Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: FEkvIzkVeesBfZWtrJiJX3ToBy9jKAy8UBxOqUAC8A0=
Subject key identifier: 65:94:08:67:64:4E:76:CD:C4:34:66:44:74:0C:A4:E5:53:0D:F7:67
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 019D37C009C1BB449AAE13435ADA1810C558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 0BD0
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: 2e8QyLYMT4HWwfUGaImHeP_tGTY.roa (hash: s9h03bDzb0Cy0LO5kY73K6dn/N9HUik5sgJSj+kQ3k8=)
2: Y28Wd-rLHaf4YfijKKoceP6pCO4.roa (hash: T4TEmypQSq/p5gS6mPa8ZhWCLwbTNsBlfya0BmZTPbQ=)
3: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: FIIrqXu1fNFE2CezgXu50PiJD6bnBG25HJMhCxMZA7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:09:c1:bb:44:9a:ae:13:43:5a:da:18:10:c5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=65940867644e76cdc4346644740ca4e5530df767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:0c:76:8a:c4:0d:3b:72:9b:03:e9:e4:65:
23:df:d1:49:e1:97:28:d2:dd:ae:4b:3d:85:ad:b6:
7b:2f:66:95:8e:ad:96:22:8e:7d:d6:35:ee:d6:b3:
5f:58:c7:df:af:c3:5e:f3:12:37:8f:87:0e:71:6a:
fc:4f:57:51:3e:b0:82:f1:74:e6:4b:1b:00:67:08:
5d:c0:00:fe:5f:d7:9c:02:e1:1c:82:6e:03:29:b5:
e8:cc:50:25:d6:ec:09:92:8c:16:de:8d:99:f1:32:
be:9e:42:0d:53:64:f5:60:e1:d0:a2:96:e2:5f:ce:
41:0b:80:3d:2e:0e:da:d7:7f:97:e5:db:85:74:39:
4c:69:dc:6e:8c:e5:a2:92:e6:7a:99:83:72:18:72:
91:46:d5:e6:37:52:04:00:3e:4c:81:87:02:bc:91:
d7:87:a6:27:fc:14:f8:b0:7d:d8:22:6b:49:04:b2:
2f:6f:3f:67:51:c5:f8:1d:c2:96:0a:ab:1c:87:6c:
36:63:f0:a7:1b:bb:30:a6:93:24:54:64:a5:05:3d:
98:8a:4c:95:a2:f3:eb:8a:6f:f7:cb:48:16:2c:c4:
79:78:6e:ca:c1:08:a5:8b:a5:54:ce:d9:0f:d5:c4:
f2:cf:54:26:86:8f:61:bd:71:71:22:cc:14:e7:0e:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:94:08:67:64:4E:76:CD:C4:34:66:44:74:0C:A4:E5:53:0D:F7:67
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:62:7d:dd:d2:0c:58:c2:5c:06:2a:87:6c:8c:21:6a:c4:16:
d1:e2:c4:e0:70:fc:3d:be:4c:67:05:bc:d2:3a:2a:ea:b4:08:
c9:1c:c9:1d:8e:d1:c6:89:37:51:cc:cd:b3:79:fa:13:f4:71:
73:cf:25:42:18:c5:ca:b2:86:19:2a:5f:9e:e2:2f:48:a8:6c:
f0:32:8a:12:a7:9b:80:5f:8f:f1:7c:d5:55:39:1b:c8:30:e6:
8b:94:44:5f:be:8e:97:88:8a:76:47:7d:6d:28:29:54:89:0b:
48:e4:94:0e:d2:98:16:c0:13:34:61:e1:08:78:ab:8f:35:47:
9e:5e:5c:df:29:99:85:91:01:e0:14:25:65:8e:81:0d:79:2d:
bf:80:3e:84:5b:7f:53:e1:1c:9a:04:4b:bc:3b:22:f3:f8:5e:
7a:a6:dc:28:d9:41:cf:70:99:fd:b0:83:9f:19:53:44:8f:da:
8d:cd:7c:9a:a4:5d:b2:a7:e6:b5:a0:45:30:c7:41:2d:bf:26:
99:5e:a4:01:e5:59:d0:53:a8:b6:84:d7:28:db:68:58:4c:df:
98:38:ed:de:4b:a9:79:7c:59:6d:b4:bc:d6:a0:c8:8b:f6:39:
8a:73:bc:08:a1:08:43:cd:4c:73:96:40:bc:fb:fb:9b:a3:fe:
43:7d:87:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:32 2026 by rpki-client