Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: C6ppLK+B3QR+SXYX9J3ctGIgCLa5UWS0GI8xq22n8C4=
Subject key identifier: FE:EC:7A:81:A1:7A:10:EA:E8:E9:29:B1:93:9B:35:2A:89:81:12:F1
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 019D37522D3B6DE3766E012FD0E76280A4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 091B
Signing time: Sun 29 Mar 2026 02:00:25 +0000
Manifest this update: Sun 29 Mar 2026 02:00:25 +0000
Manifest next update: Mon 30 Mar 2026 02:00:25 +0000
Files and hashes: 1: f4bD2j2ZctfyMRffHbpMKHwXRSU.roa (hash: rtGJzd+eO3rg+u8EKiSavSngCqzv1WolCN9nYYZQY64=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: IJ1df+nr0g1Vj60e1zzQBnsAlsnhDbCa9r4mgVhPLm0=)
3: sWzc9UukZssUn_EjgB277LtZfe4.roa (hash: pyPZe27dAwl2biV/QtNdOvZ13e3NYVb6oI5PNCsGFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:2d:3b:6d:e3:76:6e:01:2f:d0:e7:62:80:a4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Mar 29 02:00:25 2026 GMT
Not After : Mar 30 02:00:25 2026 GMT
Subject: CN=feec7a81a17a10eae8e929b1939b352a898112f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:35:98:2d:0f:97:44:6b:d5:1d:ab:24:de:
39:f6:1a:c4:75:ce:4e:db:23:df:5e:6f:86:1f:13:
4b:1b:82:85:a8:f9:74:f6:b2:6e:56:ff:60:b5:87:
1c:b6:b1:a5:b7:8f:0d:a8:a0:76:33:bb:46:23:96:
29:51:00:68:37:66:81:03:b5:0d:37:7d:af:12:3b:
95:4c:64:71:48:6a:a4:87:f1:2b:ee:1e:16:f2:1a:
c4:99:36:d2:69:50:a4:3f:9f:e3:b1:e5:13:55:15:
b3:d8:2b:32:15:3f:d1:e5:fa:28:18:bf:d8:24:01:
d0:3a:d5:48:8e:c4:15:a1:3d:f9:31:66:c9:f0:ec:
59:1f:5f:ba:cf:79:9c:73:02:b3:3c:f5:64:ac:2b:
b7:99:95:c8:1d:5e:4d:0e:0e:d0:2c:29:c1:10:ef:
bd:01:82:6b:7c:37:8a:81:6c:a0:2d:e1:4c:3f:49:
88:ac:41:ed:f0:90:3a:26:75:e1:67:b4:d7:ba:b2:
ad:6e:05:8a:20:f8:7d:11:67:a3:a8:27:9f:5c:de:
9a:c1:73:58:de:7d:6f:62:f4:9e:e9:b1:28:93:ed:
81:4c:38:c8:aa:d1:6b:f9:91:2b:c1:5f:78:26:a5:
27:73:08:b5:8c:de:53:0c:e0:17:f8:fe:b9:93:c8:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EC:7A:81:A1:7A:10:EA:E8:E9:29:B1:93:9B:35:2A:89:81:12:F1
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8e:e2:64:9f:c8:40:b5:1b:48:2b:da:3c:8f:f3:79:23:b4:
61:c3:fe:ff:80:0d:c7:04:be:90:76:09:a6:c6:f5:76:86:40:
b1:b9:d6:33:4a:43:10:56:78:4a:ad:31:27:63:05:45:b7:8e:
03:6f:f0:e9:51:f1:20:6e:a9:74:b5:f5:06:bb:f7:48:e7:f8:
c6:51:25:d5:a4:c0:bc:41:df:38:43:ab:6d:52:da:f0:88:53:
61:d7:45:ae:32:9f:1d:2c:0d:7c:97:12:f9:fd:82:48:c4:cc:
9b:f9:50:aa:d0:cc:e5:49:89:00:f6:34:d3:2e:10:e7:e3:d8:
92:36:7d:fb:83:32:c7:ca:40:79:39:d9:4f:5e:60:c4:1e:db:
dd:22:31:e1:80:e1:31:a9:16:98:32:e6:41:69:53:c5:b4:7b:
94:a8:f0:03:92:84:8e:fd:c0:8d:b0:7d:1f:a7:bd:40:ee:7d:
41:9d:fa:f0:d1:69:da:33:a1:18:09:5c:8c:6b:a0:00:d0:45:
46:a6:72:15:b9:29:d8:8f:9d:9e:c2:04:6b:0d:9b:20:16:55:
3f:9c:13:8a:0e:30:64:e6:ad:fa:a2:31:7e:c7:db:5a:b7:f3:
26:84:31:e1:8a:7a:67:f0:c4:4c:79:2d:25:3c:fe:1a:1f:3a:
ec:ab:30:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:14 2026 by rpki-client