Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
File: faSamu8hhOwLtu8P3pAcWyhBumQ.mft (raw, json)
Hash identifier: tHKbiH+5E1cDZ1UuwxjFzhtEnJsTEiSZFqgLViJvUKM=
Subject key identifier: 60:FD:C0:AE:08:CE:EF:EF:25:BC:DE:70:0A:DA:CA:4C:1C:C8:C2:4E
Authority key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Certificate issuer: /CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Certificate serial: 019EB62038022AA6A7F4CF35C2315F744941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
Manifest number: 1143
Signing time: Thu 11 Jun 2026 10:00:25 +0000
Manifest this update: Thu 11 Jun 2026 10:00:25 +0000
Manifest next update: Fri 12 Jun 2026 10:00:25 +0000
Files and hashes: 1: CZ_vg2yMDqKVCYRK8Qle7EmywbM.roa (hash: I6MzdrErUPSCD0sk16myqhgh6+H1xFM8zE2Mja1DH0A=)
2: faSamu8hhOwLtu8P3pAcWyhBumQ.crl (hash: nIWz/eqQO/4PQb72Tm03y2n4Yh7p5gXaRKDUUKGfZ3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:38:02:2a:a6:a7:f4:cf:35:c2:31:5f:74:49:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Validity
Not Before: Jun 11 10:00:25 2026 GMT
Not After : Jun 12 10:00:25 2026 GMT
Subject: CN=60fdc0ae08ceefef25bcde700adaca4c1cc8c24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:f7:c9:6b:a9:9b:73:7f:01:e4:53:35:d6:
00:7e:9e:1f:ab:f8:87:47:f0:1e:98:b9:88:8e:4c:
7f:b1:ad:4e:d0:6a:9b:56:af:a0:74:14:aa:f6:08:
4e:48:fa:20:6c:d0:aa:8f:97:d0:67:d9:d3:31:16:
3e:ef:44:d3:ee:94:b7:2a:99:47:67:84:a1:f7:3c:
1c:d2:06:12:a2:92:96:09:36:3d:e3:b9:01:96:a7:
ea:b2:8a:8c:f2:e3:c2:85:4b:6b:ff:ae:03:45:75:
40:d7:b4:89:cf:e4:03:48:e5:d5:bf:bb:99:cb:19:
5a:c9:fe:52:3c:59:94:2c:c5:4f:b8:a8:78:46:1e:
fc:46:5b:55:ec:0c:01:fe:48:81:18:5a:03:d8:10:
de:ba:62:6e:3f:fa:1b:93:32:c5:d9:93:0b:a7:d1:
b7:07:1e:1f:01:42:91:bc:0a:4f:b2:80:3a:05:55:
50:d4:4b:5b:94:13:9f:7c:8c:ff:bd:68:a4:a0:34:
05:66:b6:23:72:b3:3d:ac:9d:b0:23:27:cb:60:df:
07:dd:1f:84:7b:16:2a:c0:0a:6d:2a:6d:e0:a2:09:
a3:52:4a:4f:38:0a:ca:8a:65:bc:42:f2:8e:23:cd:
8c:ac:c9:64:f8:90:d0:8e:c1:4c:15:a5:20:2a:ef:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FD:C0:AE:08:CE:EF:EF:25:BC:DE:70:0A:DA:CA:4C:1C:C8:C2:4E
X509v3 Authority Key Identifier:
keyid:7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:02:41:f6:99:fa:07:47:ef:0d:e9:5b:80:d2:4c:80:3d:87:
10:98:dc:a1:36:d4:4f:13:ad:d4:34:4a:68:d6:0a:34:de:2d:
a3:39:77:a6:4c:75:08:73:0f:53:93:0a:00:bc:d6:8d:db:ab:
b0:71:89:29:0d:43:7e:99:0c:5e:d2:2e:a2:05:42:e9:ea:93:
0d:3d:92:7e:46:18:3f:85:7b:af:95:ef:1e:52:98:13:21:99:
0e:bd:24:36:64:d8:00:5c:5a:0a:f3:6b:22:5c:85:9c:91:06:
88:0f:27:f1:c8:9f:56:f7:61:21:6c:73:44:72:63:b7:26:44:
e2:91:4a:9d:3b:48:b7:c5:19:4f:b8:79:b8:ab:c1:c1:fb:32:
ff:d1:c0:b3:76:b1:70:01:02:ee:3f:9a:05:17:1c:a4:4e:b1:
f1:c2:6e:e1:33:6d:f8:3c:16:6b:a8:65:2c:d8:21:91:b9:fc:
34:42:bb:3b:ee:9d:78:aa:60:70:0c:03:6a:33:3a:0f:e6:2e:
14:e5:39:1d:ea:d4:df:0a:1c:58:45:5b:0e:d1:19:11:56:13:
2f:82:72:df:f9:23:21:5b:8d:56:3d:cd:4b:60:fc:5f:f1:dc:
04:cd:2d:8b:d7:c5:a9:47:51:6e:53:6d:86:08:6e:2a:30:b4:
a3:ff:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:12:39 2026 by rpki-client