Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: HLsFW1wy1I4ZN59hPdg1SMo+xWTaexoMg/HYZh5OmHI=
Subject key identifier: 83:A0:90:2E:8C:34:37:7B:7B:C7:95:5F:BF:70:17:88:9F:0B:A3:3A
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 019CE712A11D7EF5E09650B463B225B9B39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 0811
Signing time: Fri 13 Mar 2026 12:01:23 +0000
Manifest this update: Fri 13 Mar 2026 12:01:23 +0000
Manifest next update: Sat 14 Mar 2026 12:01:23 +0000
Files and hashes: 1: 7oxbulzY2boNaAxovnlWeEdnhvk.roa (hash: uX0ykLCKBF2SBolWYgvfJLXxPgVn9j68zHuR3GSzDLo=)
2: ImYdN1r7SuqmH4KCOghmFfGT43A.roa (hash: C3iHTDptRbcDAgsUC9QRyc1MkBmaJjNlKZ93XUJOKLw=)
3: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: cIukfVvGM0Lv5bI/U5VaC78GUZVMQ7skA3mV1yeijBU=)
4: mmK4BcjEIajvATTw8BCsnASXF-E.roa (hash: n3pCENYT8mZdK4x4Xmug43GNcd+EWFtMNaK1ThGL1zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:a1:1d:7e:f5:e0:96:50:b4:63:b2:25:b9:b3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Mar 13 12:01:23 2026 GMT
Not After : Mar 14 12:01:23 2026 GMT
Subject: CN=83a0902e8c34377b7bc7955fbf7017889f0ba33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:a5:3d:b3:90:ac:11:89:05:54:ad:dd:62:
83:a4:e0:a3:ed:c0:72:f8:bd:06:b0:ff:b3:10:b3:
dc:38:f7:2d:94:20:19:02:0b:c4:88:ae:14:d0:1c:
be:99:3d:fd:cf:e6:4f:43:16:b3:71:df:e2:f3:dd:
28:ee:3b:4e:7f:13:49:34:e4:bb:5d:f8:8d:21:d8:
0d:3b:e8:ab:18:e9:03:1c:c8:35:2a:47:a0:3a:74:
12:35:ec:86:ab:bf:e4:a0:08:ac:49:9b:5a:3d:78:
d7:ef:83:d5:e3:22:69:bf:83:d3:49:c2:41:f5:87:
a9:96:1b:53:74:c2:78:4a:7c:8c:21:75:df:35:fd:
17:b1:41:07:ef:d8:74:3a:c6:79:e7:59:f1:9c:11:
08:f1:45:61:e0:09:92:62:27:6e:97:1a:61:d2:c0:
90:66:d1:be:df:65:d9:21:09:46:90:fb:eb:02:29:
5e:07:3b:d7:db:bc:76:c7:f2:4d:fd:c3:f2:2d:9d:
86:b6:60:df:e6:01:97:b0:6b:f3:df:54:62:0b:c4:
60:ee:72:c5:3f:e1:07:bf:ae:be:e5:4f:ad:ef:d5:
bb:6b:0c:ee:96:08:b8:b3:02:2f:b3:52:35:73:b1:
01:95:73:78:fa:5f:66:41:8e:61:59:2a:29:cf:8f:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A0:90:2E:8C:34:37:7B:7B:C7:95:5F:BF:70:17:88:9F:0B:A3:3A
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3d:4e:d4:88:24:fe:9e:84:4c:8a:19:a5:51:06:c0:1d:31:
bf:42:49:64:13:5b:ff:e9:21:06:3d:b7:c0:3b:1f:5c:a6:a8:
1d:8d:9d:53:c3:f1:dd:27:8c:c1:7f:c6:55:cc:7b:a1:0a:ea:
7c:6f:e5:b7:76:ed:4b:9b:b6:e3:2f:be:a9:78:52:1a:3a:0e:
f6:ac:34:d6:52:56:4a:ed:96:33:ea:41:a1:20:93:b7:74:39:
b6:3f:c5:81:7c:3b:d4:2b:4b:0c:f4:1b:56:bf:d7:05:15:7d:
75:a9:05:e9:f1:19:39:b7:b4:67:af:45:44:e4:df:cd:96:c4:
17:4b:76:86:8e:fd:25:f4:f1:a2:10:c0:31:85:6b:d2:fc:e5:
61:42:d2:7c:40:f5:ff:4c:f9:c5:96:c4:da:ca:c2:15:80:9a:
ef:10:77:e4:61:0d:f4:f6:a4:dc:cf:a1:99:82:f6:34:cb:57:
83:07:e8:14:87:ec:8c:5f:ba:96:b4:54:35:b2:41:24:5d:e7:
e0:14:c5:f2:3f:20:ad:3a:79:37:0d:b7:f2:50:ba:34:92:33:
69:ca:bf:d5:e5:66:b9:10:6d:c4:08:5b:9f:b1:52:40:43:50:
25:29:1d:84:8c:19:cc:5a:df:08:96:24:d3:26:30:f3:1a:a1:
fe:99:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:31:28 2026 by rpki-client