Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File: fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier: dv8k2w2nO+bz2R2umXcqXEiOcgJ3nSfRvW23Beo1A4U=
Subject key identifier: C6:09:6D:DE:EE:29:CA:FF:CB:80:C5:DC:75:4C:5E:E4:E5:4D:DD:F0
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 019D38D2D23EE4836CD29AFD4ACA53C8496E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 09:00:33 +0000
Manifest this update: Sun 29 Mar 2026 09:00:33 +0000
Manifest next update: Mon 30 Mar 2026 09:00:33 +0000
Files and hashes: 1: BMUh6giJ2NjrKl7YKu0d2xZtEZc.roa (hash: bjj+EiIZMtUCLQ7A849Yk7cP7W1t0jST2f2u4ZKj78g=)
2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: jIoAlAeBcrJ469GVxRoiPyoFJGTijDeyqH/6ggN3prg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d2:3e:e4:83:6c:d2:9a:fd:4a:ca:53:c8:49:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: Mar 29 09:00:33 2026 GMT
Not After : Mar 30 09:00:33 2026 GMT
Subject: CN=c6096ddeee29caffcb80c5dc754c5ee4e54dddf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:59:e0:75:db:d8:39:ce:bf:2b:80:15:25:
88:84:6f:1f:57:bd:d0:5b:5f:2d:9e:31:04:75:e0:
f6:75:55:57:e7:f7:67:c8:7f:30:c1:e5:25:4f:28:
8c:40:b2:11:f8:c5:9f:6c:2b:f7:9e:d9:c9:c2:c3:
12:a1:5c:7a:28:19:06:6d:c3:a5:08:80:e6:c5:16:
1f:82:b2:50:95:96:4b:eb:4c:2b:bf:94:46:db:04:
cf:3b:13:ad:84:d8:22:da:33:e1:bb:06:3b:51:e2:
9a:41:2b:cd:1c:b0:ce:24:aa:33:cf:74:fd:3d:fc:
ac:93:10:02:72:d2:b2:4d:90:e3:95:8a:72:8f:dc:
14:fc:d0:67:7f:80:41:96:e0:6f:8b:61:e6:ad:f5:
24:b6:ab:94:55:75:ac:6f:00:29:4d:25:c2:a6:40:
a1:1c:d8:1b:3c:a4:62:39:d1:8f:d6:f1:12:55:dd:
02:be:5a:68:3d:f4:0f:79:3b:46:aa:83:a3:56:f3:
fa:98:49:13:9e:79:86:3b:93:27:46:99:34:b4:20:
a4:99:83:a8:e3:e4:b8:4e:62:66:ce:b9:88:37:13:
ad:5a:c2:fb:df:30:3d:92:51:e5:f1:25:2c:b5:df:
7f:84:68:9a:90:61:23:f1:52:a6:77:60:2b:de:b6:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:09:6D:DE:EE:29:CA:FF:CB:80:C5:DC:75:4C:5E:E4:E5:4D:DD:F0
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:65:f4:27:15:82:78:53:a4:e4:1e:44:87:04:d9:b1:62:25:
bc:74:91:47:da:0e:8e:b8:29:05:d6:3f:c2:c6:f4:48:c8:eb:
83:11:03:0e:82:99:f2:32:9b:c5:44:26:8e:d3:13:56:e4:f7:
96:03:a0:4e:c2:2e:be:3b:ca:15:0c:90:f7:a1:b0:85:d1:87:
9f:65:e2:81:b2:a4:c8:ef:a5:3b:5c:11:d9:0e:ea:a4:6c:f7:
a6:a8:39:54:8a:83:64:eb:89:ba:93:4a:27:30:35:95:91:b3:
24:24:1e:eb:ab:1a:d2:d0:67:93:70:ca:d4:32:7f:61:86:1d:
fb:a6:dc:70:ee:15:9a:61:6f:a4:37:32:f7:ff:7e:d2:c1:e9:
fb:fb:0a:62:6c:55:3d:af:6f:ac:a9:0c:36:1c:38:aa:53:56:
b1:14:31:90:97:db:15:64:68:32:c3:53:12:71:db:47:fd:17:
22:c5:fd:70:dc:94:f3:3a:47:91:cb:84:98:24:aa:7a:52:c2:
bb:85:09:06:db:aa:61:1d:d3:7e:6e:2f:04:3d:5d:40:45:8f:
19:89:bc:ee:36:c6:70:31:dd:25:8b:6e:2f:b3:b5:24:a9:26:
4c:3e:e5:a5:19:7e:c7:df:b6:9a:db:5a:c2:5a:c8:aa:37:15:
8c:6f:36:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:38 2026 by rpki-client