Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json)
Hash identifier: +5rGSCxU/wEtN4U1PbbPj/TxdqjfVKTREizUJyftuoM=
Subject key identifier: 0B:8E:03:39:00:62:B0:3E:2D:5B:E9:91:06:BE:F2:37:A1:54:E9:1F
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial: 019D3940ECA010487391C375BB4288331BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
Manifest number: 0F4B
Signing time: Sun 29 Mar 2026 11:00:49 +0000
Manifest this update: Sun 29 Mar 2026 11:00:49 +0000
Manifest next update: Mon 30 Mar 2026 11:00:49 +0000
Files and hashes: 1: LVBBw3kbDfM8QLo8U8FpkgZWBKY.roa (hash: 3JSgEpOjV3VwZSuSqrVrhNnp29HLqalajVpqLvd8t0Q=)
2: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: wCb7NhXVPBJWAuHN1fbxjFFEHJWCFosmNLnAe435eyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ec:a0:10:48:73:91:c3:75:bb:42:88:33:1b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Validity
Not Before: Mar 29 11:00:49 2026 GMT
Not After : Mar 30 11:00:49 2026 GMT
Subject: CN=0b8e03390062b03e2d5be99106bef237a154e91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:a2:c3:66:58:fd:55:76:1b:e3:90:d0:22:
c9:a6:ca:29:97:82:1d:9b:1d:16:4e:4b:6c:66:26:
02:03:bb:46:b0:fb:f0:27:f4:f2:61:24:74:b5:63:
4d:b5:96:8a:42:47:92:01:f8:19:ef:86:ae:04:1d:
6b:a3:36:0d:71:be:a3:87:eb:da:d3:6c:b9:b9:16:
9d:68:a6:41:11:ab:b2:70:c0:92:37:ae:54:ed:7a:
ae:61:b7:8d:66:0c:43:99:4d:26:63:c5:fa:37:f9:
48:38:ad:f4:92:ea:bd:2e:39:2d:e2:b7:b0:7f:12:
7a:30:c1:83:8a:01:55:81:51:57:74:21:b4:f9:44:
4e:28:a0:f7:c9:e0:0a:dd:24:e4:92:a8:f7:2c:86:
d9:a3:96:f6:a1:8d:c3:74:e8:84:3f:59:06:59:a5:
cc:94:e2:e2:16:37:1c:54:36:d4:2d:20:45:57:e2:
9b:62:49:0a:37:f1:57:e5:ed:c9:6f:4f:78:48:ec:
9b:b3:52:e4:35:8a:bb:9d:0d:6e:92:a7:6b:e9:01:
29:0f:06:7a:31:ee:1e:b1:eb:97:c3:ab:d8:31:5f:
e3:a3:18:13:20:07:a0:ba:61:e6:44:dc:9f:03:bf:
bd:53:60:6f:db:6b:c8:69:24:f8:ae:94:e4:e1:53:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8E:03:39:00:62:B0:3E:2D:5B:E9:91:06:BE:F2:37:A1:54:E9:1F
X509v3 Authority Key Identifier:
keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d1:5c:02:a7:9a:7f:2d:d4:4e:e2:37:6c:8c:25:f6:15:02:
05:4c:b6:78:a8:97:4d:7c:93:e5:6c:51:93:09:30:29:ee:2e:
46:6f:dc:41:a6:6b:87:cf:ce:7f:35:02:6d:03:a7:50:fd:8a:
ad:59:c4:7b:10:3f:e0:75:e8:04:42:1f:07:c0:c2:6e:2e:ff:
6c:da:a1:d3:c4:a8:8e:d2:76:46:33:f7:a0:f0:56:00:6c:2d:
96:b1:12:75:28:6d:c0:30:b8:72:f1:a0:ac:8f:b1:00:cf:f1:
5e:9c:47:7c:b0:61:5a:d4:25:c1:fa:1d:d5:a3:7c:87:00:47:
88:3b:bb:60:cd:81:52:82:c4:7f:b3:12:8d:57:de:0f:94:59:
65:71:30:9f:47:fa:da:c9:df:ef:f4:f0:8a:36:b9:a4:ae:7e:
e4:45:70:26:1b:51:b7:4a:14:6f:28:59:48:a4:50:e9:47:13:
be:e7:78:4a:0c:a4:28:1a:01:24:23:bc:8d:7c:86:71:6f:ac:
a9:97:26:5e:a4:7b:b5:64:8d:d7:ec:86:a6:fb:72:ab:77:6f:
70:45:ec:57:39:4b:43:9f:04:41:9a:ce:90:eb:1d:39:25:55:
48:d6:e7:f9:9b:fe:fa:33:f3:68:e4:32:48:74:6c:8e:86:7d:
46:a5:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:15 2026 by rpki-client