Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: Qsa40Kj3xeDGrPq85X2wvTEUxfbf2jqFrD+YrsYTU5E=
Subject key identifier: 89:3E:1A:1C:57:D4:2B:38:E4:C6:92:D8:8A:86:C9:0F:02:1A:57:CC
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 019CE334D9643243713719E99F1B809EEC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0CD4
Signing time: Thu 12 Mar 2026 18:00:17 +0000
Manifest this update: Thu 12 Mar 2026 18:00:17 +0000
Manifest next update: Fri 13 Mar 2026 18:00:17 +0000
Files and hashes: 1: WDfbjRg4ihOKTvhRrJJRD1g3RiM.roa (hash: 27A9TuMLCLsH9w3Xm8KR6AJ2CdSs60GHyEW7+A7yzkw=)
2: bSGb5uF02tbOjdrSh1bjtNrJjuE.roa (hash: lAwN6vNzBd4ncK3Tu/ntqZQQliwHghfg9YdSXdgwSxM=)
3: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: Byy1VGpqStARNskI4+HpWe7dxtlXfgXyuM6+Giyr3Zc=)
4: xEtH3nZkjZP1cHLTfmkxzgvLsMU.roa (hash: BGUb3g3pcbUOTctA2o1s832xh1EgHk8oxohuvzvEQok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:34:d9:64:32:43:71:37:19:e9:9f:1b:80:9e:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Mar 12 18:00:17 2026 GMT
Not After : Mar 13 18:00:17 2026 GMT
Subject: CN=893e1a1c57d42b38e4c692d88a86c90f021a57cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:c9:ed:8c:9e:a1:7d:d1:f6:d0:36:f1:9a:
f9:76:e2:27:92:ae:2a:c5:4f:cb:62:1e:cf:b6:55:
9f:9a:f3:a9:60:0d:6b:4b:46:08:c6:30:0c:1f:9c:
7a:fc:51:e6:fe:0b:1a:fd:fe:45:0f:a1:4b:ea:12:
0f:f5:00:5f:5b:2a:67:ed:72:35:37:f7:c3:00:11:
cf:2b:33:37:93:fc:b5:97:3b:d9:1d:09:35:17:42:
64:b0:96:60:8d:81:a2:f3:3a:ad:c1:72:b5:e7:34:
87:2c:9f:a2:a1:f7:f6:94:86:2e:ff:7d:0c:d2:53:
ee:cc:06:0f:78:14:20:8a:55:5b:26:0f:d9:c9:26:
49:44:44:ec:5b:25:b1:e8:50:24:60:69:12:68:69:
08:39:88:d4:fa:e5:da:dd:1c:ff:fd:3f:c3:22:7d:
5a:36:dc:40:9d:f9:ca:9d:4b:5e:06:78:83:a8:29:
8e:9c:91:b6:a6:4e:3f:ba:88:e4:7b:14:94:60:29:
71:89:3d:bb:39:fc:77:37:90:0b:bc:c3:06:83:dd:
fc:4d:d6:fb:3c:54:44:59:db:ee:64:ff:0c:60:f2:
48:7c:80:d7:00:83:db:8d:3b:cc:e5:2d:8c:ed:5c:
94:c7:9c:e1:8a:19:1d:f1:92:ff:32:76:08:ad:af:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3E:1A:1C:57:D4:2B:38:E4:C6:92:D8:8A:86:C9:0F:02:1A:57:CC
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ea:38:63:5b:8a:65:5e:a5:96:92:8a:94:89:70:e8:aa:59:
e2:50:3f:0c:05:d4:d1:1d:9a:66:13:9c:38:92:19:73:91:bb:
b1:5c:6c:bb:fb:2e:e9:42:06:9b:49:25:d4:09:e9:1c:3a:87:
95:c1:62:99:97:22:9a:4b:34:9a:c0:a9:b8:cf:ca:3c:4c:43:
46:fe:62:a7:26:57:7c:31:74:bc:61:dd:5b:fa:6c:53:40:d7:
4f:df:bf:54:40:fd:54:a2:a3:b3:6c:5b:67:00:6b:b0:24:68:
4d:0e:91:de:72:cf:6f:d3:56:b5:49:32:36:47:4e:4c:16:50:
fc:08:d0:d8:ea:43:e8:11:4c:cd:98:d3:7a:9e:25:c2:9d:bb:
c8:d3:fd:f7:77:49:73:65:07:99:6c:67:a3:b9:3b:85:21:2a:
f7:1c:ca:13:f9:a2:c0:ae:d1:5b:9a:b0:9a:09:6c:e2:9d:88:
0b:44:54:e1:2a:8b:6a:31:ae:23:df:03:1d:c5:f9:6f:97:25:
bf:04:c7:54:4b:a8:01:70:10:68:79:1f:65:4f:38:a5:c5:a3:
8e:5b:51:68:07:74:af:18:d2:be:4c:41:49:f0:84:ac:30:73:
b9:a8:c4:11:0e:cd:ed:55:88:eb:39:a3:59:53:a6:61:4b:50:
27:e3:d3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:48:24 2026 by rpki-client