Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier: YfGe8AFMeeWa7/b6Z2F13ybieegKscEE9MCFjf9id5o=
Subject key identifier: 26:C9:AB:36:F2:EF:76:84:7A:18:49:02:0B:6D:09:E9:E3:3A:AB:C6
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial: 019D3865FF64503811EFB838D7EE3CC087CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number: 0CDE
Signing time: Sun 29 Mar 2026 07:01:41 +0000
Manifest this update: Sun 29 Mar 2026 07:01:41 +0000
Manifest next update: Mon 30 Mar 2026 07:01:41 +0000
Files and hashes: 1: d2SprZfdS0SY1x1Wy17T8YC1idA.roa (hash: RB7moJ155dUdkZifnr4mmDfclVM/fofVaHiCzJRd3n4=)
2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: HCSpzKHVfpsDW1EufJcnvv1Tfd54XE/bGwzLOUl1uGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ff:64:50:38:11:ef:b8:38:d7:ee:3c:c0:87:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Validity
Not Before: Mar 29 07:01:41 2026 GMT
Not After : Mar 30 07:01:41 2026 GMT
Subject: CN=26c9ab36f2ef76847a1849020b6d09e9e33aabc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:40:35:99:ed:e3:f4:07:1c:22:28:1e:dd:58:
79:e1:ef:bf:42:25:11:f8:e2:45:89:36:30:15:f1:
2e:c4:c5:ac:ab:92:7c:8c:6e:fe:48:b9:f9:1e:39:
14:f8:fe:0f:b6:74:fd:0a:27:db:88:46:f9:8e:17:
71:f8:8b:bc:54:a9:8a:41:98:6f:58:47:fb:bd:ef:
6b:37:06:48:71:30:50:ce:7c:d7:b7:a7:58:cf:4c:
8d:46:c1:b3:9c:f8:f4:52:fc:cf:ec:9f:26:7b:0f:
28:81:70:69:9a:0b:fa:70:d8:e9:90:89:92:2d:80:
fa:26:7c:06:ca:51:86:1b:53:7f:e4:4d:12:5a:58:
f9:75:35:4e:bc:ec:a7:5c:2b:e6:07:f7:b8:b0:7b:
21:0c:4a:1a:ac:d4:5f:4e:4d:89:ba:9f:ac:2d:17:
51:7a:28:e0:c6:a7:1d:c6:2c:94:9a:df:25:33:68:
3a:1f:22:50:af:4f:92:f5:98:32:73:b0:e7:3f:5a:
67:93:0b:97:29:6e:41:9b:ee:2c:bf:ea:0c:f5:47:
b9:f3:5c:83:cd:63:a4:f8:f8:7e:d8:00:cd:af:39:
67:22:0e:2c:1b:f4:16:cd:af:9b:74:ca:34:e8:c8:
b9:40:71:08:ac:1c:fc:99:c9:53:fe:97:70:1a:9e:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C9:AB:36:F2:EF:76:84:7A:18:49:02:0B:6D:09:E9:E3:3A:AB:C6
X509v3 Authority Key Identifier:
keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8d:48:a4:33:19:2a:80:60:9f:5e:4f:8c:97:43:75:51:30:
16:60:04:12:81:a1:6b:6a:88:b4:06:0d:10:60:7f:09:33:ea:
0b:a0:00:7a:04:1f:39:f6:ab:45:cb:9f:cc:d1:fb:66:43:a7:
d0:0e:8f:05:f1:4d:84:9f:d7:4a:95:60:75:db:b3:97:b9:19:
10:d4:43:84:71:43:71:4d:e4:c1:12:62:e7:a0:88:23:cd:e6:
98:8b:3c:0b:b9:c2:69:64:73:b4:ad:1f:e2:4d:84:3a:44:cf:
4b:a0:71:ba:8b:d4:48:b8:3a:ef:27:22:fa:9e:bb:8f:4a:73:
fa:35:22:51:eb:42:7a:7c:7c:ac:51:eb:31:74:8e:0f:11:7e:
8d:27:a5:c7:a2:8c:18:13:10:0d:74:6b:50:80:27:9d:6b:a4:
e0:77:05:4b:78:4d:98:f2:d1:80:45:b2:4f:91:13:e3:02:55:
86:03:2a:e5:c9:5d:e7:f3:30:63:95:52:a1:33:b1:6c:e6:8b:
dd:a6:45:85:d7:29:eb:d9:de:27:b1:e6:40:48:01:d6:34:fc:
eb:8f:b2:45:16:42:82:6d:07:0d:4b:73:cd:bd:2c:fc:81:38:
5c:7a:01:c1:21:fa:2a:6e:e7:81:de:47:ab:5b:b1:0f:da:16:
4a:94:8c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:29 2026 by rpki-client