Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: vIO/d8R1uZwGHJHXI/7Z7as/z51M6MKksc6trn1Efoc=
Subject key identifier: 75:91:F0:87:37:5D:8E:7C:D8:AA:7A:8B:55:7E:1F:45:C5:78:E0:4C
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 019CC9E3744A2762B438E1CDA3A05D4296F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 01D2
Signing time: Sat 07 Mar 2026 20:00:52 +0000
Manifest this update: Sat 07 Mar 2026 20:00:52 +0000
Manifest next update: Sun 08 Mar 2026 20:00:52 +0000
Files and hashes: 1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: e3DkREypUcImJsroZa1LsAXKVS43i+yLzKQ3FtGDoh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:e3:74:4a:27:62:b4:38:e1:cd:a3:a0:5d:42:96:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Mar 7 20:00:52 2026 GMT
Not After : Mar 8 20:00:52 2026 GMT
Subject: CN=7591f087375d8e7cd8aa7a8b557e1f45c578e04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:7f:e9:fc:b6:67:ea:bf:83:7b:93:d4:37:
e9:e8:0b:77:f3:2b:a6:06:ae:bb:2d:c6:ae:33:2d:
3f:7a:8c:b5:69:c2:77:63:62:02:30:ad:f8:bd:34:
f5:4b:d1:37:a1:b9:72:70:34:f5:f6:b1:fc:0d:f5:
70:3f:e1:ce:c7:35:94:40:5e:a4:77:9b:65:31:0a:
e8:a0:88:16:40:dc:73:c3:c6:69:64:92:ed:4d:b4:
29:40:2e:3f:4c:e7:74:c0:e4:89:2f:cf:ea:25:a4:
09:be:b8:89:af:9f:2e:75:c8:82:0d:91:0e:72:58:
f9:9c:e5:ab:d5:61:4a:ee:bd:ab:c5:e7:4d:9b:53:
99:56:7f:51:1b:eb:a7:68:19:03:fe:ae:ab:bd:84:
15:e3:0c:86:5c:41:0d:00:ec:4a:48:76:3a:05:02:
2b:40:58:48:78:ad:45:92:b9:a0:34:0f:1e:7c:c4:
5e:1e:9f:73:b6:94:56:8f:13:e8:3a:f0:92:02:30:
45:be:e3:e9:b7:1d:1d:79:4a:11:de:62:04:cd:a7:
7c:84:9d:0c:5a:d6:75:08:47:e3:98:e4:11:4e:da:
99:2c:71:03:a7:73:2b:9b:07:ff:f0:58:6d:c0:0b:
43:10:ac:49:57:4d:b3:38:e8:c1:36:fc:05:b2:66:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:91:F0:87:37:5D:8E:7C:D8:AA:7A:8B:55:7E:1F:45:C5:78:E0:4C
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:24:43:51:9a:c9:57:3b:f2:c9:e4:c2:b5:d2:67:6a:c9:3b:
22:f4:18:b1:cf:8c:fd:9e:98:83:4e:bb:fe:82:33:ce:51:b9:
2f:19:1c:f1:0c:59:51:23:96:3c:b8:79:a8:9c:7f:28:1f:b8:
70:36:0b:1c:55:ac:da:c4:e9:03:e4:eb:a3:68:69:46:71:92:
e1:51:d6:87:96:dc:5f:0f:86:aa:b0:62:db:8e:61:30:15:d1:
08:7f:a5:34:b6:21:56:18:91:32:13:3f:18:38:f5:8a:18:6b:
a6:38:7b:2d:b0:7c:77:d9:4f:b1:5d:c5:7e:2c:9d:10:cf:fd:
13:c0:c9:0e:90:ae:da:b8:61:e0:d4:75:d5:b0:ab:e9:e5:cc:
01:59:90:93:88:b0:e7:b1:25:cf:01:ac:bb:c1:58:fd:4f:98:
b6:fb:5a:ba:71:0c:64:16:34:09:06:93:43:b6:ea:7f:c9:ae:
99:6f:f8:a4:83:79:1e:0e:6f:1b:1c:63:26:d9:42:e2:7f:e2:
35:02:5c:27:b3:00:cb:4b:49:35:61:eb:16:07:f8:a9:1e:38:
4d:20:95:8a:dd:a5:25:79:99:ba:10:e1:c0:ec:44:28:09:8a:
6c:b1:19:1e:25:c2:c4:8b:af:b4:07:43:65:82:fa:17:ea:25:
21:9b:63:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:26:48 2026 by rpki-client