Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
File: Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json)
Hash identifier: Rl7yRImNEin2EygZguSbEp/J4kHxJkyGDr/M5u56+84=
Subject key identifier: 4A:2F:AE:02:C5:B6:A6:D5:02:B7:AE:51:69:A1:DB:07:5A:4E:28:4F
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Certificate issuer: /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial: 019D3909C890C5F7F124996F4674FA0F6D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 10:00:35 +0000
Manifest this update: Sun 29 Mar 2026 10:00:35 +0000
Manifest next update: Mon 30 Mar 2026 10:00:35 +0000
Files and hashes: 1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: palXfzV3g4C21LKwKl4J0kTq1uyVuhCFXbsYa5tVLg4=)
2: WrFi9wM8-MBxaZss80dQCIHVjIA.roa (hash: T4A9s6KUh5deKQT7uVYVm6QXd45Uqa2wbOgRg/X9a94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c8:90:c5:f7:f1:24:99:6f:46:74:fa:0f:6d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
Validity
Not Before: Mar 29 10:00:35 2026 GMT
Not After : Mar 30 10:00:35 2026 GMT
Subject: CN=4a2fae02c5b6a6d502b7ae5169a1db075a4e284f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:35:66:7b:b8:b1:36:55:ad:dd:fb:e9:7b:
6e:4d:d0:42:03:6e:16:32:3a:8e:dc:9b:10:ed:ac:
34:2a:da:56:ac:1d:be:48:9a:63:2e:ae:cd:54:67:
2c:8c:80:9b:16:da:c2:16:ea:32:c2:37:22:75:3d:
bf:94:37:2d:84:91:87:51:ca:8b:9d:7d:91:ec:91:
e2:1f:14:32:2c:e7:a4:ab:f1:08:f9:c8:8a:68:cc:
b2:1a:26:9c:72:d8:42:b6:c8:5b:a2:5b:d2:07:a0:
1c:a3:3a:03:c1:0b:00:7e:a6:36:c0:53:23:01:85:
1b:d2:2a:41:74:f8:d7:3e:b5:c9:bb:0d:35:a1:f6:
aa:b4:49:38:23:ad:78:80:73:88:19:39:63:d9:bc:
fa:c7:03:42:a6:78:6a:be:8b:e3:3d:c0:86:71:8a:
69:ee:3b:f8:a9:62:39:6b:4a:9b:63:95:8a:71:65:
eb:51:72:f9:4a:83:a3:a0:04:44:92:e3:74:10:02:
7b:db:c0:83:c6:85:f1:81:e8:27:8d:da:44:f4:9a:
ab:9a:b0:a2:51:08:2d:2d:5a:40:54:94:a6:2e:20:
1e:58:8d:0a:ed:d7:46:73:b4:c1:c2:09:d6:97:fd:
3d:30:e3:44:4d:8f:45:53:ab:8e:c0:96:24:3f:49:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2F:AE:02:C5:B6:A6:D5:02:B7:AE:51:69:A1:DB:07:5A:4E:28:4F
X509v3 Authority Key Identifier:
keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:26:6c:d0:9c:a3:82:17:db:bc:59:96:e2:80:e1:9d:35:6d:
7d:3f:b3:ee:6b:fb:a3:d1:70:68:4c:23:a2:da:3a:1e:9f:2a:
8a:0f:11:3f:c2:aa:e7:e6:19:a4:02:5c:1b:17:2d:74:95:a8:
39:50:eb:ac:63:dc:e3:f3:b4:a5:97:8a:d0:ac:36:f9:9f:dc:
b4:1b:e2:e2:f1:5c:85:99:fd:c2:d5:fc:10:72:55:97:7f:08:
aa:51:bb:ec:e7:bf:41:4f:9e:50:56:95:bb:66:10:d4:11:d3:
5a:2a:b3:3b:a0:f7:db:56:9c:50:b7:c0:07:97:af:33:3a:41:
58:18:df:d7:12:90:0d:46:6c:c6:d9:4b:79:0b:ac:84:bb:79:
64:df:eb:26:9f:12:dd:08:0a:55:a9:6d:25:04:d3:e9:a8:e0:
3e:18:06:2f:28:c5:a7:3b:2e:11:4e:fe:3c:df:61:94:e1:a1:
9e:6d:70:3b:d7:58:df:e4:da:39:70:4d:a5:dd:e2:ba:38:c1:
2e:ee:c2:6b:8b:a1:bc:33:0d:e3:3c:19:a1:75:39:f2:7b:2c:
19:9b:33:56:af:0a:92:88:37:c1:e3:38:b1:a6:e4:de:b1:59:
9e:7c:30:f1:4d:5d:b8:53:24:d4:c9:e8:28:97:17:c6:40:44:
30:af:be:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:14 2026 by rpki-client