Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json)
Hash identifier: pqXfvhTAGCY8GVM7wKximCbOXQMvKNELKnt1p+Vs8Ik=
Subject key identifier: 26:01:D4:0A:10:1C:8B:BD:03:69:CB:88:79:7C:87:C1:27:16:10:33
Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Certificate serial: 019D3789DE45A7D37845030A081BD31B2405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
Manifest number: 062A
Signing time: Sun 29 Mar 2026 03:01:15 +0000
Manifest this update: Sun 29 Mar 2026 03:01:15 +0000
Manifest next update: Mon 30 Mar 2026 03:01:15 +0000
Files and hashes: 1: CvfDNt_o3V9Xyed6qs_Km7x3Pic.roa (hash: vJACC0uKZmQi+4OgqVZ0iCIi7einYP0jPPi7IU1FuY4=)
2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: aeRxMl1aWhoh4Og+0Oh4EG0BoU4ysly2VI2OWjN9yFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:de:45:a7:d3:78:45:03:0a:08:1b:d3:1b:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Validity
Not Before: Mar 29 03:01:15 2026 GMT
Not After : Mar 30 03:01:15 2026 GMT
Subject: CN=2601d40a101c8bbd0369cb88797c87c127161033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:7f:91:d8:70:c7:6b:b4:79:fc:88:98:49:
03:cf:fe:01:82:d2:42:4a:29:96:db:2e:9b:bc:94:
93:7f:45:0d:1a:5a:8c:42:74:0a:cf:d4:d7:51:77:
1c:01:1f:4c:7f:5e:87:7e:29:b9:08:14:c6:de:aa:
da:24:f3:e7:4e:bd:0c:28:ae:1a:7c:76:55:20:b6:
cf:70:23:0f:59:9f:7c:58:01:7e:d9:68:55:3a:60:
8d:26:b6:c7:00:f4:76:85:9a:db:82:a8:e4:e8:e1:
7e:b5:42:6f:89:f5:a4:9a:ae:cb:09:22:39:b9:1f:
b4:cc:c9:d9:5d:e8:1a:2a:e3:21:80:6f:3b:e5:5e:
cf:85:7b:30:f4:ab:39:b2:3b:68:cb:ac:f0:48:59:
d9:4e:b8:aa:dc:b2:1b:cf:a7:e1:b1:d1:16:e1:26:
d2:d8:66:ab:1a:35:23:53:fb:9b:69:9c:bc:ca:44:
9a:31:60:30:fb:ba:0b:f3:d1:4d:53:5a:1f:3b:54:
89:4f:53:3a:61:d0:8a:18:50:ed:02:d3:11:cb:53:
5b:90:77:37:58:52:85:37:24:5c:04:e4:d3:1b:83:
9f:64:ed:97:73:40:1e:07:35:84:49:e5:4d:06:de:
b8:c1:5e:f6:ae:0f:b2:47:50:9f:d0:db:dc:54:16:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:01:D4:0A:10:1C:8B:BD:03:69:CB:88:79:7C:87:C1:27:16:10:33
X509v3 Authority Key Identifier:
keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:90:f1:54:1a:b7:d4:f9:44:b3:d0:b6:30:66:b1:ba:77:6f:
24:d9:54:73:c8:44:9b:0a:19:78:00:e6:aa:fa:9e:4c:ef:7d:
e4:f8:5c:f2:7d:d7:e6:f7:17:85:03:95:e8:01:6e:f5:01:82:
87:26:9a:f2:20:15:3b:b1:61:eb:7f:12:8d:6b:64:60:f0:09:
0e:d2:87:f8:f5:1c:97:16:3c:cb:d7:7e:21:ac:12:87:97:5a:
56:87:a2:f3:1d:a5:ee:14:49:38:12:1b:79:98:9c:cd:70:33:
3d:44:94:f5:e0:34:3d:4f:3c:1e:05:e3:60:85:f2:f6:c3:e2:
9b:15:43:4f:25:80:c1:b6:bb:63:ee:65:61:e7:90:ce:cb:ca:
e1:b9:ae:20:46:f3:8d:46:e7:e7:12:02:9e:b6:85:f7:8e:95:
b8:b8:9d:5c:be:43:83:76:bf:5f:e3:b6:ae:83:61:42:72:83:
24:dd:8e:32:32:cf:b7:90:1f:a1:6f:cb:9a:e2:f2:74:1e:f4:
ed:ef:ef:a4:c9:e0:f2:04:f3:2a:3f:3a:cd:cc:9b:cb:11:0b:
5f:f4:ad:0d:97:0b:41:50:46:96:f6:08:eb:27:c6:37:b2:46:
68:33:2e:59:a0:f0:e2:e5:61:1a:25:d2:69:42:e5:fb:a2:d1:
04:cb:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:56 2026 by rpki-client