Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
File: faSamu8hhOwLtu8P3pAcWyhBumQ.mft (raw, json)
Hash identifier: GQGNeL+27nnrFdaI6phMtejBcQNsCUnPelSZsFMm6GM=
Subject key identifier: 8D:6B:21:91:12:17:15:85:B7:30:EB:8D:96:D6:C7:1E:1D:7A:77:66
Authority key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Certificate issuer: /CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Certificate serial: 019D37C09B284210934CB9623A14034CF820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
Manifest number: 107D
Signing time: Sun 29 Mar 2026 04:01:02 +0000
Manifest this update: Sun 29 Mar 2026 04:01:02 +0000
Manifest next update: Mon 30 Mar 2026 04:01:02 +0000
Files and hashes: 1: CZ_vg2yMDqKVCYRK8Qle7EmywbM.roa (hash: I6MzdrErUPSCD0sk16myqhgh6+H1xFM8zE2Mja1DH0A=)
2: faSamu8hhOwLtu8P3pAcWyhBumQ.crl (hash: 4vGi6+aG4eYkEtjJn8yWplxeKegkAk7V8wuGmTlhI0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9b:28:42:10:93:4c:b9:62:3a:14:03:4c:f8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Validity
Not Before: Mar 29 04:01:02 2026 GMT
Not After : Mar 30 04:01:02 2026 GMT
Subject: CN=8d6b219112171585b730eb8d96d6c71e1d7a7766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:d2:be:1e:67:58:6d:14:c7:f4:62:df:14:
ec:0b:e5:b4:79:75:96:4d:04:08:0c:a2:11:7e:df:
ea:f5:ce:ac:da:fc:34:97:2b:69:b1:16:9d:ee:3c:
e1:b1:11:17:b3:1f:be:9f:99:ed:99:33:77:f2:18:
9d:25:1c:c5:90:d7:7c:08:27:7d:66:65:39:63:8f:
64:1b:6e:70:03:fa:e5:cb:b7:77:d2:e4:34:ff:4f:
ba:1e:3c:f0:f4:e4:8d:f2:2f:e6:ae:23:1f:31:58:
87:95:25:c5:b7:d0:04:c7:89:75:e8:4f:c7:2c:90:
eb:9a:31:66:e0:d0:5b:81:ab:cb:be:1f:bf:d3:11:
46:9d:d5:26:bf:a6:1a:e0:5f:30:2b:fa:c5:87:a7:
79:51:6a:bb:17:9f:6c:03:b9:16:cd:b5:73:dd:3c:
06:c8:1f:6f:0a:31:c8:6a:bd:44:4e:93:ce:ac:cd:
6c:ec:70:fb:76:43:c3:d1:68:37:36:1b:0c:7d:e7:
a7:db:c2:92:41:0c:73:05:73:0d:ae:ca:ec:f8:f5:
75:e8:79:bb:f4:9b:2f:ca:62:95:2e:e3:56:a8:d1:
1f:81:0a:c6:f9:1c:89:d5:99:30:ab:b4:33:56:f7:
a0:05:1d:c4:11:4b:68:d9:fe:5b:ff:dd:31:7d:66:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6B:21:91:12:17:15:85:B7:30:EB:8D:96:D6:C7:1E:1D:7A:77:66
X509v3 Authority Key Identifier:
keyid:7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:df:a7:7b:df:38:ba:67:05:37:79:38:36:64:b9:fe:e1:e6:
8a:42:fc:c7:68:d8:ff:49:c6:56:ed:50:d3:1c:a1:e4:85:42:
62:9b:51:62:cc:b8:b3:96:a5:58:49:f8:73:a6:4a:e8:87:10:
ae:07:21:15:de:41:78:52:7b:aa:e0:34:2d:f8:fa:5a:a3:ce:
d3:9e:cf:59:ef:74:6c:29:ea:ca:42:29:19:f2:33:84:11:4d:
03:9a:f6:77:75:de:5b:c7:8b:7e:3f:28:8e:98:6d:94:4b:8a:
63:df:71:fa:23:57:66:4a:e5:ba:2a:35:bc:cb:20:0a:4b:13:
b9:48:7b:81:8b:71:5d:04:9a:3a:cf:57:54:e4:28:10:bf:bb:
f2:23:21:4f:27:d6:ee:48:26:64:9c:71:63:da:46:41:f1:a8:
d9:0b:a7:32:3a:da:16:8d:69:4c:74:a2:bf:26:4f:a4:da:0c:
5e:0b:1c:c9:90:2f:ab:fd:11:26:6b:ce:32:39:9f:c7:e0:1e:
33:5c:30:7c:48:14:04:03:c2:ec:5e:6f:88:28:08:ca:bc:c5:
74:b7:07:45:3b:5b:7b:f3:df:34:81:9f:04:1f:dc:b6:ce:48:
cf:b3:c8:bf:55:dd:43:60:ae:c9:43:c3:a1:5b:38:5e:5d:66:
a6:3a:ed:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:04 2026 by rpki-client