Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: NGZRA6V+WYmAdpVi5efYooHkVx9yynr6uNgtbg+USHY=
Subject key identifier: 0D:47:38:4D:D0:D3:8E:B5:6D:2A:FB:E3:3E:EA:4F:19:9A:ED:8E:79
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 019D3940A0682944601B881B3181B6E1B63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 0D57
Signing time: Sun 29 Mar 2026 11:00:29 +0000
Manifest this update: Sun 29 Mar 2026 11:00:29 +0000
Manifest next update: Mon 30 Mar 2026 11:00:29 +0000
Files and hashes: 1: 12UJF4HYmWUHj7PV3zv7e2Gsrnc.roa (hash: MFtJUTjKP5EZY8W9GLM2rnUmvMbXeeAVoqfoR4gu6rY=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: yjFxxqc3nBjoVp1+72L3RMinCeSRd+Wu+iT/5jeZ6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a0:68:29:44:60:1b:88:1b:31:81:b6:e1:b6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Mar 29 11:00:29 2026 GMT
Not After : Mar 30 11:00:29 2026 GMT
Subject: CN=0d47384dd0d38eb56d2afbe33eea4f199aed8e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:97:90:55:ef:a0:69:1a:fc:bd:f5:88:bf:98:
96:74:44:34:a1:60:f2:7e:96:21:7d:3a:a9:e1:9c:
ee:75:f0:66:24:11:17:f7:ec:7a:a8:d2:aa:de:de:
e0:4d:e3:e6:d4:4e:fc:18:e0:bf:b6:ea:e0:8e:19:
0d:ad:18:42:bc:4f:a4:93:3c:85:35:40:8f:80:ad:
be:ed:3f:fa:86:da:46:e4:97:ab:59:00:3c:5a:9f:
68:72:c8:d0:01:17:67:17:f8:77:a0:54:e5:15:52:
4a:f4:28:53:7c:82:a4:27:01:76:87:6c:cb:d0:5a:
ef:a8:b8:2f:c7:b3:a5:c7:c6:aa:14:13:f6:9d:eb:
76:ea:71:5f:20:9b:96:f4:70:97:cc:2a:05:2b:1d:
d9:99:2e:8d:e1:21:d6:6a:00:23:e4:c8:a8:b0:39:
36:a6:54:65:4f:72:f6:80:7e:17:ed:b8:7d:0b:33:
e6:e1:76:e9:df:75:1a:3d:ca:d4:e0:cc:47:c5:e5:
7a:4e:f4:9e:75:69:4b:60:00:f0:9a:c1:ee:70:27:
df:1c:c4:a2:1b:1a:48:2c:ad:14:47:fa:e2:66:ff:
4f:3d:cf:5d:b9:93:5c:87:c8:09:76:3a:a5:37:43:
a7:dc:4e:a3:6b:a3:53:68:2c:6e:2c:66:1f:16:23:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:47:38:4D:D0:D3:8E:B5:6D:2A:FB:E3:3E:EA:4F:19:9A:ED:8E:79
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0a:14:f2:9c:87:64:42:5c:38:58:4f:38:08:eb:f3:4e:e9:
28:00:77:bf:3d:9a:66:1d:26:98:76:d6:50:51:20:c9:e3:4a:
57:90:6f:da:e2:66:88:21:0d:d3:2a:4f:30:3d:fb:d2:86:e9:
60:ed:0c:15:91:dd:77:d5:d5:3b:3d:3d:de:8a:9f:cf:08:b2:
cb:12:ff:9a:f5:c0:f1:d7:ff:67:48:02:19:8b:72:d4:96:3d:
f8:d7:b6:32:1c:9f:38:d2:bb:3e:d4:79:4a:cc:a5:5e:99:fa:
19:8e:3f:fc:17:61:1a:3f:b8:65:50:9d:10:d2:ac:b4:f7:f1:
bc:49:ca:21:a0:18:66:e0:4b:2b:1a:2e:31:ca:e4:f1:26:51:
5c:96:41:90:1e:68:dd:4a:9c:be:a8:aa:74:6c:9e:13:0f:c4:
17:04:f0:10:2a:df:b3:a8:07:3c:76:e3:04:c4:2e:88:2d:9a:
5f:11:22:bc:54:79:2d:fc:25:ab:9f:e4:e5:ef:6b:a1:3d:2e:
93:2d:dd:1b:40:eb:af:b1:5f:bb:dd:86:2b:1f:29:6e:02:f4:
cc:01:e6:b5:5b:1f:ab:c6:11:47:f5:a9:bd:06:26:6e:bb:f0:
62:f8:9e:37:11:e3:e5:fa:90:c5:b5:d4:f3:85:84:57:38:dd:
cb:b8:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:12 2026 by rpki-client