Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: qaUIVnVgofqKPh2jPoc7e9t/BZXknM3jIsPGVn0hiOg=
Subject key identifier: 6B:D8:1E:17:4A:EB:CC:6B:8E:6E:A8:F6:EB:0E:8D:BC:A2:B1:01:30
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 019D37F733FD52685B141A00D2E3A7CC24E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 153A
Signing time: Sun 29 Mar 2026 05:00:40 +0000
Manifest this update: Sun 29 Mar 2026 05:00:40 +0000
Manifest next update: Mon 30 Mar 2026 05:00:40 +0000
Files and hashes: 1: M81Qxbtts07Ib9z19i7shUVMtA8.roa (hash: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: iGAl3Lr+rC60slo4pEpUnkOQ4vAK8jM9Wxo0nRRCrfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:33:fd:52:68:5b:14:1a:00:d2:e3:a7:cc:24:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Mar 29 05:00:40 2026 GMT
Not After : Mar 30 05:00:40 2026 GMT
Subject: CN=6bd81e174aebcc6b8e6ea8f6eb0e8dbca2b10130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:ad:75:04:f4:4d:ca:c6:e0:6c:bb:e9:c3:
f6:a9:0b:22:de:42:37:d2:6f:07:4d:99:dc:30:d3:
49:71:c5:fa:9b:ed:2b:da:5e:a7:d3:d0:ae:2c:8d:
b3:df:9a:9a:6b:06:54:18:9e:9b:35:bf:20:c2:56:
04:76:ff:b0:c7:07:3d:31:eb:cb:d4:31:a6:15:11:
cd:0e:9d:21:4b:b2:6b:fa:37:f8:d6:11:3c:ee:e8:
84:9e:b1:4c:4b:c6:66:50:01:4f:c7:ec:0c:b4:16:
62:53:6d:9d:4e:48:0f:67:45:7f:9f:4d:06:35:9b:
9b:d0:ce:ac:99:83:84:47:89:e9:68:59:3a:96:56:
e3:14:8d:18:29:ac:70:c8:13:77:a0:a3:1b:0f:92:
23:d3:27:25:84:10:6a:c7:b1:67:30:f3:b0:68:e3:
28:b6:99:04:17:2b:08:70:12:7a:4c:83:34:4d:87:
09:20:3f:d1:cc:90:78:11:23:e0:e8:47:aa:e0:45:
f9:06:9e:03:92:35:06:fe:ae:99:49:30:b3:07:d5:
59:fb:fa:28:6b:ba:12:c4:52:b2:b5:a7:c7:84:5c:
89:80:b6:cc:eb:68:3e:b2:12:05:6d:c4:67:a8:5d:
58:6b:23:bb:da:fb:a9:9e:07:2b:f3:92:4d:9e:7d:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:1E:17:4A:EB:CC:6B:8E:6E:A8:F6:EB:0E:8D:BC:A2:B1:01:30
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a7:7d:17:2d:4e:53:48:ff:8c:62:14:4b:07:32:e9:d2:50:
cb:5e:fb:da:2f:74:eb:df:d9:16:70:02:3c:55:0c:bb:94:4a:
1a:c7:a3:8e:b1:52:29:25:17:06:b3:da:10:5e:4e:92:ad:f0:
ed:65:ee:53:d1:ad:3e:ce:7b:c0:e5:d8:db:a4:a4:e9:cd:67:
3c:dc:bf:9a:f6:a9:4f:ab:a4:07:e3:00:d7:6b:72:71:5b:f6:
c4:c7:47:79:20:43:61:30:67:77:6c:8e:f2:c9:e1:1d:be:39:
55:c2:b5:48:d3:54:f8:cf:5b:b6:26:27:6e:94:24:b1:6b:17:
0e:31:59:62:a1:01:16:fd:13:64:d1:7c:57:b3:2f:87:46:b9:
06:47:c1:5f:5e:bc:44:01:15:a5:6a:23:d7:7e:e8:c1:4d:67:
bb:a0:02:18:3c:43:96:d7:23:12:05:03:36:b1:ff:fc:23:fd:
00:7a:8f:b8:fd:db:3b:cd:36:1e:11:32:54:a3:99:18:3c:a1:
0f:7e:38:29:9b:f5:c2:ed:c6:48:a1:5c:4b:1f:e6:28:5c:3b:
1c:bb:de:72:4d:9d:e9:79:cb:25:7b:c5:84:e3:b2:19:69:47:
fc:0c:10:a6:03:8c:73:a2:05:79:38:88:b4:53:33:ca:23:3a:
59:af:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:04 2026 by rpki-client