Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
File: fEDTjH5rzUtq76C7Ss17ZEznGkc.mft (raw, json)
Hash identifier: btBW828MGCrnsgdtfHsZElqBEAtSe76N4ZGqYA4HYjE=
Subject key identifier: B5:6F:3E:DA:2E:17:08:FE:03:15:A7:8F:0D:C2:BE:2A:3E:C8:D0:B5
Authority key identifier: 7C:40:D3:8C:7E:6B:CD:4B:6A:EF:A0:BB:4A:CD:7B:64:4C:E7:1A:47
Certificate issuer: /CN=7c40d38c7e6bcd4b6aefa0bb4acd7b644ce71a47
Certificate serial: 019D1FB901B62411459EF16D776455580950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
Manifest number: 22
Signing time: Tue 24 Mar 2026 12:01:51 +0000
Manifest this update: Tue 24 Mar 2026 12:01:51 +0000
Manifest next update: Wed 25 Mar 2026 12:01:51 +0000
Files and hashes: 1: JOrZbv5P8xa_uNN_bW2nd8t85fw.roa (hash: +tU3FVRnRItU1Djfz+HewHPi/7UJ09UTc4dbTgRdd4Q=)
2: fEDTjH5rzUtq76C7Ss17ZEznGkc.crl (hash: spkX7NO/xo5UedffQZ/9UBm2c1/NZIaZax5IxnkYst8=)
3: zOYOJF9DfijezlN9iaw-AlTXC9Y.roa (hash: 9l40cVFv1YhreHGWhH0joF4uHabuY804EXNUsY9cFxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 12:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:b9:01:b6:24:11:45:9e:f1:6d:77:64:55:58:09:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c40d38c7e6bcd4b6aefa0bb4acd7b644ce71a47
Validity
Not Before: Mar 24 12:01:51 2026 GMT
Not After : Mar 25 12:01:51 2026 GMT
Subject: CN=b56f3eda2e1708fe0315a78f0dc2be2a3ec8d0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:a9:5b:c2:77:af:0f:3d:e6:32:f0:64:55:
64:33:e9:f3:ac:81:c0:cd:57:9a:09:a0:84:27:1d:
9b:70:61:73:e5:6f:b6:ec:af:68:4d:76:92:bd:8a:
3f:7c:bb:0b:cb:f5:e7:c2:8e:9f:75:f3:cb:13:a3:
10:2f:5c:14:25:2e:5a:25:0f:37:e5:3c:59:41:dd:
d9:5f:cd:27:86:b5:69:5b:64:21:f4:65:6c:87:e4:
f7:e4:3b:a0:1b:7a:20:92:9c:b8:c3:af:d0:3f:12:
86:13:34:8f:a5:81:0f:ca:b2:0f:5b:82:c1:c4:44:
f3:47:10:1d:f0:4e:f7:5a:93:46:aa:b9:13:2d:a6:
18:4e:2e:26:2c:19:4c:d3:65:a1:bd:c7:e2:1c:92:
fb:1a:04:0e:40:7b:b8:60:b2:d6:eb:68:9b:b6:00:
5f:d9:fa:31:f3:2b:23:0f:16:7a:78:21:a8:11:0a:
34:18:d8:18:ed:2f:6d:53:2b:66:c4:1f:4a:77:c6:
5d:62:7c:f5:a8:f8:41:55:9b:aa:bf:a3:01:1d:3f:
d9:7d:69:d4:86:7c:44:5e:46:55:e8:bb:17:95:18:
f3:ac:d3:d0:e4:d9:a8:ce:85:6a:67:3f:9f:64:f9:
32:d8:3e:7f:04:8f:ce:ec:1e:d2:ca:cc:72:ac:f7:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6F:3E:DA:2E:17:08:FE:03:15:A7:8F:0D:C2:BE:2A:3E:C8:D0:B5
X509v3 Authority Key Identifier:
keyid:7C:40:D3:8C:7E:6B:CD:4B:6A:EF:A0:BB:4A:CD:7B:64:4C:E7:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:11:3f:51:22:7c:07:bc:f6:51:82:2f:d9:cf:13:a1:f5:11:
a9:18:87:58:e2:63:0b:b7:d3:03:48:0e:e7:90:6c:49:32:1b:
07:d5:36:62:1d:58:b2:b1:8a:48:7c:61:d2:1f:09:ac:aa:d6:
d6:a4:92:80:d1:ff:11:56:a4:31:f2:f8:06:a7:5e:2a:f1:e3:
68:bb:e8:84:76:d8:22:b9:b4:14:3a:04:39:7f:c6:4b:e3:66:
03:76:67:3a:0b:fc:c8:b9:b7:8c:c9:56:5f:4a:85:ed:d5:86:
f2:78:61:d7:9e:df:05:46:0c:58:03:2a:79:5e:d6:cd:d3:23:
22:1d:df:de:87:98:bf:b2:8c:8e:b7:87:4b:73:cb:8b:1b:d8:
bc:f6:83:dc:d6:43:ee:8a:16:6a:50:fb:80:29:c4:dc:33:c3:
45:de:f8:c8:98:41:86:c0:fe:c3:48:d5:d1:51:da:e9:61:e8:
dd:1a:f1:c0:44:33:e6:bd:34:2b:e4:60:e0:b5:af:fb:c7:44:
38:e3:af:76:eb:b8:1c:f5:d2:ad:3a:ce:e3:c4:f3:46:fe:ef:
f8:74:1c:ce:94:4c:c7:50:a7:71:78:0b:76:77:1b:47:af:24:
9e:48:4c:d0:ab:a3:0f:bb:c1:ab:7d:ce:b4:51:23:41:a6:c7:
54:68:ef:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 20:56:53 2026 by rpki-client