Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: 0fHRcIbD+urvsLNKHYkjULAmo+LYm/9LLf6+ryuFKMw=
Subject key identifier: 22:A4:37:BF:AB:D4:74:1A:4B:2C:55:70:7F:1B:D0:F8:10:30:86:DE
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 019D37C0DF1038119A74129F58836B3342AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 05A8
Signing time: Sun 29 Mar 2026 04:01:19 +0000
Manifest this update: Sun 29 Mar 2026 04:01:19 +0000
Manifest next update: Mon 30 Mar 2026 04:01:19 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: EY2FeiYNUXLHbgB3KWO+kzujzfU/n6nF2vET1yuAa8Y=)
2: v5j62T31CGbyesihQ2ZxZfpouT0.roa (hash: /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:df:10:38:11:9a:74:12:9f:58:83:6b:33:42:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Mar 29 04:01:19 2026 GMT
Not After : Mar 30 04:01:19 2026 GMT
Subject: CN=22a437bfabd4741a4b2c55707f1bd0f8103086de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:a2:80:09:65:c3:6f:a8:ae:72:e4:e3:9d:
e4:78:2d:8d:c1:da:18:fe:9f:dc:58:1f:c5:94:58:
10:d4:54:26:66:5b:8f:a6:dc:ce:48:ef:27:65:f9:
90:5c:11:f3:c4:d3:ed:43:1e:af:be:3f:04:0b:d5:
fb:fc:5a:68:84:6a:09:4d:e0:ab:98:25:5d:9c:67:
8b:a7:2b:dc:f1:ab:13:1d:1c:a6:cf:ac:3d:14:8b:
c6:53:79:e2:94:1f:38:4d:7d:67:d6:23:3c:67:08:
af:c9:f7:d3:e5:ba:bf:f3:b2:ab:2e:0e:1d:cd:8b:
e1:33:31:48:30:8e:94:31:3d:02:60:12:ea:1f:3d:
61:31:90:fb:11:51:28:44:e8:ab:ce:ab:53:cb:ae:
79:d5:ba:90:42:cd:2e:5d:46:ab:82:21:cc:13:f7:
c6:9c:cb:97:95:17:a6:48:f7:12:32:ec:be:34:97:
04:40:6d:e8:8f:df:e0:f4:79:47:96:db:62:8b:8c:
54:ac:bb:57:9a:8b:46:32:af:2c:ef:ba:30:df:b2:
9d:23:32:55:42:8d:f9:14:c0:50:37:f4:7c:4f:e1:
a3:2a:25:46:f6:6c:a4:4c:37:4b:66:1d:50:36:29:
26:09:3b:64:52:5e:15:61:eb:63:89:32:28:47:5f:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A4:37:BF:AB:D4:74:1A:4B:2C:55:70:7F:1B:D0:F8:10:30:86:DE
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1e:c2:a0:be:dd:c9:73:b5:d5:55:ca:bd:9f:51:68:d0:df:
74:82:69:4e:38:6c:39:24:35:53:73:d6:77:36:ff:4c:f9:dd:
b4:83:1c:10:7c:15:1b:2b:f9:b3:52:64:6f:b4:55:c9:01:d7:
3b:ec:6a:23:de:7a:fc:9a:01:88:48:e3:6a:3f:92:c3:e0:49:
22:33:e7:68:45:80:7a:30:6a:59:64:21:a1:28:e8:46:22:fa:
c4:4b:92:39:dd:45:00:4a:de:86:d4:63:82:c6:18:4d:d3:57:
37:ae:22:58:cd:94:bb:0b:12:75:4b:3c:3b:48:b3:08:cc:09:
41:f0:3f:7e:41:32:1d:a3:e3:a4:98:e0:2a:7c:64:cf:7b:aa:
7a:a9:73:df:42:d5:f2:d8:a2:a1:88:f5:0f:94:d1:78:22:6d:
c0:21:7e:4e:51:dc:f1:03:41:d7:d6:2c:a1:f7:bd:3c:e3:0f:
cf:e6:9c:a6:f6:3e:82:fe:18:44:59:9e:4a:99:d8:10:51:8d:
4c:df:bf:63:5e:e7:44:87:f9:46:7e:3c:4d:71:2f:33:1c:ae:
22:d2:6f:b4:d7:55:1f:e9:2c:81:74:0d:b3:06:b6:c7:d3:19:
fe:38:31:16:31:60:8a:f2:49:e0:b0:e2:be:25:90:0c:19:02:
e7:c2:66:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:49 2026 by rpki-client