Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier: BEFWHcOsO+szhWhASKZKXrMJIw7wOXNxb4Kt2JPkcXA=
Subject key identifier: F3:E3:9E:13:74:75:30:5A:05:CF:86:B3:B9:16:CA:4A:5D:6F:D5:F9
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial: 019DD050AD872EB3051FB410D8DE42955030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number: 05BC
Signing time: Mon 27 Apr 2026 19:00:41 +0000
Manifest this update: Mon 27 Apr 2026 19:00:41 +0000
Manifest next update: Tue 28 Apr 2026 19:00:41 +0000
Files and hashes: 1: d3XCpcyn0uAgmWptpHQjYP7UPLA.roa (hash: ou/aEB+Ce2n+pbDK9cilwO6M3zpwbvFU2gW96y63Kxw=)
2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: IPy8HB054h8WxlsB/27qjQ7vCyAr+CbZuG+Ahcpe/dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:ad:87:2e:b3:05:1f:b4:10:d8:de:42:95:50:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Validity
Not Before: Apr 27 19:00:41 2026 GMT
Not After : Apr 28 19:00:41 2026 GMT
Subject: CN=f3e39e137475305a05cf86b3b916ca4a5d6fd5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:f0:e0:e1:1d:09:6f:d2:42:c5:d2:9a:53:
a2:0b:84:c0:6c:88:f0:d5:03:cd:28:5e:59:68:97:
8b:45:0f:ce:ba:55:1b:e8:8e:58:60:e8:08:ba:f2:
b2:ec:88:5b:97:fe:eb:15:d1:7b:88:f2:50:11:4b:
0f:01:22:cc:27:88:aa:3b:40:e3:e7:44:87:1d:01:
d2:4c:19:09:39:88:21:80:05:df:03:96:68:09:93:
94:ae:51:42:d0:b8:b6:27:cf:ba:6e:16:80:65:db:
94:f6:d6:f0:f9:6e:05:e6:fd:ac:bc:23:64:ec:46:
fc:d3:19:28:dc:8d:87:98:6c:91:c9:9e:d4:4b:af:
25:33:1a:0a:70:d3:ea:29:1a:34:00:dc:d1:30:84:
e4:9a:fa:f8:ce:ca:ad:58:4e:a8:60:e7:16:38:a6:
f0:0e:e3:03:9e:40:3b:78:f7:a4:82:29:86:9f:6c:
92:07:b9:de:30:0b:b3:9d:90:ca:ec:31:2c:1e:50:
54:4e:f0:c4:15:85:cb:42:39:fe:5a:09:ee:78:db:
f4:92:69:5f:9a:01:44:78:a3:37:c6:3e:19:8d:79:
e5:9b:bb:7c:6c:ad:24:ca:b4:5f:df:92:45:cf:a6:
16:c5:37:cb:fd:b8:a2:a0:aa:1d:10:c1:bd:97:90:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:9E:13:74:75:30:5A:05:CF:86:B3:B9:16:CA:4A:5D:6F:D5:F9
X509v3 Authority Key Identifier:
keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2b:69:1d:cb:51:38:db:f1:35:57:f7:87:8d:f4:ea:5f:fd:
8f:c7:69:99:05:d6:9b:e6:23:bd:fd:3f:cb:2b:e8:f1:e3:ba:
b3:ef:dd:6e:f0:39:5e:e1:fc:8e:16:30:55:48:48:21:36:3f:
66:74:42:95:b9:59:3f:ac:4e:1f:f7:2c:96:42:bd:fc:1c:6f:
99:66:5b:9f:b0:5c:0a:da:8b:de:7c:f9:38:e2:f2:c6:a6:0b:
6a:0b:ca:a1:45:fd:93:2b:3a:83:6d:3c:98:85:f4:5a:4c:ec:
63:0f:50:0d:b0:fb:b2:4e:0f:24:3e:b3:5c:9d:91:ad:de:c6:
3a:64:34:ad:05:98:03:c6:fb:9c:4e:8c:66:b4:b0:c2:a8:9f:
d1:7e:b7:85:77:c3:ab:8b:9c:b4:6e:fd:1a:97:80:b5:4d:09:
73:b8:a7:c7:0f:32:1e:e3:94:89:d0:82:bc:6d:2e:df:7a:b7:
41:46:6b:03:b2:ad:5c:1d:0d:9e:66:4b:53:47:fa:38:a5:aa:
5c:c7:18:aa:e4:44:79:93:1d:cd:a9:5d:cf:7d:48:d4:8b:c1:
6c:39:f6:55:24:d5:b4:e0:06:b2:cb:92:18:be:54:16:f5:a6:
03:fd:34:02:3a:86:56:5b:12:30:0a:b9:41:7a:2c:09:3d:b5:
65:a7:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:45:00 2026 by rpki-client