Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: fc2+FBVUoUTAYDjjFgTmYXXKUhY31slsv0BovumgGd0=
Subject key identifier: 90:93:1B:46:36:B9:37:A8:AA:F7:3F:22:3B:93:3D:64:8E:54:60:26
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 019CFA991803DB5421D648794A8792F256D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 1847
Signing time: Tue 17 Mar 2026 07:01:03 +0000
Manifest this update: Tue 17 Mar 2026 07:01:03 +0000
Manifest next update: Wed 18 Mar 2026 07:01:03 +0000
Files and hashes: 1: 7S2s5NvMEWjMmdP4tHVPuR44TrM.roa (hash: tQYbzfuvYbUtsAHpJGcR8MOd0wYit8Udr+nLe5FW+kY=)
2: N_rd1-iO2Zco7czWxcygCkfPMco.roa (hash: fNgSQr1pcqvcbsbdFSVdiphe05QVeyRTAnd6yBvX/h0=)
3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: UQqxuIAemdrZr79PK8IQ0lN40K1KCgxHyrs8SPup3uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:99:18:03:db:54:21:d6:48:79:4a:87:92:f2:56:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Mar 17 07:01:03 2026 GMT
Not After : Mar 18 07:01:03 2026 GMT
Subject: CN=90931b4636b937a8aaf73f223b933d648e546026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8f:b5:57:39:02:38:54:57:81:59:0c:98:97:
1f:e9:db:8e:d8:51:dd:e7:ee:e3:8c:bc:de:e8:2f:
4a:1e:08:78:c7:37:d7:a3:ab:61:5b:1f:67:72:08:
cf:0d:ad:64:36:b5:1b:6d:85:2d:47:7d:d2:8d:f8:
47:4b:79:44:27:db:0a:e9:75:ed:93:77:a7:98:2e:
c0:a0:56:c1:e2:dc:4a:28:83:d5:43:da:32:c1:a2:
7f:a2:80:31:ac:c7:55:4c:76:c5:cd:c5:23:db:17:
61:4a:6a:04:f3:61:4d:8f:14:4d:3a:09:43:d6:81:
17:b8:b8:02:4d:c5:6a:0a:33:78:2e:ef:2f:96:f9:
2b:a0:db:a8:f0:92:9b:f7:f5:cd:cf:b2:dc:5a:7c:
c4:b7:0e:3a:bc:98:b7:c5:73:9b:64:fa:ba:b6:30:
0d:31:7d:50:1f:7e:66:1b:fe:e8:68:3e:92:60:27:
60:a2:21:7f:09:71:c9:fc:96:0d:20:62:f5:00:62:
4e:4b:2f:6b:4c:b2:e9:73:1c:31:e1:88:90:50:ed:
55:49:98:cd:42:76:f1:21:3f:2d:a8:22:7c:2b:13:
c9:43:ed:fe:5c:47:d4:0c:27:df:f9:dc:19:51:66:
a2:ec:e1:b2:a9:30:5d:74:80:25:1e:0a:4a:42:55:
75:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:1B:46:36:B9:37:A8:AA:F7:3F:22:3B:93:3D:64:8E:54:60:26
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c5:14:69:57:33:6f:77:13:92:32:31:af:6a:3a:a4:3e:51:
ea:bd:8f:d7:b1:1d:3e:dc:fc:1b:3d:a7:fa:8e:69:d0:fb:62:
81:9e:39:94:50:51:ca:03:70:9b:70:59:6c:4c:2d:f3:f5:c0:
57:fa:7f:44:f9:a9:21:a1:3b:0a:87:9c:3c:c3:39:15:27:bf:
6d:3e:05:ad:21:65:46:a1:4c:27:35:01:c9:34:08:69:58:49:
4d:01:95:b1:5b:8f:48:c7:5d:84:83:ed:c5:85:08:3e:95:df:
6f:6c:c6:46:cf:4f:2b:8b:c0:e9:c5:bc:c0:23:f2:b2:e5:8a:
4a:59:df:b7:ea:d5:80:8a:b6:33:06:ae:52:b9:5c:55:d0:5f:
4a:68:ea:34:d2:0b:82:a1:d6:25:26:01:6f:47:57:fc:4a:58:
dc:ef:ba:a6:b7:d4:4b:b5:4a:6c:00:28:80:21:4a:74:ce:d0:
f7:b7:6d:83:2e:c0:dc:d0:9c:d9:91:ee:7a:5d:fd:ff:2a:2d:
b8:7a:e7:4a:10:13:ec:ce:6f:0a:d6:d7:35:93:2c:f5:51:cc:
47:65:b3:08:22:5e:28:71:9a:81:42:d6:42:a0:b0:3f:9b:c4:
19:1c:65:68:91:10:03:b6:9e:46:44:54:ff:f5:b2:9b:53:2c:
1a:fe:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 12:19:52 2026 by rpki-client