Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
File: fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft (raw, json)
Hash identifier: Lk5VYDfgl48/bo+dXy9JlhF2NU0yNsYdKhj2wL9/qrs=
Subject key identifier: 52:C3:CD:40:03:0A:42:30:C5:B3:79:E0:B5:F5:96:10:EA:A0:56:41
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 019CBEF1AA2825C2FDD7171CC4609564EC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
Manifest number: 0643
Signing time: Thu 05 Mar 2026 17:00:34 +0000
Manifest this update: Thu 05 Mar 2026 17:00:34 +0000
Manifest next update: Fri 06 Mar 2026 17:00:34 +0000
Files and hashes: 1: KfWydckPfiqGOF337NlzjDPQl00.roa (hash: 4ha/Pfwft4tserJ5wBf8nDoQ8MRbjhW1BTAI762DC0o=)
2: T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa (hash: yBrzfuoQ7PjM0FJTl5FcbusQvv4aZ8BnPQEBmHRMImE=)
3: fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl (hash: O9V9p38KttvYFVbp2P2/0IhNtJZKg2HPegAx1QrAPnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:f1:aa:28:25:c2:fd:d7:17:1c:c4:60:95:64:ec:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Mar 5 17:00:34 2026 GMT
Not After : Mar 6 17:00:34 2026 GMT
Subject: CN=52c3cd40030a4230c5b379e0b5f59610eaa05641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:4d:a5:12:69:03:31:c6:0b:04:72:6d:43:
d1:98:be:8d:7c:1c:5d:86:5d:76:49:3f:f4:af:62:
f7:d8:41:c8:2e:2d:b8:a6:ab:60:ee:7b:0f:8d:ab:
64:6f:80:c4:92:79:cf:9d:4b:65:a6:7a:c5:7f:3a:
81:77:e5:ef:14:10:7c:61:75:f9:94:d3:3a:db:38:
94:46:df:d1:3a:55:5e:8e:eb:85:02:76:ed:b0:d9:
80:a5:34:cd:ad:d2:6e:7f:c8:bf:44:01:c4:e8:69:
a9:13:f1:0d:86:83:53:d5:52:3e:cd:9e:03:31:99:
d6:64:4a:0c:85:ed:e1:32:fd:7d:ed:50:40:4a:cd:
ad:11:7b:6f:33:f4:c3:c5:1a:8e:44:e9:3e:f0:01:
50:6c:ba:46:06:f0:00:dc:c3:00:9a:69:59:91:ab:
ec:9d:25:e7:2a:d4:0b:a4:cb:4d:40:33:b7:41:c4:
82:65:0d:bc:a4:fa:fd:84:b3:fd:b3:b9:b1:3d:8f:
21:ac:e9:99:ca:bf:0c:21:83:80:91:a7:8f:8a:be:
0e:6b:01:89:9c:e8:cf:ba:52:21:1a:38:3f:d2:46:
a6:be:63:ee:d3:94:f5:04:89:3d:53:b1:f1:c9:c5:
66:6d:ed:63:ea:60:9a:b3:cf:96:e1:0a:6d:5f:69:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:CD:40:03:0A:42:30:C5:B3:79:E0:B5:F5:96:10:EA:A0:56:41
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ec:33:72:fb:51:b6:41:eb:d9:74:87:9c:db:12:a5:27:54:
ba:54:c1:c5:a8:31:38:d6:f2:f8:b5:09:af:d2:2b:be:6f:de:
1c:fe:25:ca:85:02:d0:3d:5a:c2:f7:49:c0:c7:2c:f0:64:bd:
c3:3c:71:8b:0a:1e:55:4a:63:b1:c6:2c:e4:0a:fa:46:b3:e1:
f5:77:7b:56:0d:8e:07:f0:80:d9:26:02:a8:93:96:1d:08:60:
02:d4:c7:23:1a:5a:3c:02:61:5b:78:1d:6b:ea:cf:33:1e:b9:
b4:a5:77:82:24:59:96:8c:70:c5:59:f6:5a:3c:84:b5:db:d8:
b4:b8:df:fa:2a:da:a0:c5:fe:52:93:19:e0:5a:ba:93:cf:53:
7f:0d:35:5a:46:c6:5b:49:bb:8a:79:68:22:6b:20:7d:6a:5e:
c4:e5:ba:ba:6f:4b:c6:4a:df:2e:99:f6:88:92:64:de:c7:8f:
33:0c:db:21:72:27:90:d4:0f:df:16:53:96:b3:31:6d:a6:af:
95:ee:14:69:47:cd:b8:f7:59:12:14:13:de:90:af:14:51:7d:
01:df:82:00:05:be:8f:68:fb:0a:9b:66:b4:84:b5:81:9d:c4:
10:6c:3f:84:8b:39:66:a7:03:e6:af:4d:55:d9:e0:32:3d:47:
34:63:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:06:13 2026 by rpki-client