Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
File: fWNA43zPwSrrqsKl8z1F6gqIeoo.mft (raw, json)
Hash identifier: AAQ17Fmf9uj5FAK9f4QP4uv2RHRPUmLYXnZOj4/6KBQ=
Subject key identifier: 06:E3:59:26:2E:6F:04:06:EC:5F:49:EE:7C:F2:D6:98:6F:83:69:E6
Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A
Certificate issuer: /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
Certificate serial: 019D39AF4F19D54A199D2780F80810877FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
Manifest number: 12D9
Signing time: Sun 29 Mar 2026 13:01:23 +0000
Manifest this update: Sun 29 Mar 2026 13:01:23 +0000
Manifest next update: Mon 30 Mar 2026 13:01:23 +0000
Files and hashes: 1: 4ZpOnqfK2APIQ-4MQE03oLgsluo.roa (hash: XuqF0JqsAK0twG4BuXKjAf3bjV6Snt02Feen7Cm/uhc=)
2: fWNA43zPwSrrqsKl8z1F6gqIeoo.crl (hash: HVcesMGoZLeYrHyTdDN8k52coKqviCK2GwtvOLBa6ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:4f:19:d5:4a:19:9d:27:80:f8:08:10:87:7f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
Validity
Not Before: Mar 29 13:01:23 2026 GMT
Not After : Mar 30 13:01:23 2026 GMT
Subject: CN=06e359262e6f0406ec5f49ee7cf2d6986f8369e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:6d:2a:66:0c:67:61:77:14:d1:e3:e8:3d:
c0:45:c5:ba:68:4f:b2:98:2a:ef:99:f5:33:7e:ba:
1a:af:46:49:58:9b:b6:a4:81:2c:cf:d8:95:73:5f:
b3:8e:37:8e:06:ed:ec:28:21:25:e1:1b:de:d4:b7:
64:60:ee:ef:3d:83:b2:51:73:33:34:04:45:66:75:
bb:8b:45:c2:59:b0:6f:84:cb:d6:32:45:90:79:bd:
09:0a:3d:8a:ed:ec:bf:d0:c4:75:d7:06:05:15:7c:
54:85:76:ce:d7:35:a4:3c:a7:96:d8:ee:34:86:d6:
b3:8b:b8:43:f6:65:d1:5b:0c:c8:65:3a:4c:b2:c1:
34:55:dd:6a:01:98:c7:91:7e:74:05:6e:e5:26:0e:
ca:18:d3:7c:a0:d3:2a:fa:65:44:fb:f1:5e:6b:48:
c9:2f:b3:d6:57:0f:05:4a:22:8d:d1:b0:2d:2c:91:
51:ea:56:82:85:42:ea:45:c8:c5:8f:02:ca:99:aa:
33:2f:0a:27:00:b0:8c:91:4b:4d:1e:1d:8b:7d:79:
cf:74:9e:a7:ba:ad:68:d4:83:86:f4:1d:80:bc:4b:
2a:71:e8:95:3c:7a:e1:74:8f:76:f9:6d:fe:14:46:
31:83:80:28:66:ef:79:b0:53:27:50:48:52:bb:df:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E3:59:26:2E:6F:04:06:EC:5F:49:EE:7C:F2:D6:98:6F:83:69:E6
X509v3 Authority Key Identifier:
keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cf:4d:e4:00:21:57:b7:ba:4d:2d:dc:b5:1f:28:67:cc:9f:
04:56:ea:57:c5:6e:59:6e:1f:b3:31:00:56:a9:d9:09:58:c0:
67:42:ed:67:a4:ec:26:ee:a1:7f:89:2c:43:58:37:d8:9e:56:
d2:1a:83:02:c5:f6:d0:19:dc:bd:b6:bf:8b:72:c1:84:e2:24:
2f:b0:fc:dc:2f:75:77:9a:03:a0:d9:50:d9:62:7d:bb:c8:fe:
c1:25:d7:ee:3d:34:7f:e2:e7:dd:8d:1b:7c:05:51:a1:fa:77:
ac:e0:d0:96:26:27:7d:76:82:37:92:e0:a9:5c:ea:22:21:e0:
0c:c6:55:bf:63:d3:fa:ba:80:15:4d:66:8e:8f:da:75:1d:d4:
94:77:2c:0d:01:3a:68:ce:57:d2:a7:6f:aa:41:9e:e6:5f:c3:
a2:88:8e:36:9d:6e:34:96:b2:a0:79:08:07:ef:b5:0e:72:11:
e1:22:c9:21:ac:55:fc:69:e0:7b:83:7f:ce:e5:33:92:b3:b3:
22:2b:f4:fb:e6:f7:78:38:ca:1d:64:33:14:b8:5a:c1:13:27:
e8:0e:39:1d:71:82:df:36:44:ff:6a:5e:8d:c0:29:16:f9:98:
76:d9:88:08:0b:9c:f3:a1:3f:83:eb:bb:64:a7:9e:ec:ca:2e:
8d:ca:31:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:50 2026 by rpki-client