Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
File: fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft (raw, json)
Hash identifier: x6GfKN+db81AQJEf9NuN8OowOrfhZQV3F5nY9MpgfgE=
Subject key identifier: F6:08:A6:EE:79:78:C2:AB:3B:56:EA:DD:C7:B8:E4:3A:5C:D2:04:9D
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial: 019D37C0ED3D5E162CD3DB8A38A822627734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
Manifest number: 189C
Signing time: Sun 29 Mar 2026 04:01:23 +0000
Manifest this update: Sun 29 Mar 2026 04:01:23 +0000
Manifest next update: Mon 30 Mar 2026 04:01:23 +0000
Files and hashes: 1: _mrDtR7UUkEZv2J_VBhDtzQIO1I.roa (hash: 82z4R+bFU5sQIWEOZT5D+4EYVzoIe1d3vFP95vZNL4M=)
2: fMbiFCTyTzMmg8AfN6taf_m942M.roa (hash: BdnizwfSmLNZb5SUcv7cbeGqrU/Jq6lZwV4GmbZ6TLU=)
3: fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl (hash: +U22UuPfcBmH5B9MSURqdZ4/ckJcVewxRnipesI6kjQ=)
4: q-7Ws7q0jDYung0XnxU4hwFEoqw.roa (hash: kLEC8ykLDYdJM5qWo6Fc1YoTmSHEnK8bCiHZuP9btTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ed:3d:5e:16:2c:d3:db:8a:38:a8:22:62:77:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Validity
Not Before: Mar 29 04:01:23 2026 GMT
Not After : Mar 30 04:01:23 2026 GMT
Subject: CN=f608a6ee7978c2ab3b56eaddc7b8e43a5cd2049d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:ff:38:5e:5d:b2:5c:65:a5:3c:0d:18:48:
a1:31:e1:6e:86:b7:c6:7c:2d:26:eb:a7:48:9e:4d:
ca:0c:e6:56:89:9b:2f:87:49:1f:50:6f:c5:ae:0b:
98:9b:5c:c9:02:95:97:85:26:71:bd:29:d5:af:ff:
f3:15:f3:94:7f:1e:fd:f5:ff:29:65:5a:c6:3d:2e:
a3:4b:c0:ca:6a:69:29:26:2f:a5:15:4b:b1:57:b9:
3c:db:f4:74:63:28:a8:29:c2:f7:27:38:ac:24:77:
71:4d:a5:f5:04:5a:fd:8e:6c:84:b3:9c:28:3e:4a:
cf:b4:b4:14:6c:e9:a4:d3:31:26:68:ca:92:27:3f:
1c:72:ee:fb:95:33:b6:85:2f:e5:8f:b9:07:f6:83:
30:00:b7:a6:22:0f:74:25:99:23:ae:d1:e6:95:3c:
bb:7f:2b:1f:0e:07:03:95:4e:9e:fd:02:47:ef:61:
c4:9d:d2:fc:6d:d6:47:80:35:73:10:37:06:5d:17:
03:8d:c7:a1:4b:bd:6f:5f:b3:28:29:24:1e:cd:67:
67:e6:29:7a:73:9e:d7:25:ca:cd:92:64:93:47:a1:
21:a5:6a:68:57:70:da:0e:63:33:0b:1f:43:49:7f:
aa:62:da:93:83:b8:3a:bf:39:3b:2e:6e:46:14:9e:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:08:A6:EE:79:78:C2:AB:3B:56:EA:DD:C7:B8:E4:3A:5C:D2:04:9D
X509v3 Authority Key Identifier:
keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3b:1a:fa:63:37:cd:db:1b:15:6f:71:e0:c7:5b:53:b4:be:
ba:33:b3:18:d4:d7:8c:29:d7:bb:d5:47:ee:03:7d:68:c5:12:
9c:ce:46:aa:26:26:a4:57:0e:fb:6b:61:1f:6c:bc:2e:52:19:
e2:ea:b5:6c:34:36:af:62:b0:79:0a:75:30:b4:2d:83:56:36:
c6:b2:19:f8:ac:43:7d:96:45:7b:09:7e:07:14:a0:2b:04:09:
b7:7e:15:c2:32:e4:2d:04:52:9f:ab:5c:76:7a:49:33:fd:f6:
47:3e:20:d5:21:33:ff:ac:53:09:d5:f1:ce:35:69:6e:71:84:
42:e3:91:16:8e:40:72:be:7a:6b:eb:a4:26:81:e0:97:82:2c:
3c:d9:e2:77:d4:17:c3:b4:00:98:e9:26:c4:ea:27:81:fe:72:
df:7f:96:90:b9:79:cb:f4:35:29:82:5f:84:c2:40:46:52:a9:
fe:a1:0c:95:e3:b7:92:93:1a:0d:50:b7:67:b7:e5:bc:4c:29:
d4:2c:3e:15:b5:44:2d:e9:18:aa:07:9b:f4:0f:1f:4d:b0:0d:
3c:e0:ee:02:f0:5e:e1:fe:bd:ce:96:2c:fe:6d:83:75:84:09:
16:5a:6e:52:77:5d:55:4f:8f:31:c2:53:21:ea:b9:d3:3c:bb:
59:b5:8f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:12 2026 by rpki-client