Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: w0rSwAK+Q11rHITYSazP1ypmMdrEscB/PeCg0vSITYQ=
Subject key identifier: 87:45:99:99:7C:D5:75:00:D7:20:23:1A:AF:9F:98:10:F1:BD:83:F4
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 019D39414BB848F304E19147AD8B25F354B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 1239
Signing time: Sun 29 Mar 2026 11:01:13 +0000
Manifest this update: Sun 29 Mar 2026 11:01:13 +0000
Manifest next update: Mon 30 Mar 2026 11:01:13 +0000
Files and hashes: 1: OGNMh9luEfhWYSfkuTxUdvEw3T0.roa (hash: W+Y0DYRWsQtmVscqd/FelKkUl50HuhEP05K5AvhVU6w=)
2: _wcSqPRV5JgTozaPPAply-Zy5SI.roa (hash: kaddq5Zo4l9c0eBW6a1M05v2cAL5RJlZmJFBmkNxnmk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: DMkQRUa2+L3u07t74Pr2qnnGP4RS8n7cPlA1cgSLuEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:4b:b8:48:f3:04:e1:91:47:ad:8b:25:f3:54:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Mar 29 11:01:13 2026 GMT
Not After : Mar 30 11:01:13 2026 GMT
Subject: CN=874599997cd57500d720231aaf9f9810f1bd83f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:00:7b:08:b5:91:6c:9b:85:e4:1c:0b:e4:
4b:b2:2b:b8:5c:96:05:df:e8:ff:db:57:c8:f3:d2:
53:ea:a2:8c:1f:5d:ff:d5:f9:f4:39:c8:0e:bc:48:
7a:d0:96:9a:7b:91:1d:42:a9:4e:6e:fb:5c:5d:b9:
dd:c2:b7:f3:db:94:69:24:c1:80:44:81:7c:cc:59:
7e:2a:48:32:7f:83:3c:53:bf:2d:19:3c:99:5d:5c:
22:3f:d4:dc:10:fc:35:55:68:f9:a7:8f:77:b9:aa:
3d:29:a1:77:e6:6e:6e:e8:ac:db:da:cb:43:05:ad:
5d:ea:4f:78:4d:3d:d9:5b:49:be:50:dc:80:66:07:
3a:d6:af:66:82:46:9f:de:1d:71:11:1b:91:f9:95:
f2:fb:51:17:5e:bf:d9:26:54:92:1a:99:b4:ab:95:
ea:6d:f6:1c:b0:da:e8:5a:cf:ae:3a:c0:8d:ef:2a:
88:80:fe:64:0c:9d:a3:65:99:64:f3:df:de:55:d4:
e1:d8:f8:ae:42:dc:e8:64:1e:a9:94:03:6a:b0:ce:
8e:d6:b4:9e:24:fd:e2:43:46:b7:c1:65:36:a2:9d:
c4:35:1b:02:b1:96:c5:cf:cf:6e:1e:b1:e0:57:e4:
c5:39:f3:35:1f:dc:a1:b8:59:85:2d:f0:45:1d:e2:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:45:99:99:7C:D5:75:00:D7:20:23:1A:AF:9F:98:10:F1:BD:83:F4
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:94:1b:bf:e5:a8:3c:a8:54:53:2d:68:8e:7e:f9:81:36:11:
c2:4d:11:25:77:89:de:d6:f8:83:e7:b3:38:44:52:ee:4d:1c:
53:41:3d:43:3b:a1:0c:bd:5f:48:0a:5d:01:62:b6:aa:28:21:
3e:9a:fc:3d:f3:95:2d:92:26:78:44:3b:30:35:31:ab:b7:84:
49:23:4b:fc:e4:4f:8b:9c:98:eb:3f:ff:a1:bc:64:4a:2c:38:
cd:11:27:a8:94:15:94:0c:b6:96:3e:8d:31:d7:e1:e7:d0:4b:
9a:80:6d:af:ef:c6:b6:c6:0f:e9:a6:13:81:ec:91:7f:cb:f3:
c3:8d:ac:d2:44:fd:df:8b:05:60:b2:c0:bc:d1:ba:d2:ae:5b:
f3:d6:bc:78:a9:aa:e0:a3:78:1c:41:6a:54:3a:24:99:0a:55:
35:de:1e:2b:5f:47:74:4e:89:e4:ed:c2:82:32:cb:4e:a8:cb:
b8:c2:c5:82:28:62:92:64:c3:47:c6:86:95:94:51:f6:66:0e:
b4:c6:c6:d7:c6:3d:17:64:09:4d:fb:bb:a8:18:8c:86:bc:e3:
ca:34:0d:98:8f:ab:08:2e:de:a9:bf:1c:9b:fc:ed:da:d6:8b:
62:e9:a4:12:4e:ae:62:96:1a:b5:9a:45:8f:07:a7:e6:54:3a:
6e:b4:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:45 2026 by rpki-client