Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier: 05KAr43JlJMDVoVpXJ+6I4cXmHRMyQ/1XLvWyKD3is0=
Subject key identifier: 2E:AB:82:21:17:72:05:7C:8B:22:37:D2:51:E6:4E:1E:E2:E5:2D:37
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 019D3909B14AFE5DA52CA52B0A458289E491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number: 12D8
Signing time: Sun 29 Mar 2026 10:00:29 +0000
Manifest this update: Sun 29 Mar 2026 10:00:29 +0000
Manifest next update: Mon 30 Mar 2026 10:00:29 +0000
Files and hashes: 1: beJshXTCFytgHzjAamZUfkQuubM.roa (hash: Lh9/62VbhV+tIPQCobGS97fKdIV26rAllSw/ibORPkA=)
2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: Ip5paMB8v2iry5oIt5U4m/lTV29pd2bo6yrhwVWheJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b1:4a:fe:5d:a5:2c:a5:2b:0a:45:82:89:e4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Mar 29 10:00:29 2026 GMT
Not After : Mar 30 10:00:29 2026 GMT
Subject: CN=2eab82211772057c8b2237d251e64e1ee2e52d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:97:3a:3f:a7:d9:c3:b0:03:47:e9:06:2f:
e7:92:a6:7b:e5:d5:ff:92:d1:34:81:0f:59:4b:c7:
75:0e:03:76:f6:95:4f:52:39:8b:63:db:83:80:91:
18:f0:f4:34:48:46:32:64:1b:8c:77:2c:3b:22:a4:
1a:ce:85:ff:52:e9:bd:bb:bc:83:20:a0:34:d8:54:
94:f2:30:d8:3a:56:4b:52:83:69:ce:3f:b5:cb:7c:
b0:a1:d2:e6:0d:ec:29:44:6f:74:e1:50:c0:ac:55:
e7:3e:79:a5:4f:91:df:8d:6f:19:1c:73:2f:64:a2:
5c:b6:79:e9:82:56:35:32:c6:df:14:1b:55:99:fc:
44:8f:ab:a8:5e:82:19:07:85:f4:5f:fd:7d:b9:1e:
80:38:84:3c:b8:1e:aa:bb:d5:ff:72:05:73:4a:c0:
0f:ce:a2:e7:75:93:1e:07:88:85:0e:56:bf:83:08:
57:ad:8a:61:ba:04:7d:24:fb:76:82:a4:21:60:4e:
c7:78:55:d8:4e:69:4e:27:39:ce:75:13:08:b2:b1:
fe:9c:21:dd:02:56:40:15:ac:ed:75:78:d6:04:2f:
37:15:f5:ad:71:f3:b8:63:9c:36:51:e5:ea:d3:ff:
27:5d:52:a2:cb:e3:cf:40:8c:da:58:59:82:be:54:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AB:82:21:17:72:05:7C:8B:22:37:D2:51:E6:4E:1E:E2:E5:2D:37
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c1:36:d6:c6:19:06:97:bf:c6:01:59:76:25:90:f8:e2:9e:
ab:a6:36:2b:4f:83:e8:43:a2:48:9f:fb:6b:d3:64:c4:e5:26:
64:68:23:bc:8f:fb:4f:36:9e:a3:af:c0:37:46:42:47:af:28:
e6:21:79:96:d8:76:82:31:55:f2:d5:f4:df:e4:7c:5a:29:cb:
28:a1:4b:88:2a:51:92:34:d3:75:d4:e8:a4:e9:db:74:92:58:
36:d6:37:dc:60:c6:3e:4f:0e:bf:5e:1a:d7:88:8c:9c:6d:f1:
8c:5a:bd:f1:9a:45:eb:02:0f:eb:54:a1:17:57:0b:7a:b9:89:
2e:d7:42:d0:aa:d3:0b:58:b1:fe:fd:1e:6d:f0:ee:f8:a3:f1:
b8:d6:1e:d5:3a:81:38:97:7e:47:38:be:27:90:b3:17:9f:d1:
e6:48:c9:49:e4:ef:b8:8a:49:4b:70:f7:8e:a3:ff:04:28:eb:
a3:a9:31:52:cf:4d:a0:6f:e3:e7:36:07:71:14:c2:77:06:36:
c3:2d:ad:49:c1:a3:c6:3f:05:51:ae:41:ef:00:9d:b6:e5:c3:
48:1c:3f:54:05:2b:b8:75:83:f7:b9:42:27:e3:ec:ca:bc:e9:
ce:3a:06:2a:88:8c:bb:7d:ec:97:aa:d9:d2:56:2b:ef:0f:e4:
d5:8b:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:55:28 2026 by rpki-client