Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
File: fxiK2rW1UggeysghybCQOUhzsxU.mft (raw, json)
Hash identifier: rQqAB0oqZIdB+NLFTbjzCbu7vvoJEFjEkCM4Vcxzsik=
Subject key identifier: BB:CB:3F:D5:0C:CC:45:AB:4E:8A:7B:A4:FA:D2:EB:12:D3:A9:ED:EE
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial: 019D38D300AF1B285EC41678FFAC0A09EDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
Manifest number: 12FF
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: LLHf1llyboYlmMdrimxD-i9OBTA.roa (hash: FD4h5t5+E9U3hUWnTKbkdjC1oNaGYlXx79R2DfDU7go=)
2: fxiK2rW1UggeysghybCQOUhzsxU.crl (hash: jyBhaDGCLLDsZdKg2Vl1gnnP9/kSywxeANcmitk22As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:00:af:1b:28:5e:c4:16:78:ff:ac:0a:09:ed:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=bbcb3fd50ccc45ab4e8a7ba4fad2eb12d3a9edee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:94:f0:a0:5e:03:00:0a:8b:7f:36:9a:4a:
78:b5:c6:5d:eb:12:a9:6d:bf:7f:80:8f:6d:08:98:
ad:d1:80:68:c1:2a:cc:9f:fc:aa:d6:d9:59:c3:e6:
39:5f:d5:89:bf:99:84:4a:52:02:66:a3:c1:f7:c8:
1d:e7:7a:86:99:e2:45:c7:cd:c9:26:58:2b:48:b5:
57:80:70:05:22:f1:53:be:1e:51:97:e3:02:b3:68:
54:58:26:0b:73:66:88:70:1a:b6:32:e2:d8:27:49:
67:7d:98:95:3c:64:40:7f:23:45:e0:19:fd:b2:f1:
1b:7e:19:cb:5b:31:08:7c:48:b4:de:63:84:22:ea:
b5:3c:d6:fd:e5:3c:40:2b:f0:69:b2:f5:4d:66:d1:
8f:12:36:5b:3e:26:27:69:60:57:0c:2b:91:dd:66:
60:2c:48:ba:0d:d3:29:ab:44:20:e1:3e:80:9b:f9:
d9:75:3e:9c:49:7c:66:67:b9:f8:a4:68:39:66:03:
a8:b3:04:7a:9c:ac:1f:c9:0b:b0:cb:98:b7:41:8b:
a6:4b:82:5d:fe:a6:f2:5c:96:17:a8:18:a7:fa:e8:
6d:26:cc:29:d3:14:94:9a:11:50:68:8d:aa:8e:cf:
cd:b6:da:84:34:c6:53:6e:af:07:f2:43:6e:00:a0:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CB:3F:D5:0C:CC:45:AB:4E:8A:7B:A4:FA:D2:EB:12:D3:A9:ED:EE
X509v3 Authority Key Identifier:
keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4b:d4:4a:88:8a:6f:7e:e5:cd:8d:03:cc:5b:05:35:21:3b:
d8:29:43:33:2b:3f:26:bc:16:98:a8:b5:c5:48:bd:f9:c5:50:
61:8f:b9:b7:e3:e7:29:7e:8e:e4:00:07:e3:58:09:ce:9b:8f:
ab:1d:ae:4a:2a:aa:9a:e0:87:38:1f:6c:85:21:15:26:a9:80:
04:03:e2:c8:11:b8:1a:0e:54:04:79:0e:08:c0:ad:cb:e4:e8:
5a:20:5f:fe:ec:71:cb:83:33:20:7b:56:8e:68:49:17:64:55:
58:9d:00:f7:86:eb:c5:b1:a8:47:c1:99:c8:be:6a:4c:d3:7f:
87:31:6e:a2:84:76:a6:e9:2a:7c:b6:10:9d:24:27:68:09:a3:
6d:79:5b:f3:59:64:60:0e:7a:22:ae:6a:24:4c:7d:a6:94:82:
ef:c1:e8:54:1d:1d:8c:d1:54:70:5f:b5:fb:81:90:35:14:24:
ce:95:ec:c1:e1:01:c0:6e:a6:b1:e3:bf:7f:4b:8b:d7:e8:ec:
90:08:ec:61:1a:9f:34:94:5a:20:bc:48:91:4e:10:ee:ef:b5:
19:80:98:f0:4c:ae:1d:f8:b7:85:9e:c8:11:29:4b:41:fe:f2:
77:ac:44:cd:22:4b:10:5c:84:8b:51:03:c8:98:6a:67:db:13:
1f:a9:2a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:14 2026 by rpki-client