Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: wAVOxO6WDAU4Vta0HG0ttA0DALYhZe6DziMeCmt/RaA=
Subject key identifier: EF:AA:61:B4:79:C5:DC:31:B8:BC:67:56:27:3A:A5:5B:07:06:08:82
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 019DCED09857B94FAB4D6DC073A8D8FD73AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 0889
Signing time: Mon 27 Apr 2026 12:01:10 +0000
Manifest this update: Mon 27 Apr 2026 12:01:10 +0000
Manifest next update: Tue 28 Apr 2026 12:01:10 +0000
Files and hashes: 1: 7oxbulzY2boNaAxovnlWeEdnhvk.roa (hash: uX0ykLCKBF2SBolWYgvfJLXxPgVn9j68zHuR3GSzDLo=)
2: ImYdN1r7SuqmH4KCOghmFfGT43A.roa (hash: C3iHTDptRbcDAgsUC9QRyc1MkBmaJjNlKZ93XUJOKLw=)
3: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: vwTSZVjZSaJluzyMcbGznT9nDHYEjFfWTu/IQn/dp6o=)
4: mmK4BcjEIajvATTw8BCsnASXF-E.roa (hash: n3pCENYT8mZdK4x4Xmug43GNcd+EWFtMNaK1ThGL1zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:98:57:b9:4f:ab:4d:6d:c0:73:a8:d8:fd:73:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Apr 27 12:01:10 2026 GMT
Not After : Apr 28 12:01:10 2026 GMT
Subject: CN=efaa61b479c5dc31b8bc6756273aa55b07060882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:12:74:ce:8d:9c:54:ec:e8:76:ee:c7:3f:
4b:f6:ba:36:8c:fd:80:76:40:4d:fe:7a:fe:54:83:
76:d7:23:27:93:ff:96:8f:af:68:af:bb:bb:65:7a:
2c:e7:df:dc:c2:d7:30:01:47:54:91:84:f2:19:81:
a0:da:e6:40:21:22:95:f2:87:6a:c6:ea:e3:59:9a:
55:23:8e:e7:cb:b5:7f:1e:68:60:22:ac:b0:63:c0:
a3:87:a2:61:51:6a:94:63:15:28:68:b7:ce:d9:68:
04:68:9f:50:b2:63:3e:9c:01:d6:b7:78:15:01:de:
35:a3:f5:67:d3:b1:29:ec:8e:d5:2a:0f:fe:2c:d3:
73:01:99:59:d3:d5:98:a6:a5:0d:78:03:e2:35:83:
0f:5a:ab:4d:e8:e2:4f:91:b1:64:93:7d:12:16:f8:
da:37:fd:62:9e:c8:7a:bb:fe:3c:34:91:a0:8b:33:
2a:60:ac:ed:91:4c:4c:40:0f:7b:7f:ed:3c:4e:ea:
13:e3:fc:ae:b3:fc:ab:1c:fc:e7:29:4e:d7:56:4e:
29:f0:61:0c:fd:d6:19:de:be:dc:bd:62:33:e0:39:
39:ce:e7:f4:94:f6:80:0a:13:1e:a3:d1:d9:4b:9b:
fe:d7:b3:43:b3:38:1f:c8:4e:b6:9a:a5:7d:65:6e:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AA:61:B4:79:C5:DC:31:B8:BC:67:56:27:3A:A5:5B:07:06:08:82
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ce:4d:53:82:af:cf:f9:cf:38:10:3c:9d:d2:03:0f:9d:bf:
24:88:e9:62:29:57:59:27:0e:b8:ad:f4:bf:7a:d5:47:2f:21:
5b:db:ab:f7:f0:9c:2a:e0:8c:7f:5d:1b:d3:d3:b3:3c:9b:ac:
05:9a:73:dd:b9:60:85:ce:60:2b:46:93:7c:b9:45:71:83:d6:
e3:69:3c:7b:68:65:e5:06:e0:8c:98:d7:be:3f:e2:a0:62:2c:
0e:bb:cd:f7:f6:c2:db:7a:9f:87:10:60:f0:73:2e:fb:30:47:
1d:d3:29:5a:27:5e:80:97:2e:62:fb:d3:20:00:e3:dc:33:96:
32:93:81:f1:11:c9:4c:f1:a3:26:95:ec:ff:64:31:d7:8c:67:
93:41:10:44:90:7e:6a:0e:65:24:e1:fe:3d:93:9c:d8:82:8f:
79:94:1b:06:bd:c2:25:43:75:37:35:33:62:cf:50:e2:65:be:
30:dd:b7:52:e1:b8:49:36:2e:22:11:ea:69:06:bd:8a:d5:10:
50:3e:f9:a8:1f:03:ee:7f:6b:f8:d6:08:d7:fb:93:27:76:b8:
a7:da:40:b1:60:8a:d2:64:2c:69:3b:d3:ea:d5:95:f1:5e:e1:
ea:20:cb:b6:fd:21:d8:39:3d:41:01:76:59:be:67:9f:5f:16:
41:db:1a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:09:44 2026 by rpki-client