Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: oeSlLrIJP0X3h1xkzKiyEunw5R8zj6m/ZK+C59WzTA0=
Subject key identifier: 02:E2:A6:FC:F2:4E:9A:5B:5C:2D:15:3F:83:5E:E6:0E:60:85:33:FB
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 019D37F7689891C4A55FAA646F0C38F2FC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: K9QblIDAn2ecozlT82KRa/gs7pPr50+t6IkzYxVoGEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:68:98:91:c4:a5:5f:aa:64:6f:0c:38:f2:fc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=02e2a6fcf24e9a5b5c2d153f835ee60e608533fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:4b:4b:7e:58:5b:9a:ea:5b:7d:df:31:d4:
09:ef:5c:19:e9:bb:7d:8c:a5:f3:89:48:2c:10:58:
b1:59:b8:78:44:df:7e:c2:c0:7a:71:25:42:df:8d:
f0:3c:b0:d1:ef:8c:f0:4e:e2:29:9c:22:61:e4:ff:
f8:08:5c:74:e1:36:b3:f9:07:1d:92:7d:41:bd:6f:
3f:a2:ad:d1:02:3c:77:8e:5c:38:86:bf:57:f8:bd:
ce:06:b4:66:71:d0:bb:71:40:39:08:a1:93:02:10:
fd:f7:9d:ca:20:e4:fe:cc:e9:e1:43:d6:46:ba:44:
94:a4:ee:e4:0c:cf:8a:03:2e:9a:2e:5b:76:ef:89:
87:20:96:61:9f:a9:a8:3a:ad:92:52:25:95:f3:29:
92:e0:a0:54:ed:d9:39:e2:67:de:74:8b:64:fc:8b:
11:fe:e4:9f:9a:35:ad:20:5c:84:5e:2c:c4:b3:9b:
85:8d:04:7f:a3:bf:b7:1b:8e:3e:c5:62:58:01:53:
a3:d7:f6:94:a9:d6:43:19:ff:06:1d:2c:f7:16:43:
d2:7c:a1:99:19:bb:88:b1:c9:62:10:e1:6f:9a:45:
46:e2:79:87:91:99:fe:d9:d1:0a:be:22:d6:99:da:
09:4a:2c:37:d1:82:66:45:1b:c0:0f:0a:7a:5a:4a:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E2:A6:FC:F2:4E:9A:5B:5C:2D:15:3F:83:5E:E6:0E:60:85:33:FB
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ba:cc:34:cc:d2:3b:4d:a7:29:d0:83:ef:76:5e:c9:ef:f3:
65:67:50:5c:16:0d:ee:8d:0c:75:de:74:73:ad:6c:0d:cf:e1:
e2:5b:54:23:4a:f3:86:88:d9:98:bb:89:fe:71:88:01:ef:87:
31:eb:33:8f:ed:f2:b4:a1:41:9f:15:02:15:ce:d3:8d:60:5d:
44:96:57:00:42:66:5b:fb:f8:df:a4:b5:05:16:ea:57:4f:fb:
6b:ee:f6:70:e0:3c:27:f8:f6:45:45:d9:42:a0:e2:22:bd:86:
62:18:a8:cc:06:47:ed:fe:8d:52:59:1a:7a:45:32:8d:3c:5d:
3e:a5:37:80:0a:d2:b7:f3:89:52:fa:43:58:68:02:db:1f:a6:
07:79:18:27:9c:12:e6:1c:bf:04:bf:83:f9:9c:48:68:82:50:
18:7e:59:d1:6f:5e:a7:be:59:f3:95:7c:c6:bc:47:3d:ee:25:
b2:35:2b:42:7c:38:37:b9:59:7c:35:b7:27:3f:ea:6e:44:e9:
89:69:03:da:d7:ad:1f:8b:22:61:cc:13:a0:c2:57:d0:e1:da:
68:bb:8a:53:35:c6:31:f4:52:27:ec:76:01:8a:77:e3:43:bf:
72:33:36:8f:0e:67:12:38:e9:90:1f:d2:88:5d:98:12:4f:e4:
89:a6:7f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:36 2026 by rpki-client