Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
File: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft (raw, json)
Hash identifier: mCt9c92Ue+8O2qtHhAL+WtNRKDd7m21EN+wvmTRJt0s=
Subject key identifier: 87:FE:1B:27:8C:20:CC:5A:21:F2:CD:91:9C:D3:F0:5E:EB:87:C4:C4
Authority key identifier: F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
Certificate issuer: /CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Certificate serial: 019D39AF339E838DF3D679BB7F084850E73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
Manifest number: 0FAD
Signing time: Sun 29 Mar 2026 13:01:16 +0000
Manifest this update: Sun 29 Mar 2026 13:01:16 +0000
Manifest next update: Mon 30 Mar 2026 13:01:16 +0000
Files and hashes: 1: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl (hash: dN++erlraX0IACAxwnEzSUJR38u1brre3FFWIJTOxxM=)
2: hIDpzQ_HE9PgYmbgXnDpkgbw6lI.roa (hash: T38fVoB7ka1pTHD2kD48LtsxAyktDuKQ2FLezJUn2lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:33:9e:83:8d:f3:d6:79:bb:7f:08:48:50:e7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Validity
Not Before: Mar 29 13:01:16 2026 GMT
Not After : Mar 30 13:01:16 2026 GMT
Subject: CN=87fe1b278c20cc5a21f2cd919cd3f05eeb87c4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:58:60:e1:57:76:3d:21:83:3e:fe:f1:85:
9c:b5:ca:86:48:da:1b:e2:c4:20:d6:09:d7:a8:fe:
a9:ed:62:2a:8f:74:92:81:d6:a1:8b:8b:ad:af:fc:
04:e8:c7:ad:65:c3:61:c6:fe:1e:f1:1b:cf:1a:d8:
7e:9e:6e:f2:de:c0:21:92:dc:79:e9:06:f7:8d:84:
fa:b5:3e:55:9c:39:cd:6a:23:60:a3:8e:20:31:e0:
b4:aa:49:f9:27:3d:20:de:24:b3:62:c6:5f:a9:d6:
6d:d5:76:41:c6:b7:3f:3e:92:66:8c:fd:9c:13:b6:
53:27:27:17:c1:e2:f0:5e:ee:b7:71:64:fb:65:90:
fb:d0:c6:d6:df:64:8c:7d:47:03:91:81:85:28:57:
16:6e:fa:f4:6e:e7:24:dd:63:68:1f:c7:25:5d:a5:
1b:34:9e:9a:96:b7:75:6e:c3:d0:ac:7d:0e:12:85:
f0:a5:50:cc:b4:d9:c2:6f:06:28:5e:95:2c:8b:fd:
4d:f3:75:6e:9d:02:61:ca:0d:5c:14:6e:4e:6c:04:
f5:cc:10:c6:f5:b9:fc:8c:9e:68:e8:6a:35:c4:e0:
42:5e:f0:86:3f:1b:ea:c6:ae:ea:8f:93:cf:6f:ed:
25:b1:99:53:91:0f:27:de:da:22:67:8f:c7:4c:c0:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:1B:27:8C:20:CC:5A:21:F2:CD:91:9C:D3:F0:5E:EB:87:C4:C4
X509v3 Authority Key Identifier:
keyid:F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0a:ca:19:ac:11:a7:21:f6:d4:69:93:95:4f:68:f9:50:7a:
37:02:56:eb:d7:c6:ca:f8:97:6c:dd:d0:76:0a:e1:df:f8:05:
4b:98:3f:a0:3e:d2:8b:91:f5:f1:79:33:5e:5a:6d:ef:c1:92:
a8:7a:33:0a:45:4c:6f:e6:ed:b4:53:de:a5:a3:c8:18:b5:91:
02:70:e9:ab:7b:ee:69:e8:8e:96:26:01:7b:7e:74:2d:eb:11:
bc:05:fa:d0:ed:fc:f4:4d:29:ce:02:bd:eb:bb:fb:a9:19:83:
6a:18:bc:6e:4b:cf:eb:73:f4:c6:8a:8d:96:e6:12:d6:e7:48:
f2:f7:bd:0a:7c:4a:cf:29:4c:c6:08:a6:9e:b8:19:3d:d5:98:
00:91:f5:b7:15:5e:06:63:60:eb:5d:0f:42:aa:20:3c:34:50:
7b:3e:40:34:c4:14:e3:8f:f9:37:3e:01:fc:fa:c5:8d:d5:ce:
6c:a7:11:fe:a9:4f:78:4d:ee:1b:04:bf:4d:23:c8:ba:55:a0:
3e:cf:5b:77:08:23:12:e3:de:a9:27:fc:63:05:ba:4e:47:2f:
fb:1d:23:b7:e6:79:fe:5e:b5:0c:53:98:4e:fc:f5:81:93:0f:
84:b3:a5:f8:76:62:cb:3f:48:c0:c8:4f:87:62:df:ff:a8:9a:
c9:ed:cd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:51 2026 by rpki-client