Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: Q5Rj2Wc+v2haSg1isrNDPYzV7ZweZM7gCkY9F5P3F7I=
Subject key identifier: 43:E0:0F:DE:0A:FE:FD:76:71:D9:A2:5D:D2:AC:E6:D1:06:E3:72:54
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 019D38D38695C3D64CE2BA9AC5F76DFBE9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 164E
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: 6HTx2YeWwDr3S2VVILbwB2Jafj8.roa (hash: hsBw1ez3yUj6UmH6NZMF2hQl/djg3G8hjk0Okprj7r0=)
2: VqGEMx7_g1oCR5PMih3sF1ICV0I.roa (hash: 2XQimBCsGUGReAdNUI71pDg4FSroIYJhgCkB4L3gVZQ=)
3: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: wROCqyhLpFJ+4BiXMobNKOaUNLk78c2r5K5LmkbFO40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:86:95:c3:d6:4c:e2:ba:9a:c5:f7:6d:fb:e9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=43e00fde0afefd7671d9a25dd2ace6d106e37254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:6c:19:0f:88:d8:92:d5:e6:a0:6a:34:df:
13:f1:cf:15:40:5d:e4:f2:bf:11:20:45:ae:86:77:
33:7a:dd:40:c7:20:60:77:d4:f0:e0:6f:0b:0f:f0:
cb:12:da:6b:a8:ea:f9:8f:54:5c:52:87:7b:10:3e:
ef:0f:17:0e:e1:ec:84:17:be:e9:3a:aa:3e:4e:96:
a9:87:35:01:66:9d:4d:9d:64:8f:9f:e6:e5:50:1c:
fc:c9:d8:e1:6c:40:10:c5:90:19:9b:a2:db:24:43:
4c:a6:af:d1:c9:4e:4f:a9:8c:03:5a:df:16:d2:87:
c2:9d:2e:5a:24:e4:ea:0b:b6:bd:5b:c8:ca:f1:eb:
c8:49:0c:48:68:fa:62:a9:97:27:ef:8c:d3:75:79:
12:6e:67:e4:8e:39:c8:ea:46:98:9d:52:9d:fe:52:
2f:cc:7f:35:c8:ba:ec:81:2f:77:da:ea:9e:15:47:
be:f7:2e:16:ba:00:ea:31:9c:58:6b:87:3e:35:18:
18:68:bc:dc:6b:83:95:64:f1:b7:50:10:b2:40:57:
a2:37:23:ea:a1:c6:7f:28:26:9e:83:1e:36:d5:63:
a0:a9:6f:61:6b:a2:a4:aa:a9:04:33:a8:07:5e:f3:
be:51:3f:0b:34:dd:24:4b:dc:85:44:bc:58:5e:4e:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E0:0F:DE:0A:FE:FD:76:71:D9:A2:5D:D2:AC:E6:D1:06:E3:72:54
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bc:2c:5e:7a:c4:ae:a6:c1:e7:fd:87:5e:88:09:06:27:0c:
bd:e5:10:22:6f:da:ab:81:fb:d1:4a:a1:25:a5:31:40:7b:2b:
be:31:7f:10:e4:f7:46:1c:e8:72:45:4f:9d:4e:03:10:dd:60:
e7:37:35:71:7e:64:e9:d2:24:c5:a9:a5:81:c0:ea:ac:6b:ea:
7e:94:20:9b:7d:de:6b:d9:b0:84:d6:13:69:93:c9:cd:c3:7d:
94:f2:14:c8:3f:b2:50:e0:e6:5b:e6:d7:21:7c:34:c8:9d:7d:
b1:81:5d:30:28:2b:74:e3:e2:13:81:64:8e:d6:fa:36:6c:58:
95:50:db:77:ae:55:9c:e0:c2:f4:d4:85:ad:6d:f2:35:1e:66:
80:26:53:dc:91:19:9d:86:24:54:b6:34:1c:f9:7a:0f:d6:8a:
e7:37:be:0e:72:d5:a1:bd:6e:73:ea:e1:eb:48:88:a2:d4:f8:
c1:90:8e:41:6c:23:9c:6f:5c:75:ef:5d:5e:78:72:bd:35:ad:
9a:be:93:4c:b9:9a:ff:48:b3:f0:1a:7c:6d:86:1b:b5:a0:9f:
b1:4d:8c:26:05:3e:c9:cc:28:b0:33:0d:71:5d:c3:a8:51:31:
b0:54:d9:65:42:23:74:70:21:73:e8:4b:9d:27:e4:ce:47:f2:
9b:f0:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:27 2026 by rpki-client