Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: cr2wApD9DMKotOq/Z3Lfq8mCSDHLAB/QL3M8QjhBqrM=
Subject key identifier: 29:38:11:8A:13:5F:34:E8:AE:9B:13:78:71:C6:3C:66:DD:B0:77:32
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 019D382E3A139001DA8F4FFE4689DB51DD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: F9K0hFQXxtbhSJLkCfsnizzHs0s.roa (hash: KFw62b/4AeJuATgKU0557hosLMq4NoClO0EkpuHlym8=)
2: H4bKxOh-hy6T67ooqNK2-ku15B8.roa (hash: 3bzS3/bPOoZXps3p17llktHkmheeXpLyUJCVejVIYgE=)
3: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: YZKNHoV0TTCx+cHtv1N15qNrK93+Cq7XxFjwbOhhTc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3a:13:90:01:da:8f:4f:fe:46:89:db:51:dd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=2938118a135f34e8ae9b137871c63c66ddb07732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:eb:fc:b2:fd:59:72:95:93:6c:1b:71:b5:
35:54:c3:8b:33:3f:97:e8:ca:bf:53:3a:99:d6:83:
19:78:70:1f:c4:59:c4:48:6b:bb:f5:a4:9c:e6:24:
26:38:c9:7f:76:56:9c:88:be:63:42:e2:89:75:b1:
82:fb:e3:dc:4a:e3:89:ad:98:a2:7f:0c:0b:65:1b:
34:28:09:48:1a:9d:2c:ba:63:94:52:65:86:02:f3:
59:3c:8a:4a:20:82:db:af:07:d6:76:53:23:ce:c5:
73:8f:ff:ed:e9:02:9c:bb:7a:3a:44:d9:37:2c:04:
6c:2d:da:1c:49:40:9c:be:0c:58:ad:a3:35:42:b1:
14:d1:50:0c:90:23:67:a8:80:19:a4:92:b7:e4:85:
6d:da:77:3a:57:89:5e:58:ea:d3:4a:51:c4:d1:0e:
c7:52:8a:25:29:ea:4a:3c:ab:d4:e3:d6:a9:c2:da:
7f:08:f6:15:dc:81:62:a6:b5:14:7a:b1:c1:5c:bc:
4c:5e:94:c0:4d:01:a4:34:66:c9:2d:52:d6:2f:b3:
5d:1b:0b:6b:1d:2d:d5:f2:ef:40:be:f5:0b:db:07:
f5:cb:52:bf:28:7c:84:43:39:30:80:34:9f:a8:9a:
0b:1f:28:b1:30:b6:e6:6e:81:d7:21:d2:f1:c9:12:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:38:11:8A:13:5F:34:E8:AE:9B:13:78:71:C6:3C:66:DD:B0:77:32
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:10:63:17:97:af:de:b8:84:ea:f9:0f:e3:96:b7:a7:d5:54:
78:b5:8f:62:84:dd:80:4a:1e:99:bf:79:03:e1:ab:b4:a8:65:
46:25:8e:cb:5d:4a:80:51:5c:f2:dd:37:64:0c:9d:f3:07:26:
94:b9:91:ef:88:20:96:b9:f5:19:f1:60:b5:f1:b1:be:b9:62:
71:ee:2c:dd:77:22:c8:80:ac:cd:cd:0b:09:f6:09:00:d2:59:
d3:7b:6e:46:90:58:b2:51:83:4a:6c:2c:bc:a8:a5:d9:f9:3d:
fa:26:d4:9f:d4:39:76:83:91:db:f3:9b:9b:6a:76:3d:80:47:
55:48:69:85:3c:50:e9:b6:b2:4e:4c:b7:2f:28:b8:fa:63:70:
96:6f:cb:3d:e8:8f:65:5a:b1:b3:6e:f5:eb:70:fd:8b:6b:fe:
2b:03:4e:cb:99:ae:93:25:ed:63:1c:68:1f:ae:f8:94:fe:a1:
7f:49:53:91:a5:03:7d:5a:8f:f4:2d:4c:46:70:bd:ca:02:40:
3c:e8:c2:46:e3:a4:06:e2:1e:d2:e1:e0:75:07:5e:8a:75:8e:
b0:69:e9:3d:b7:dd:dc:c6:64:b2:87:0b:c4:0a:ed:b4:34:c6:
1f:19:40:38:54:e7:74:62:7c:10:57:66:24:79:00:18:6c:3d:
34:ce:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:33 2026 by rpki-client