Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: 3NNJHMLvH3ftOWg7MhUFuu9AFwQm4vkl4AqqK/nWkYI=
Subject key identifier: 7D:47:03:F0:9C:BC:E1:B4:BB:38:A3:C3:8A:3F:9B:61:2E:40:3E:2D
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019E45B08D49C984E07DC4235422F9FAD781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 1920
Signing time: Wed 20 May 2026 14:00:58 +0000
Manifest this update: Wed 20 May 2026 14:00:58 +0000
Manifest next update: Thu 21 May 2026 14:00:58 +0000
Files and hashes: 1: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: PmMc3/f2YqxygfvbgRJNjvN5kMdgtBSXU4Ziyu7qW34=)
2: gFOjbWB7I_w-vrenN-Bunfa99k4.roa (hash: jwgceh/3ITVpquNuTB6w5OIjCduknP3STqxn7Za9hOo=)
3: yDOczuJC_WLHV4Ya3yqTtThAzjc.roa (hash: rUsqBRYV5w6oIt/F9qarEoMetvvYx4/9g1ZMzy8MePc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 May 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:b0:8d:49:c9:84:e0:7d:c4:23:54:22:f9:fa:d7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: May 20 14:00:58 2026 GMT
Not After : May 21 14:00:58 2026 GMT
Subject: CN=7d4703f09cbce1b4bb38a3c38a3f9b612e403e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:33:6b:74:e4:c8:e3:df:b1:45:72:09:52:
da:1b:1e:49:93:6a:89:b2:f9:93:87:01:9e:3c:9e:
52:88:79:15:e5:45:12:eb:ed:52:c3:be:69:d2:51:
fb:55:19:06:73:93:47:19:3d:d6:2c:8e:ee:e0:83:
07:ed:78:a0:d4:79:cc:9b:4a:1f:be:08:00:a1:1e:
5c:ad:7d:48:26:a1:d6:c4:5a:10:49:ba:32:e4:6c:
c0:44:73:76:ee:ec:d4:e9:6f:e9:76:4a:1e:b6:2f:
17:63:ed:2b:75:6e:09:d6:3e:ca:8c:84:82:8e:8d:
9c:38:db:0f:f8:2c:e7:f1:4f:27:5a:b7:18:80:26:
a2:73:ea:05:18:d4:40:c7:1a:57:7c:ae:bc:ba:b4:
1c:8e:05:6e:bf:56:9d:d6:b1:10:14:1e:0e:21:64:
fd:ba:ab:2e:ec:02:10:88:76:59:0e:70:2e:32:d8:
3c:4c:a3:2a:f6:aa:18:07:8c:4c:1e:ef:54:f5:fb:
65:81:b8:5d:c1:88:f4:f4:96:10:c3:2f:8d:46:56:
36:c7:31:26:de:90:0d:d2:5a:7c:79:53:d0:bf:31:
8c:65:43:0e:46:13:51:ca:15:80:07:96:29:cb:ab:
d4:9a:72:4d:20:3b:a9:c4:21:33:95:20:83:62:2c:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:47:03:F0:9C:BC:E1:B4:BB:38:A3:C3:8A:3F:9B:61:2E:40:3E:2D
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fd:2c:48:45:f7:4e:35:20:bb:f5:72:e9:d8:de:d5:71:0e:
a9:93:de:3c:e4:18:80:ef:bd:b8:12:03:f9:c3:ae:e7:50:12:
25:1c:c1:ad:2a:5f:d7:57:0d:f9:a5:1a:1e:11:f1:4a:4b:8a:
35:f3:7b:fa:15:a2:4a:18:fc:ce:17:7e:5a:da:8f:c7:20:19:
fd:28:e7:32:a5:f8:a9:bd:c4:8e:88:d7:cc:20:ba:1e:2b:75:
93:31:70:85:7b:02:b7:ab:df:5f:e7:3c:36:0a:cf:2e:40:21:
19:6e:c5:61:61:0f:5f:1a:6b:af:0b:84:5f:7b:ea:55:41:2b:
05:5a:5a:f0:d4:a1:36:de:09:04:88:19:bf:ea:66:a1:9a:4d:
02:65:90:8c:3d:ce:12:22:61:2b:3c:a7:9d:dd:30:f4:38:26:
24:0d:ba:66:65:a2:f6:39:8f:74:77:61:1b:17:1c:3a:5d:64:
96:d9:13:d0:ee:1d:50:9b:2b:d7:75:ea:41:39:fe:3a:2d:0f:
68:27:4d:d9:6a:69:9e:6d:eb:c8:5c:1b:8f:6d:b4:c3:5c:3a:
55:56:2d:19:4a:ff:92:00:c8:b5:f9:f2:86:a6:dc:2b:c5:22:
07:ad:d4:26:1c:da:b2:89:a5:58:6e:0e:9a:96:f4:f9:bb:80:
0d:8a:b7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 20:51:24 2026 by rpki-client