Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: Vci4gH5V9pGjR73teVjxlyU2QdTlZwDDE+SNVGZwaYY=
Subject key identifier: B7:3B:0C:3B:F9:22:C9:39:9F:D9:BB:8A:07:EA:EA:A6:7C:12:52:71
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 019DCE992F635112AA2F20115DEE9B6E2EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0FC5
Signing time: Mon 27 Apr 2026 11:00:38 +0000
Manifest this update: Mon 27 Apr 2026 11:00:38 +0000
Manifest next update: Tue 28 Apr 2026 11:00:38 +0000
Files and hashes: 1: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (hash: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: 5E0ui7V0lMpeM50xMVo/vqwJFqx3ezV5MMGhXu3Ank4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:2f:63:51:12:aa:2f:20:11:5d:ee:9b:6e:2e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Apr 27 11:00:38 2026 GMT
Not After : Apr 28 11:00:38 2026 GMT
Subject: CN=b73b0c3bf922c9399fd9bb8a07eaeaa67c125271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:3d:bd:05:63:8d:57:96:94:a8:b7:1b:03:
3c:c9:92:84:eb:66:02:18:4e:9d:4f:5f:30:d7:c2:
ba:9b:1e:0b:f5:5d:1e:d5:8a:03:b7:7b:dd:ca:ac:
24:e4:5d:8c:a8:32:1f:55:28:5a:21:b9:44:5e:93:
4e:72:81:3e:15:71:51:1f:76:f5:9d:4d:bc:c8:30:
29:a3:6a:80:83:92:20:c6:8f:1d:78:66:b2:d6:6f:
59:6e:01:a1:d9:9f:0f:83:07:8e:6c:1e:ad:fa:b7:
fa:1a:1b:56:d2:bf:9b:6e:c4:92:5d:d9:be:03:27:
3b:14:bc:b4:df:1e:ca:e7:3b:a3:f6:f3:31:f1:98:
27:09:d7:00:f8:01:49:f7:b7:8e:5e:3c:fa:39:85:
6b:3d:9a:4c:d9:93:34:c1:91:f2:c7:8d:7d:b5:4d:
b9:02:98:6b:f2:39:f9:a9:8b:5b:9d:ae:98:07:85:
1e:3e:b6:9e:c7:f2:34:df:82:26:9f:43:c2:73:a8:
7c:1f:0c:77:24:e3:fd:de:1e:6e:0f:20:da:45:17:
6b:68:44:fa:3f:35:f4:0f:fe:ad:57:ca:5f:2e:af:
20:7a:f4:47:f0:50:4b:6c:5a:32:c1:1e:7d:99:a6:
6b:ba:14:8c:ee:12:e0:4e:57:d9:59:eb:85:a8:f6:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3B:0C:3B:F9:22:C9:39:9F:D9:BB:8A:07:EA:EA:A6:7C:12:52:71
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:93:51:1c:1e:76:45:a8:86:b4:90:ef:ce:e0:69:7a:33:31:
42:95:c9:bb:18:8e:3f:fe:4e:3c:37:d1:1b:06:b9:f7:dc:2c:
15:f0:24:4f:a3:1c:8b:07:2d:a3:74:06:18:11:27:9b:be:f7:
f5:68:32:a9:28:ba:b4:6d:7b:9c:41:d0:f1:25:6d:50:f5:1a:
54:7c:df:0d:da:58:f8:08:fa:ec:a2:29:68:5c:bd:ad:66:c5:
b6:7b:60:17:b6:f8:ff:10:11:27:f7:cb:0e:f7:ed:3a:37:8e:
6f:90:6a:f2:6d:9e:e4:f0:ea:3d:d9:a0:37:a9:6b:e7:4c:8b:
02:25:98:1f:15:7c:a2:88:51:87:75:2a:42:03:15:00:ae:95:
ca:c4:8b:30:c4:57:ec:e0:1e:b9:46:aa:ff:17:4f:ae:a9:88:
94:7e:7b:62:31:68:31:05:69:8a:cb:12:d4:b6:4a:a7:cf:51:
29:10:c3:e0:92:70:4d:3b:a2:96:57:94:ce:3c:71:b7:9e:8f:
b7:c6:7b:04:2c:9c:c1:99:9c:60:0e:89:29:6e:f5:bc:c1:57:
f4:d0:d3:b3:80:99:c1:26:f5:12:c6:19:c4:b1:ed:4e:4e:91:
ab:3e:da:50:7d:8f:62:d8:77:1a:13:e7:4e:21:53:6e:7a:48:
e5:1c:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:34:14 2026 by rpki-client