d3:b9:a8:f5:57:3b:13:84:52:7f:e4:01:76:2c:b5:a5:2e:
36:ad:5f:56:54:a0:a6:30:49:48:0b:8c:cc:7e:c1:d9:f5:3b:
eb:5d:f0:9f:d7:1b:b8:31:75:25:e6:fa:b4:f2:7d:da:17:7e:
d5:7b:d0:a3:58:77:48:bc:df:32:6c:fc:9e:a3:fd:54:9b:c6:
f6:4d:69:9d:fe:12:fa:13:cd:9f:69:ee:2f:3f:1e:fe:56:fd:
17:a5:32:db:41:dd:56:d4:a3:9a:4e:fc:c9:7a:f5:79:7a:9e:
af:0a:f5:23:9f:62:c3:01:c3:ac:c8:23:bd:a5:eb:db:6a:81:
5a:4c:3b:e2:c4:49:8b:28:c9:d7:44:b8:ec:15:0a:0c:61:8d:
2d:41:59:3f:17:24:21:8d:28:78:f1:df:5d:44:ad:76:9e:6e:
37:ed:f0:3a:91:c4:db:13:f8:4b:a5:d3:55:59:b0:06:99:44:
4d:a6:f3:fe:ec:ee:8c:33:9a:3d:34:3c:86:7a:54:17:b8:7a:
29:59:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:11:16 2026 by rpki-client