Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
File: fhN6p6PGSUQ0z09AqLSOz8Agye8.mft (raw, json)
Hash identifier: fSw8GfWZSI9e96zKpvgYYhSJSQGKpDOrMLWb1rl12OQ=
Subject key identifier: 9A:27:3C:5D:7F:30:57:83:C5:98:7D:3B:0F:11:A4:3C:C6:CB:CD:21
Authority key identifier: 7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
Certificate issuer: /CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Certificate serial: 019D38D2F25A580BDC597C78AA834AD5A942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
Manifest number: 0277
Signing time: Sun 29 Mar 2026 09:00:41 +0000
Manifest this update: Sun 29 Mar 2026 09:00:41 +0000
Manifest next update: Mon 30 Mar 2026 09:00:41 +0000
Files and hashes: 1: 9Srvn7WkPvAkxmGJNBo0PeKuqeE.roa (hash: 4/kn8//kMdNf7GsYCYVFUpw6FQ06SMpgTw2lQ8uxiZY=)
2: fhN6p6PGSUQ0z09AqLSOz8Agye8.crl (hash: 4Y64VDdED4sQckI21fsdVDiVnEg7oHTesVlKNOVsH50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f2:5a:58:0b:dc:59:7c:78:aa:83:4a:d5:a9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e137aa7a3c6494434cf4f40a8b48ecfc020c9ef
Validity
Not Before: Mar 29 09:00:41 2026 GMT
Not After : Mar 30 09:00:41 2026 GMT
Subject: CN=9a273c5d7f305783c5987d3b0f11a43cc6cbcd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:e4:4e:2d:11:80:58:bd:fc:c9:28:a7:20:
f1:d6:76:eb:49:09:f3:f2:5c:70:6d:ab:14:79:23:
0e:d0:06:e5:5d:44:f5:2c:a9:38:3b:7c:ea:30:88:
41:eb:e0:34:14:51:01:e7:4f:3e:09:bf:af:ab:0a:
d5:95:d2:48:51:56:48:73:df:3e:c1:46:ec:b3:34:
9d:b0:81:f7:04:52:b7:d3:30:63:17:f9:3a:0f:4c:
b4:30:50:14:c8:c4:b5:49:23:b9:54:6c:de:4d:3b:
92:09:57:7e:6a:60:83:8b:8e:8e:4d:da:9c:b7:18:
66:31:e0:3c:d8:64:33:60:26:71:64:e3:e8:e6:ec:
27:71:c3:a2:b4:99:02:72:70:5d:64:11:2c:a8:54:
47:c8:58:43:29:3a:35:82:4e:8b:a2:f3:80:c8:81:
c3:9e:de:02:ee:35:35:d1:33:5a:5e:e8:67:3b:f5:
7a:1b:f2:3f:77:c5:1e:d4:5e:69:a3:d8:f7:c7:27:
dc:b4:1a:69:22:8f:12:c2:a2:68:5d:7f:82:5c:ed:
e6:c5:27:82:fc:5a:8c:53:d5:1f:f8:64:ce:d8:58:
f6:fc:94:c9:95:59:88:c3:a4:bf:ba:b6:c5:21:a1:
9d:fe:93:aa:18:6a:be:b6:ab:bd:5b:86:b4:c6:2f:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:27:3C:5D:7F:30:57:83:C5:98:7D:3B:0F:11:A4:3C:C6:CB:CD:21
X509v3 Authority Key Identifier:
keyid:7E:13:7A:A7:A3:C6:49:44:34:CF:4F:40:A8:B4:8E:CF:C0:20:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhN6p6PGSUQ0z09AqLSOz8Agye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2f4a41-9f30-428e-acff-3363df0395c1/1/fhN6p6PGSUQ0z09AqLSOz8Agye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cc:c2:9a:a8:f5:84:e1:43:e9:35:ad:6b:ad:95:ce:2e:99:
0e:34:df:15:8a:4d:92:ac:a8:cc:6a:b3:b4:e2:43:a0:c7:8f:
0e:b9:3f:19:69:ca:f4:5d:70:f5:92:1c:fd:75:34:8b:36:5a:
70:52:06:c1:c4:1e:67:da:86:03:b5:8c:ec:3b:3d:0c:4e:65:
4b:8c:12:36:2b:f2:4d:75:98:48:17:6d:50:c7:bc:c3:f4:65:
5e:e5:7c:e6:05:2d:56:7a:2c:b0:1d:0a:48:e4:ca:15:15:5e:
8e:63:89:84:c4:72:ef:04:58:e4:ec:56:2e:8a:1d:e5:30:71:
87:2f:44:06:7e:8a:02:19:c8:07:fc:05:e7:0a:e3:9e:47:80:
c3:f2:ff:7e:a4:a8:f5:3c:03:88:55:b2:98:92:a0:9a:78:8f:
5f:a9:cf:80:96:b6:73:d3:cb:8f:26:75:e7:d9:a4:f1:4b:36:
62:93:fc:b2:24:a7:2c:b1:0e:ad:cf:90:df:4e:a5:55:03:74:
82:5e:85:21:5b:50:2e:37:55:96:f3:fd:8d:fa:68:5b:bd:34:
55:21:d6:95:67:a7:46:13:f5:03:c4:2b:5c:6e:3a:74:7e:45:
92:fb:36:35:ee:46:77:79:16:4b:7a:54:84:f9:f5:42:72:3b:
27:d3:5b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:15 2026 by rpki-client