Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File: fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier: 6ZU+SazFNbTzVUIN23hqYOVxk558ZSZmXFaNo9Z9TFc=
Subject key identifier: 02:49:90:CA:D7:E6:08:32:E5:EA:AD:16:7D:BE:6E:E6:C2:6C:FA:9B
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 019D39AE79CAC363A837D7E427C41E65E917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number: 0FEF
Signing time: Sun 29 Mar 2026 13:00:28 +0000
Manifest this update: Sun 29 Mar 2026 13:00:28 +0000
Manifest next update: Mon 30 Mar 2026 13:00:28 +0000
Files and hashes: 1: Oz9Ttp-AVh76JnAb-kMb1xzkjno.roa (hash: sEZiAkfsJFCuDJdfukBNYz0nrUtamX75upkoItAaXTU=)
2: bvjL4ilRFW0KRgukAA7c6bj--pM.roa (hash: NB7wiQjjbBAzpwPNdbh06lraiRIpqpLN7dXPm6C9Qc0=)
3: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: XkEPRyo3wYOfKehUADG7SzBRA0QiQVMTxBSpeozml5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:79:ca:c3:63:a8:37:d7:e4:27:c4:1e:65:e9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Mar 29 13:00:28 2026 GMT
Not After : Mar 30 13:00:28 2026 GMT
Subject: CN=024990cad7e60832e5eaad167dbe6ee6c26cfa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:12:2c:1b:c3:ac:aa:6e:bc:73:6f:ac:c1:
db:1c:b7:2f:a5:b6:ca:71:e7:fa:b8:b5:89:55:b4:
45:08:e7:ab:5f:3d:f8:27:77:98:78:6d:df:f8:81:
83:5b:40:ed:90:fa:9a:8a:08:9c:aa:ad:6f:97:02:
27:64:95:55:38:86:3d:c1:69:5b:48:7a:b1:28:fa:
a4:08:85:87:95:9d:01:aa:6c:de:ab:63:e2:88:a3:
c3:09:1f:64:f9:7b:23:69:d3:d8:9f:f5:ae:75:b6:
71:d6:69:94:f1:55:fd:bf:04:37:88:36:04:e5:03:
73:b4:50:26:eb:d2:ae:cb:a8:f7:51:ba:3a:c3:f8:
eb:66:34:4c:ef:54:50:eb:ee:36:8e:25:12:f0:22:
ac:cd:2e:e0:1e:dd:ad:00:eb:e1:c6:ec:34:92:97:
19:0e:d0:e0:d4:3b:03:6e:42:68:d0:06:36:de:52:
7c:bd:22:ae:61:25:f8:74:f6:1a:d3:c3:93:ee:b3:
34:43:54:f9:f2:51:7d:d2:81:0d:47:59:52:02:38:
66:6f:11:5d:3f:d0:1c:d7:4f:a9:e1:f6:6a:c4:94:
8a:60:aa:04:f5:09:3e:d7:db:4d:cb:4a:2f:2a:61:
d0:a7:50:65:f8:03:b9:82:fc:5b:7a:61:79:dc:e9:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:49:90:CA:D7:E6:08:32:E5:EA:AD:16:7D:BE:6E:E6:C2:6C:FA:9B
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:f6:0a:c4:b1:ff:ce:6b:3d:30:ed:63:2f:1a:3d:4c:8d:
83:47:0a:d1:db:60:23:1e:e6:7d:f9:d8:5a:ae:65:84:67:17:
09:4b:78:8a:f9:fd:89:b3:00:c5:40:12:24:b0:30:42:28:83:
84:53:6a:01:cb:72:03:d6:c3:14:51:32:bc:cf:f5:bf:40:af:
ce:25:ec:0f:08:ea:4f:bd:d8:ec:d4:0c:bd:32:1d:eb:82:8d:
f4:24:43:4f:d6:f6:2d:fe:e8:5a:0a:d0:dd:a3:64:59:f7:8c:
a7:99:22:40:ce:b0:df:94:25:aa:28:f8:0c:19:75:64:e8:d0:
27:57:b3:fc:b6:f3:08:f4:3d:8c:9a:a0:a1:d5:89:e4:8c:06:
9b:92:63:b0:e8:fc:ff:d0:4e:d4:62:16:71:56:14:ee:84:ec:
08:35:27:7b:55:86:4f:b6:11:1d:fc:82:2a:50:b7:6e:de:67:
17:0f:4d:6d:2b:51:1a:12:17:f9:7f:3d:9f:a9:6c:40:02:8e:
eb:6e:47:dd:d5:1e:6a:15:8b:3f:12:d3:e2:ed:80:bc:94:83:
52:17:74:0f:e3:a2:2d:59:7b:97:43:87:e7:09:d7:d4:da:b0:
22:f1:0c:a8:aa:6b:f8:8d:1b:41:42:12:f5:40:74:fc:1e:d5:
14:4e:ad:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:14 2026 by rpki-client