Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File: fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier: NRss5ufCGgfqnZ3R1b9Nh2lGyFHj+OZ3PqyJihbopEs=
Subject key identifier: 9E:EF:24:6F:63:E9:7B:04:AA:CF:95:1B:48:FE:89:73:C8:86:51:3C
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer: /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial: 019D382E6AAE9E32C5661953D1B3ACEF6E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number: 0FA3
Signing time: Sun 29 Mar 2026 06:00:58 +0000
Manifest this update: Sun 29 Mar 2026 06:00:58 +0000
Manifest next update: Mon 30 Mar 2026 06:00:58 +0000
Files and hashes: 1: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: cGgeB0w3DFsjswUhy9AgoKwqw2/+Ab+FLQpaTv7cqxE=)
2: oBjKq8D7YtanGgUooThZNZJBCfY.roa (hash: Q8Mc9EtbMAXUED7OkrFkGjXFG36weOz2FmafoAYIkKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6a:ae:9e:32:c5:66:19:53:d1:b3:ac:ef:6e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Validity
Not Before: Mar 29 06:00:58 2026 GMT
Not After : Mar 30 06:00:58 2026 GMT
Subject: CN=9eef246f63e97b04aacf951b48fe8973c886513c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:eb:df:15:7e:e7:2b:80:e4:b6:c0:ec:a9:
e2:7f:e0:ec:d9:a5:a1:69:60:cd:99:a6:7c:11:a9:
fd:11:45:40:d6:ca:c0:52:c7:28:6c:df:a6:91:4f:
6e:19:ed:ac:fa:9c:7e:6a:0e:0c:51:73:7f:2e:8b:
21:82:2a:76:1a:4a:e7:4e:42:c0:11:53:b8:02:1a:
52:e6:7c:4d:52:7b:30:2f:dd:e5:00:0a:4e:cf:47:
48:d4:bc:e9:20:fa:d5:0a:74:c1:27:15:5a:f0:02:
dc:e8:32:2b:83:59:0d:56:e8:ff:7a:7b:0d:06:1e:
15:f9:81:24:17:0a:4d:93:f7:41:6b:1d:02:06:fa:
b5:2a:36:11:9c:7a:77:66:83:0f:7a:6f:a0:7b:bf:
f3:8c:ae:e0:92:c1:a9:ce:50:6d:16:f6:82:74:e7:
ed:e2:71:ea:59:e2:48:1e:d8:30:58:2e:15:36:1d:
61:17:a4:3a:ee:95:8b:de:56:cc:77:4a:23:c5:a3:
09:8e:b3:db:d9:9f:3e:5e:c3:83:7d:f9:e8:9a:d6:
1d:a2:bf:d7:3f:ff:9f:bd:14:c7:b9:20:f9:52:2a:
43:c3:43:4d:a3:f6:1e:de:f8:5a:fe:a5:d4:d8:2d:
c8:cf:ed:87:af:22:28:30:e5:ea:40:60:da:13:65:
c4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:24:6F:63:E9:7B:04:AA:CF:95:1B:48:FE:89:73:C8:86:51:3C
X509v3 Authority Key Identifier:
keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:40:57:13:04:97:75:25:07:31:f1:f1:8c:fc:d9:fb:d5:71:
5f:c9:51:6b:f9:10:7b:4b:be:92:af:b9:6a:22:10:05:fc:75:
42:78:04:d1:19:d0:33:9c:87:48:eb:4b:73:8a:50:fc:c4:66:
da:10:51:fa:eb:92:55:a0:d7:62:40:d9:97:39:1b:6e:9b:82:
5d:f0:24:51:5b:81:75:1d:c2:a0:bf:0f:d1:d3:26:3f:31:56:
ae:81:27:1c:ae:7d:7a:0a:b3:f2:ac:a4:a8:e6:e7:5d:a4:2e:
f7:1a:ef:08:7f:67:c7:a6:35:b4:6a:08:0b:b0:49:97:ed:75:
3a:63:1b:21:e9:c9:13:a5:6d:fe:fc:8a:88:a8:c2:82:c5:5b:
ac:92:a6:7d:ab:e8:eb:b7:05:f1:fa:e7:18:7a:41:bd:0e:42:
41:e1:27:5a:30:7c:b4:2b:6a:cb:0c:7c:a3:7a:bb:42:4d:f2:
11:4c:59:d8:00:b5:48:4d:21:f4:51:44:b2:5f:b2:87:7b:d0:
ce:d7:d1:48:a7:a3:bb:cb:94:b6:b8:02:f4:2e:f8:eb:dc:a6:
1c:13:37:17:b4:ec:de:5a:2e:da:d6:3f:65:2b:a7:3e:64:cd:
c4:6e:c5:fe:1c:29:04:06:f7:25:12:b0:98:a7:b1:b8:44:27:
43:e0:78:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:13 2026 by rpki-client