Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
File: fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json)
Hash identifier: ivrY0tyecD5/T3nTMaLuxSJXqp/2++OPerFP5r9xyCs=
Subject key identifier: C0:97:F5:54:80:E6:9D:43:21:6D:4A:BB:B1:23:62:75:6A:45:7A:35
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Certificate issuer: /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial: 019D38D367D5B5DF5DD708E98DAA55C6ECE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
Manifest number: 1753
Signing time: Sun 29 Mar 2026 09:01:11 +0000
Manifest this update: Sun 29 Mar 2026 09:01:11 +0000
Manifest next update: Mon 30 Mar 2026 09:01:11 +0000
Files and hashes: 1: 0KNfQnYQ6OcbM3T_AT3Muh7GC10.roa (hash: PjhLMPqDKMFvKvIdwwT6W9RFU/bl/Jjyt27qCybKXQU=)
2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: R325wzA+tMMjUgC+3T2wF4dK5QR3HfMFBcRQxNny30Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:67:d5:b5:df:5d:d7:08:e9:8d:aa:55:c6:ec:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Validity
Not Before: Mar 29 09:01:11 2026 GMT
Not After : Mar 30 09:01:11 2026 GMT
Subject: CN=c097f55480e69d43216d4abbb12362756a457a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:09:c1:5e:06:93:73:0a:dc:45:cf:69:7b:
f2:ce:f3:c7:b8:12:1e:2d:0e:5d:c5:47:c9:a4:56:
c2:0f:5c:cf:3b:6d:0b:a9:45:70:f3:53:92:9c:8b:
96:6a:58:74:58:c2:b4:14:35:7d:52:5a:4b:ef:84:
4b:6a:de:b8:17:58:4b:64:6f:55:90:5e:36:e3:c2:
66:37:10:e4:33:7b:4b:d0:c9:33:87:0f:25:f4:5c:
0f:4b:1b:ed:23:ee:c2:df:05:d9:ed:cf:d0:03:68:
d2:2d:6f:be:13:57:14:fd:9e:c4:d3:f7:cd:37:2c:
25:6c:18:6f:79:49:91:8a:9a:c4:83:76:c3:ac:fb:
2b:20:57:39:f4:d9:7c:ac:a6:00:c2:46:f1:f1:6d:
84:f3:17:61:66:26:7a:e6:11:f4:7a:e8:4e:30:fd:
43:5d:f4:ec:1d:68:b1:e8:87:58:9b:66:b1:28:d3:
4a:3a:37:f8:22:f0:00:98:21:a0:cd:5c:a6:57:d2:
69:95:ec:2d:7f:9f:89:a9:bd:c8:58:6f:b2:f7:07:
e7:b7:df:91:93:c8:d2:aa:ee:e2:3c:9c:d2:5f:3d:
23:fb:b8:18:d0:ce:99:d1:f2:26:45:75:bd:0f:c8:
a4:26:8a:4f:8c:2a:07:c6:6c:65:9d:34:df:1b:80:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:97:F5:54:80:E6:9D:43:21:6D:4A:BB:B1:23:62:75:6A:45:7A:35
X509v3 Authority Key Identifier:
keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c8:b9:ea:cc:0b:7d:fa:e9:04:1f:39:02:0e:e0:10:bc:07:
b9:35:bb:10:e7:95:4f:63:02:3c:9c:f5:8b:ec:08:75:cf:be:
a9:08:95:93:11:ab:19:8e:20:a4:8a:79:2d:3b:29:ee:f9:53:
63:29:ef:22:cf:5e:96:c9:e7:84:1c:4b:56:42:ce:ff:e5:af:
57:be:3f:a8:83:b5:70:aa:be:54:a3:ab:7e:b2:03:f6:95:3f:
8c:93:d7:10:67:17:5c:d2:ac:6d:de:f9:cf:c8:ca:c3:e4:1e:
05:4a:e1:b1:cd:93:28:47:80:2d:f2:87:ca:d4:62:f5:6b:b9:
cd:2c:95:c2:c0:d6:e1:91:5a:94:14:c9:7c:5d:1c:30:7d:32:
4c:72:c8:1b:fb:27:ed:35:9e:c8:38:04:2b:d2:15:d9:fc:7e:
09:96:4f:74:c8:09:3c:02:87:2a:72:52:15:9e:ab:ad:80:e6:
35:54:02:a6:78:be:e9:34:31:99:0f:4f:2a:c7:32:d3:1e:9a:
a3:a2:e9:44:29:e2:70:86:fc:9b:ea:89:94:d3:03:b0:29:57:
86:98:4d:aa:46:35:33:48:e3:90:ab:b9:96:b8:94:68:89:d6:
c3:1e:7c:ca:da:68:df:48:84:56:58:da:f2:b4:2c:a4:ac:1c:
f6:48:ae:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:36 2026 by rpki-client