Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: ZdmlBAjOGBIRf5Gcmd1bWjZGBGcJyCFFVnUnTbF5MMo=
Subject key identifier: 76:A9:03:68:48:D1:9F:16:90:5F:6D:94:4F:68:AE:4C:3D:45:2A:8C
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 019DCCE200024C52AC8E911C76DACE774DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0D4D
Signing time: Mon 27 Apr 2026 03:00:56 +0000
Manifest this update: Mon 27 Apr 2026 03:00:56 +0000
Manifest next update: Tue 28 Apr 2026 03:00:56 +0000
Files and hashes: 1: WDfbjRg4ihOKTvhRrJJRD1g3RiM.roa (hash: 27A9TuMLCLsH9w3Xm8KR6AJ2CdSs60GHyEW7+A7yzkw=)
2: bSGb5uF02tbOjdrSh1bjtNrJjuE.roa (hash: lAwN6vNzBd4ncK3Tu/ntqZQQliwHghfg9YdSXdgwSxM=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: STk86DYU0W0Fv0eUbIMvSxJw0cBRH+HhzhAwFXgC8gk=)
4: xEtH3nZkjZP1cHLTfmkxzgvLsMU.roa (hash: BGUb3g3pcbUOTctA2o1s832xh1EgHk8oxohuvzvEQok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e2:00:02:4c:52:ac:8e:91:1c:76:da:ce:77:4d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Apr 27 03:00:56 2026 GMT
Not After : Apr 28 03:00:56 2026 GMT
Subject: CN=76a9036848d19f16905f6d944f68ae4c3d452a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:65:b9:3f:f0:d5:d4:49:69:c5:cc:4d:31:
9b:73:bb:b1:7a:0c:73:f8:05:a6:34:98:ae:f3:b9:
b6:98:6b:b1:f4:ed:e8:de:94:e3:e5:16:9e:6b:9f:
7d:dd:66:24:59:98:a1:53:79:eb:38:5d:3b:b3:0e:
4a:ba:ac:04:48:22:0f:8c:19:89:7c:91:3a:fc:4b:
bd:f4:f6:e6:6f:c6:eb:84:16:07:60:70:2d:40:a5:
99:2e:a8:47:21:a3:71:a5:c6:a6:19:8a:eb:f1:c1:
54:53:b8:56:fb:38:67:43:8e:cc:68:94:52:c7:d2:
1f:33:a1:cc:d4:69:b4:38:03:bd:66:b3:59:27:c6:
3a:d5:c9:4a:6e:eb:4e:57:eb:67:74:1b:30:bd:c0:
38:94:02:6c:03:d6:8c:b8:35:ad:32:2d:29:ad:e0:
57:a4:09:0c:4a:af:88:b2:40:7b:e8:eb:64:c0:7c:
3e:65:e1:81:b7:d3:49:d9:fa:66:04:ae:ae:90:14:
bd:85:b9:d9:f4:25:97:dd:ba:34:96:af:f9:f9:0c:
26:15:cb:6b:fd:fb:3b:54:4e:82:ff:e0:18:9a:7b:
da:6f:95:af:42:52:b6:3f:39:74:f1:86:95:64:0b:
e4:d4:0b:65:7e:fc:06:3c:18:8c:47:f7:7a:4b:ab:
aa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A9:03:68:48:D1:9F:16:90:5F:6D:94:4F:68:AE:4C:3D:45:2A:8C
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6b:24:78:5d:e7:99:90:1f:f1:60:55:96:9d:e8:cf:83:dc:
60:60:2b:47:d1:e9:79:1f:f9:fd:7a:82:4f:c5:a1:90:44:56:
a4:34:dd:39:ec:a0:05:65:c7:35:c3:ea:1f:19:5f:12:c9:ae:
e6:22:5c:2f:19:2c:94:98:7a:3e:93:ec:b9:71:1a:a0:9d:ff:
dd:d6:c8:24:32:68:26:b6:69:4c:43:92:77:c4:a4:e9:2c:47:
08:78:2a:cf:6e:96:13:ee:19:9b:86:64:31:6a:58:4a:ae:49:
ff:c9:13:1b:0c:8c:4c:0e:12:df:e3:a3:1a:00:0d:b9:a3:67:
c7:5a:82:55:86:9b:b7:ed:0a:d2:0f:da:4f:ae:28:ba:35:89:
59:17:1f:99:d3:20:cb:dd:3d:77:d7:9f:f4:4f:2c:5c:47:51:
34:64:61:c1:19:c3:5c:58:2e:52:aa:37:98:aa:a3:fb:fc:cf:
6a:1c:5d:20:b4:be:e1:d7:49:3d:94:1a:44:b5:91:fa:bb:e1:
f5:eb:09:d6:59:4c:58:90:aa:a6:62:82:67:86:6f:e5:00:f2:
03:e1:70:77:6d:ac:85:56:29:22:de:5b:11:3d:d8:00:74:90:
e8:91:49:b7:63:c6:48:5c:e5:08:96:51:cb:93:65:f8:03:0b:
4e:41:12:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:56:02 2026 by rpki-client