Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
File: fGHj2B8FrLVr33mO1K4q9jd5QgE.mft (raw, json)
Hash identifier: jUGHhLrLk8kjbnB/yWtJklF3L/0X0ZzI5tY8bb0aWRg=
Subject key identifier: 95:1C:9C:72:EF:FF:4A:87:07:80:DE:8F:D6:C8:EA:3D:EB:A2:1D:53
Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
Certificate issuer: /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Certificate serial: 019D382E228DD1175F654E8CC7CB6082150B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
Manifest number: 0EB4
Signing time: Sun 29 Mar 2026 06:00:40 +0000
Manifest this update: Sun 29 Mar 2026 06:00:40 +0000
Manifest next update: Mon 30 Mar 2026 06:00:40 +0000
Files and hashes: 1: OM1cSFU8Ho_5gGRm9_J5AM__9Vo.roa (hash: gWCTvEKc3tzachY7brHH1xI78OvzIY3uE0uOo2Zryuw=)
2: fGHj2B8FrLVr33mO1K4q9jd5QgE.crl (hash: zaGTgDgGY29zZF9opFcfRAZ1JeA1UwtvwP1cX2wmp2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:22:8d:d1:17:5f:65:4e:8c:c7:cb:60:82:15:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Validity
Not Before: Mar 29 06:00:40 2026 GMT
Not After : Mar 30 06:00:40 2026 GMT
Subject: CN=951c9c72efff4a870780de8fd6c8ea3deba21d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:91:b2:e5:fd:91:da:5c:83:28:9a:5c:e5:
fc:5a:6b:7a:66:7c:b4:63:ba:80:6f:0f:c2:2c:ce:
7f:6f:86:94:59:ce:f8:ac:f0:ae:14:67:a4:b8:f2:
8c:98:2f:02:fc:94:ad:d4:9b:b0:8c:1b:83:04:c8:
5a:0b:de:f6:f0:08:f4:43:69:63:72:05:da:e3:c4:
81:a2:0e:e4:07:86:5e:b1:48:c5:58:02:88:3a:ac:
90:26:fc:b2:9a:4a:38:9b:da:c7:ff:0e:66:5e:5c:
2f:b2:cd:bc:50:27:e5:0f:10:0c:01:7a:f9:81:d6:
c4:32:2c:03:c3:02:ce:ed:96:41:59:5d:37:6a:dd:
4a:7b:88:a9:1e:2d:86:d0:45:8e:00:dc:89:1a:b8:
ef:87:41:2c:ee:a7:5c:f7:82:ec:6e:08:e8:c6:ac:
e4:e3:cc:d2:98:c0:34:96:e0:e1:a7:50:e7:ce:38:
d0:8a:fd:8c:6f:14:83:ab:a3:ac:7c:74:a1:9d:85:
b6:b4:8d:17:9e:63:48:45:96:4b:c4:27:ec:93:2e:
fc:34:95:fc:85:04:01:db:54:65:10:27:8e:6c:e6:
d1:6a:1f:66:8e:c5:9e:14:0d:89:bd:45:17:a0:38:
d1:f9:7d:1d:aa:42:9e:8d:5a:08:9e:24:cb:2c:c7:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1C:9C:72:EF:FF:4A:87:07:80:DE:8F:D6:C8:EA:3D:EB:A2:1D:53
X509v3 Authority Key Identifier:
keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:02:09:16:53:f4:43:eb:13:0d:73:32:45:20:d6:21:14:97:
3a:5a:76:3c:66:14:49:57:86:cc:e7:86:a2:10:2c:b7:d1:de:
ca:41:5b:b2:b1:b6:10:04:95:5b:35:bb:ca:9b:98:ca:db:db:
3a:23:8a:af:13:9c:99:e2:5b:fa:a6:62:8b:2b:eb:7f:ce:48:
45:42:73:ea:46:56:d0:4c:a9:02:64:84:12:28:ee:0d:ba:6d:
44:66:71:55:59:3a:84:33:ca:13:11:40:45:03:9b:85:c2:90:
67:5f:cb:6d:56:1d:f3:46:c2:b3:4d:5c:de:60:2c:d5:87:d9:
6a:59:4b:53:9b:ff:98:89:be:fa:7a:e9:a0:09:48:06:8c:ea:
06:45:5a:de:d8:ff:bb:88:54:c2:c5:0a:17:d9:02:59:3c:04:
cf:98:d1:35:3b:65:65:40:5b:89:b3:0c:d4:33:4d:05:5c:4f:
7b:78:62:b7:be:f7:c8:f2:68:8d:6d:47:4b:0e:c5:0e:0e:14:
c5:d9:22:32:a9:b7:59:6b:72:c6:bd:0b:1e:7d:78:d8:9f:2c:
90:c7:25:39:42:c8:49:c3:9b:bd:74:79:66:94:a7:48:47:c6:
f3:4b:66:54:6c:da:4e:e2:2b:bf:a2:50:bf:49:9d:c4:4e:ed:
c1:1d:bf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:16 2026 by rpki-client