Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier: q2jAovZS/hE/Z1T20esWDFhY7hTid0R4k9sQkA261ME=
Subject key identifier: FE:A7:1B:27:72:CA:68:C0:17:C8:E8:15:1B:3F:97:03:23:CD:E2:43
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial: 019CE6A4487846B9E53EE06A18C3DF8AFC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number: 0543
Signing time: Fri 13 Mar 2026 10:00:51 +0000
Manifest this update: Fri 13 Mar 2026 10:00:51 +0000
Manifest next update: Sat 14 Mar 2026 10:00:51 +0000
Files and hashes: 1: d3XCpcyn0uAgmWptpHQjYP7UPLA.roa (hash: ou/aEB+Ce2n+pbDK9cilwO6M3zpwbvFU2gW96y63Kxw=)
2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: HUmp8nppUdqojOKZl3+2NkIROau4VGlSZmXfHExPZbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:48:78:46:b9:e5:3e:e0:6a:18:c3:df:8a:fc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Validity
Not Before: Mar 13 10:00:51 2026 GMT
Not After : Mar 14 10:00:51 2026 GMT
Subject: CN=fea71b2772ca68c017c8e8151b3f970323cde243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:81:5e:86:fe:c5:20:5c:6f:89:a2:ae:cf:
a6:75:d9:8e:13:dd:1d:4c:ea:4b:5a:8e:68:43:16:
cc:85:df:70:42:00:d3:6d:65:f2:eb:5e:3f:04:1f:
4e:01:a0:a8:56:1f:b4:a4:39:c5:49:c7:47:e1:88:
7d:25:e0:be:b5:d2:46:07:09:40:13:92:95:a9:09:
7d:46:e0:ba:59:4f:e2:0a:0d:d8:8e:f1:5a:a4:9b:
be:9d:b9:0a:63:00:5d:ab:fb:bc:79:8d:e3:e2:c4:
83:ac:22:25:e8:1e:93:70:03:0a:c3:1d:c6:cd:a6:
43:2e:fc:38:8b:2a:72:5e:83:3f:ac:66:89:e5:5e:
7f:d8:f8:83:3b:d2:8d:f9:70:96:df:a4:35:e0:d3:
02:a1:a7:a3:af:5d:8f:62:0f:94:4b:0a:5f:cc:41:
fb:ab:32:50:90:af:76:6f:ae:81:9b:be:62:2b:e1:
52:91:88:8e:1b:1d:2e:32:8b:3a:88:6d:f4:85:cc:
55:c5:6f:c4:cb:d2:2b:87:82:cf:87:00:30:ac:5f:
86:c9:6a:0b:e5:36:46:cb:ab:83:dc:2b:42:f0:0b:
41:57:bc:d2:a9:45:0b:79:19:6a:08:58:bb:3c:f7:
3c:f4:89:f5:3d:ca:24:28:1b:02:ce:52:25:c3:91:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A7:1B:27:72:CA:68:C0:17:C8:E8:15:1B:3F:97:03:23:CD:E2:43
X509v3 Authority Key Identifier:
keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:80:8d:77:5d:16:09:3d:65:f8:d0:b2:27:c6:d1:06:81:67:
9d:5c:8c:6a:25:48:3c:8b:97:89:ac:70:64:0c:94:d2:27:fd:
97:9e:da:75:f7:0f:44:7e:44:29:99:69:68:ee:68:b5:d9:45:
7a:9b:66:1b:41:a4:99:e9:3b:f6:91:6e:79:fb:f3:45:40:8c:
ea:ee:cd:a7:f8:05:60:d1:ad:86:13:c5:d2:8d:7e:af:63:77:
68:03:cd:2e:d3:f6:03:8d:aa:92:e3:9d:f3:04:3b:24:6c:de:
8b:57:e0:56:fe:dc:0b:58:17:95:04:e5:4a:5e:5b:4c:21:d8:
36:e0:d7:46:4b:16:bb:ad:4d:4f:cd:95:77:29:c9:73:54:4e:
d5:3f:6a:0b:88:e5:bb:d3:bc:8d:72:5e:23:9d:90:b7:2b:d3:
5d:b4:83:1f:39:75:6c:d7:c6:f9:34:b6:cf:5a:af:17:59:f9:
50:a7:0d:ed:45:bb:e0:6b:0f:e7:93:b0:a0:43:47:42:37:24:
0c:70:9c:ae:9d:9c:57:24:0c:c7:78:00:cf:3e:c3:fc:01:22:
7b:00:5e:c8:c3:bd:5c:43:ef:99:9d:e0:14:3b:c7:cc:5a:d4:
8c:84:a1:20:5d:9b:39:72:4d:2d:ba:9a:4d:25:04:f5:28:c2:
b9:e0:22:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:16:27 2026 by rpki-client