Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
File: fvh727KV4chetLDjVmFTwiGEX4E.mft (raw, json)
Hash identifier: VVbMbk9wTkrXbs0+Io3cwsS4zgeJmRncKJSiecciAQ0=
Subject key identifier: A6:BD:9F:2C:7B:50:DF:B9:DC:94:74:B9:37:2D:CF:FB:76:5D:3F:14
Authority key identifier: 7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
Certificate issuer: /CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Certificate serial: 019D37C0735B19E76C4E60A60319D74059CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
Manifest number: 03D7
Signing time: Sun 29 Mar 2026 04:00:52 +0000
Manifest this update: Sun 29 Mar 2026 04:00:52 +0000
Manifest next update: Mon 30 Mar 2026 04:00:52 +0000
Files and hashes: 1: 3rus813YuNoFCPm5gVNfCetKB0o.roa (hash: 2Psn64fFe1lFh4gbe2ww6CEoWYkZWI81wssdO4TcKTk=)
2: fvh727KV4chetLDjVmFTwiGEX4E.crl (hash: 9PlCMbfbJeLRlhN+EJFDNp/2CjdbO82fZFInvklrdBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:73:5b:19:e7:6c:4e:60:a6:03:19:d7:40:59:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Validity
Not Before: Mar 29 04:00:52 2026 GMT
Not After : Mar 30 04:00:52 2026 GMT
Subject: CN=a6bd9f2c7b50dfb9dc9474b9372dcffb765d3f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:bb:c2:88:28:c3:70:d2:be:ac:1c:eb:23:
88:d3:97:72:e8:37:05:30:90:87:08:1a:85:37:48:
1b:e7:b9:e0:8a:c1:9e:44:9d:57:5c:a3:92:d1:e8:
19:28:4f:47:02:4b:1d:d4:e6:78:55:38:20:b1:03:
37:be:0e:17:78:ab:ad:56:82:fd:1c:e4:8a:7d:c0:
35:2d:72:39:7c:5d:a4:05:69:e6:15:85:d6:c7:39:
61:f7:98:34:ab:6b:67:e2:0b:da:01:29:f4:10:8b:
63:d4:0c:f3:a5:6f:5b:91:9d:22:a1:ca:67:e2:3e:
91:9b:46:05:f2:cf:f1:fd:02:f9:51:b7:09:04:e4:
bc:13:1d:48:4d:26:09:14:b0:de:61:cb:5e:78:29:
20:f3:19:8b:f5:bf:1e:82:52:ad:44:5f:9c:d9:05:
80:fd:01:09:33:18:f8:c0:f0:2e:54:f6:d6:aa:ea:
bb:ff:1b:89:8c:d7:96:01:a6:6d:34:e1:4a:12:50:
ca:d4:f6:ea:22:4d:d1:09:c6:14:0c:d7:f0:de:9d:
a2:d2:4b:04:48:55:14:b0:1c:5e:36:2a:71:f3:e1:
fc:6d:6e:a4:68:31:c5:55:9b:e8:ba:8d:84:73:03:
92:10:4b:65:b8:60:55:d8:b5:c6:3d:26:a5:f4:53:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BD:9F:2C:7B:50:DF:B9:DC:94:74:B9:37:2D:CF:FB:76:5D:3F:14
X509v3 Authority Key Identifier:
keyid:7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ae:7b:aa:86:25:bd:7c:33:9e:8b:cb:da:ff:5d:4f:95:ca:
82:9a:c1:bd:e6:81:d4:63:26:c0:b8:85:c0:1c:4b:fe:b8:59:
44:36:7c:5a:c8:d0:11:00:20:1d:08:24:63:59:cb:f8:99:32:
97:5a:60:99:cf:8a:30:52:9b:30:10:35:7e:c8:5d:1e:50:d6:
b5:fd:e7:02:71:1c:e9:b2:5c:c4:cb:5d:b0:b0:c4:15:b2:3d:
a4:d7:20:29:a0:6f:da:79:c5:04:96:07:8a:28:9e:5a:d2:e0:
4b:d5:c7:fc:6f:73:bf:8a:3b:b9:20:f9:ef:8b:d6:d8:2a:fc:
87:aa:63:42:3f:d1:4f:fc:7c:28:f5:c1:97:05:a3:9a:10:1d:
73:e9:63:17:68:75:85:7f:96:89:79:61:2e:eb:72:20:14:96:
56:f6:c5:e8:4b:92:53:e3:4b:c4:19:c1:77:93:45:d7:ff:07:
2e:13:b1:e5:02:0a:03:e1:8e:77:21:cc:07:d3:77:3d:1b:fc:
fd:b4:f9:09:26:fb:db:20:d5:62:ce:fa:ed:e3:5d:31:07:a1:
f2:3a:dd:e6:26:44:a0:51:eb:e2:cf:98:d1:59:ac:eb:2c:76:
56:51:94:71:6d:fd:c5:24:6d:0a:6f:46:af:7a:58:ba:ec:cb:
4d:d9:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:37 2026 by rpki-client