Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
File: f-aLEiNL1wNDAbyWsTiq4neGCj4.mft (raw, json)
Hash identifier: fMN6rEfMZBjPILzFxtUcW6yxjlZ91sGTU1C52eN2jVE=
Subject key identifier: 06:12:34:42:97:78:93:D9:5F:9F:65:0C:3F:21:54:FE:6D:8A:49:7B
Authority key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
Certificate issuer: /CN=7fe68b12234bd7034301bc96b138aae277860a3e
Certificate serial: 019D389C4CA54E40A45D72893BF221780B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
Manifest number: 06FB
Signing time: Sun 29 Mar 2026 08:01:00 +0000
Manifest this update: Sun 29 Mar 2026 08:01:00 +0000
Manifest next update: Mon 30 Mar 2026 08:01:00 +0000
Files and hashes: 1: GX3AB64QskbUOjQSGuXwQocGhH4.roa (hash: MQhJE1eeGiBKPeJQc1Z6DyxcBxWQ3yiE6MW/PeUdUgY=)
2: f-aLEiNL1wNDAbyWsTiq4neGCj4.crl (hash: NOPdDCVsT1a0qSoP1rfWnGSiPqZCzYQD2tYNo7Z6sCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4c:a5:4e:40:a4:5d:72:89:3b:f2:21:78:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe68b12234bd7034301bc96b138aae277860a3e
Validity
Not Before: Mar 29 08:01:00 2026 GMT
Not After : Mar 30 08:01:00 2026 GMT
Subject: CN=06123442977893d95f9f650c3f2154fe6d8a497b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:9c:94:57:83:2c:14:6c:fb:d3:1f:81:ee:
e5:5a:5e:54:c5:a7:e9:3a:3c:14:85:63:1f:59:86:
82:de:6a:4f:60:c4:61:36:5b:73:ff:cb:f1:f6:2d:
fc:36:7e:39:71:88:81:de:c3:10:6c:50:0a:68:26:
f3:b4:55:7d:d1:7c:7e:78:c5:95:bb:5d:4f:18:d2:
ce:70:70:99:cb:d9:64:99:c2:a2:3b:db:c5:88:cb:
ac:cb:60:f3:3c:23:88:e7:4d:03:28:bf:3a:88:2a:
5b:79:d5:74:ba:58:2a:eb:15:3a:fd:90:9d:6a:15:
cd:21:16:56:ca:8e:09:46:c0:3f:ce:9b:24:38:a2:
3a:44:c3:52:e5:11:02:c1:43:44:2b:89:0a:87:b0:
8a:5d:7f:3f:22:59:59:cb:69:ae:d1:e7:f6:8c:2c:
d9:74:71:54:a5:a7:ff:58:5a:06:14:bd:69:d5:65:
e1:e1:1f:bf:68:8f:5e:d0:5c:69:b8:bd:52:14:7f:
af:55:79:e9:38:65:9f:28:f5:6a:99:22:9f:fd:45:
8d:e2:b7:a8:49:ef:28:26:23:06:48:98:23:0f:24:
4b:ba:17:07:ba:5c:21:79:28:f2:f6:4c:a1:f7:b0:
c2:30:1b:d3:ec:d5:9e:9d:78:e3:f3:7b:d9:ef:d1:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:12:34:42:97:78:93:D9:5F:9F:65:0C:3F:21:54:FE:6D:8A:49:7B
X509v3 Authority Key Identifier:
keyid:7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:06:8c:15:87:96:b7:ce:84:dc:07:9c:93:5e:26:dc:8c:99:
4c:37:f4:e1:8d:0a:f7:68:53:1e:b3:29:a8:9f:72:ee:ac:8a:
d1:67:81:fd:78:2d:1f:fb:75:1b:b3:02:c5:ae:c9:04:b5:40:
c9:e4:2d:6c:c2:b9:8e:fe:d3:6e:ef:9d:8e:4d:a4:a9:50:29:
96:65:36:b2:25:b1:33:a4:b7:be:df:f6:5e:09:09:b6:f4:0c:
b4:d4:d6:3a:34:7c:56:95:6d:ff:9c:17:5f:d1:22:66:af:e4:
04:06:4b:bf:a4:49:bf:5d:e4:48:5e:7f:2c:c3:69:27:f5:b3:
9e:3c:20:7f:dd:d9:0b:02:1e:83:14:da:a1:bf:a6:33:bc:62:
15:1e:09:d5:fe:2a:64:fd:a1:a4:4a:25:7a:40:99:94:ad:78:
f9:0c:18:58:46:69:8f:0b:b1:b9:98:54:a0:6b:8d:c9:7f:6c:
0b:ed:3e:0a:6e:fa:36:0e:cc:e8:1a:fc:f8:1b:6e:5c:2c:a6:
a4:a5:f3:ad:6b:8f:10:cb:83:3e:a6:dc:d8:2c:43:ab:28:54:
c2:94:1f:48:29:c8:61:24:58:eb:24:b6:50:b9:77:b3:0a:11:
a4:85:e0:28:17:82:c0:00:05:4b:0c:70:9b:4e:22:1d:5e:69:
a1:69:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:19 2026 by rpki-client