Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File: fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier: lfwUhvT48L83KSamW3EIDGLisJL4ZC2VsXAWgaJiivk=
Subject key identifier: A2:D2:07:00:5D:16:30:21:18:EC:F9:F4:68:B1:BA:95:78:23:C1:67
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 019D37521907138314415594BD815028A42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number: 0834
Signing time: Sun 29 Mar 2026 02:00:20 +0000
Manifest this update: Sun 29 Mar 2026 02:00:20 +0000
Manifest next update: Mon 30 Mar 2026 02:00:20 +0000
Files and hashes: 1: Xip4xkGmyDCpD1V1TAhyG7oBSoo.roa (hash: JS7Y9TGnxDiomHGfAPVHy5QyfD9ZOLvpsEHgj2zFlNg=)
2: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: ZqP0mWagafIFVK5wHfRQRRmIcYFuO0b1T7TMvYfSu/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:19:07:13:83:14:41:55:94:bd:81:50:28:a4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: Mar 29 02:00:20 2026 GMT
Not After : Mar 30 02:00:20 2026 GMT
Subject: CN=a2d207005d16302118ecf9f468b1ba957823c167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:8b:05:9f:d9:54:da:a6:ec:e0:be:52:c2:
5c:72:ba:0b:57:03:22:d5:92:59:af:55:cc:4e:c9:
a9:c5:12:e4:2f:c4:4e:b0:46:df:db:85:60:05:12:
c1:1d:a4:e2:24:39:6c:72:0c:00:09:79:9e:23:19:
0f:28:a4:9f:b5:49:da:c8:bc:b9:88:96:65:a7:70:
40:1d:0a:a9:de:07:c4:ee:23:9b:e0:1b:03:cd:9c:
34:24:2d:96:77:8f:06:2b:fd:3f:fe:e7:d2:ca:4d:
9e:2b:39:ca:48:b7:90:75:21:0e:8a:bf:60:b7:6f:
55:9e:be:e0:cc:ba:ef:7b:32:19:a0:90:b4:1c:ff:
14:97:cf:a7:a9:64:5f:58:d0:c6:f9:8d:98:44:c3:
3c:af:e6:1e:14:80:98:bb:f7:f8:18:c4:a4:30:28:
82:1e:6d:1d:3e:5a:be:97:ce:83:1a:d4:fb:5c:0a:
0b:b0:8f:00:17:1f:b5:c9:a6:0d:93:a9:67:e4:e0:
3c:2c:7d:e0:5b:c7:fc:c0:1f:bf:7c:91:68:79:5d:
dc:65:c9:a7:4f:20:96:7a:b1:a4:f8:5f:5a:8d:6a:
52:9b:4c:a0:85:f5:6d:ec:2d:64:a8:a0:61:f7:ce:
4f:19:ae:fa:9b:4b:38:c3:28:b5:ab:e4:71:05:6d:
82:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D2:07:00:5D:16:30:21:18:EC:F9:F4:68:B1:BA:95:78:23:C1:67
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:06:af:b6:60:57:57:d1:06:2c:ff:b5:84:58:79:fd:83:d9:
c6:10:af:30:df:d1:95:6f:bc:05:98:f6:5d:40:84:8e:e4:40:
dd:2c:a0:a7:31:d7:b7:72:a9:2c:70:fa:37:22:4d:ff:fd:a8:
54:5e:50:35:f6:55:8e:ae:29:da:3b:82:19:ed:44:91:7e:d7:
a1:dc:14:c0:2a:b1:9e:3e:90:81:c1:33:ff:c9:35:7e:08:a8:
b7:5c:a6:10:6f:fe:c1:f3:29:01:7d:51:ec:81:64:9a:ea:a0:
8e:a0:33:bd:cc:a5:f8:3a:20:c0:65:e7:9c:7f:bc:6b:fb:40:
2b:fe:6f:1d:38:d2:e0:8a:ff:85:ef:78:8b:91:eb:b5:2a:32:
b8:b6:1a:c7:8f:02:90:32:12:3d:48:9a:05:db:d0:74:06:53:
8f:dc:0b:23:27:c4:07:9c:f1:60:c5:bc:a1:c1:2f:f1:94:0d:
40:51:2a:21:5e:14:49:63:1a:b2:7d:02:ef:fe:dc:52:78:05:
1a:5c:34:9b:a4:22:df:d1:55:ec:b8:b1:00:90:67:6f:0a:7c:
21:55:3c:5c:96:1f:2e:88:39:4c:b6:ff:71:90:b5:e3:86:2e:
21:b4:e0:22:fc:24:77:cd:f0:04:b9:58:14:25:4b:90:f4:1a:
28:1d:eb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:49 2026 by rpki-client