Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: 2LP3Sr0U0wJJkiKP1WFl0BBBrnlT7tf6+c2p4irGxzI=
Subject key identifier: 65:50:F1:18:FA:90:8C:9D:93:67:CC:FC:30:B9:71:6D:0C:1E:1B:71
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 019CE7B73AD99FBD338C3AAADF498DFA2DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0D9B
Signing time: Fri 13 Mar 2026 15:01:10 +0000
Manifest this update: Fri 13 Mar 2026 15:01:10 +0000
Manifest next update: Sat 14 Mar 2026 15:01:10 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: emjaSBzoUl3JGnkzJTRN35c1B6Ljt/kIrZZtfMayAxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b7:3a:d9:9f:bd:33:8c:3a:aa:df:49:8d:fa:2d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Mar 13 15:01:10 2026 GMT
Not After : Mar 14 15:01:10 2026 GMT
Subject: CN=6550f118fa908c9d9367ccfc30b9716d0c1e1b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:22:c4:cc:ce:28:39:87:68:55:d7:81:12:
c5:a1:cc:ab:94:51:70:f9:ff:6d:62:09:29:91:f4:
43:82:64:7b:24:81:48:93:74:01:fd:e7:9d:20:77:
bb:02:21:2a:1a:03:2c:48:5f:b2:c6:65:de:fe:7e:
26:9f:84:d2:aa:f1:18:67:b4:b7:bf:9e:4a:30:10:
ee:72:4d:a9:33:77:59:82:f2:29:eb:e2:93:35:b8:
76:40:85:78:c6:17:d0:ac:ee:94:7e:96:4e:d9:97:
6f:31:f6:e9:35:99:d4:22:01:0c:42:d1:76:bf:8c:
69:24:31:60:31:e4:ac:15:11:af:f6:3c:35:b4:6a:
26:e7:09:8a:57:dc:0b:9a:e4:0e:cb:59:a3:eb:47:
33:3a:9b:c9:a1:46:ef:a0:c4:34:1c:3a:af:50:08:
79:72:ef:34:94:0c:bc:70:9e:80:cc:16:7a:f3:d5:
e3:3d:2a:61:cf:41:f3:3b:cc:11:bd:a8:ee:78:a3:
ce:7f:20:87:ab:10:fd:92:73:aa:c8:a4:38:51:9d:
77:ab:e9:63:c6:de:17:3e:5b:34:89:06:fd:3a:08:
f2:3d:6f:7a:ba:e7:e8:9c:a9:e4:56:71:ec:56:0d:
ac:fc:2f:bc:42:d2:59:ca:3b:c2:78:6a:1d:02:03:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:50:F1:18:FA:90:8C:9D:93:67:CC:FC:30:B9:71:6D:0C:1E:1B:71
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:42:4f:8c:44:d1:65:5f:1e:92:62:61:29:aa:8e:11:f6:eb:
f2:d4:ec:f5:19:60:24:f4:50:84:10:c0:06:46:dc:0e:de:b7:
d6:fe:02:ae:b1:e1:48:f5:de:11:9d:03:05:7d:8d:30:d4:4e:
31:c6:ac:b6:8e:de:95:e0:36:5c:f1:41:8d:aa:09:66:72:23:
f8:05:0a:51:3c:0d:03:34:4c:8c:c7:be:05:4b:19:a8:cd:ac:
4c:57:fc:b6:72:bd:7c:8e:df:e5:90:30:10:71:65:4e:6c:65:
51:ce:46:f0:c6:1a:fa:67:97:2b:06:41:50:a6:6b:b5:ae:e5:
f4:dd:6d:49:71:4c:d5:32:e1:19:2a:4c:a8:db:f7:9a:bf:99:
58:43:fe:d9:9b:5b:71:23:bc:ee:ff:0f:d9:2a:d0:ab:e7:9a:
12:49:09:e2:fb:ed:f0:22:63:3c:51:de:4d:34:a5:ac:2d:0a:
7b:45:34:2c:c5:2e:fb:ae:f9:29:70:cf:6f:25:83:17:b0:f0:
96:16:98:dd:7d:19:0f:09:cc:fb:9f:b5:f2:17:e5:69:00:2c:
73:1c:ee:ee:8a:f3:71:35:0e:68:1e:b5:4b:b6:33:e9:30:6c:
da:6f:f5:b6:dc:fe:7f:87:00:79:37:9e:66:e3:2a:b9:10:6b:
a3:bc:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:55:53 2026 by rpki-client