Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File: fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier: oKZf4R/Q/vfzDM3Ok5Pm5/n4lR+y7er6C1J7ca7t4MU=
Subject key identifier: 79:90:0C:71:E2:90:18:CB:3D:71:B0:A1:98:CC:B1:96:5E:FD:79:FA
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer: /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial: 019D382EB952E37DC81DC923B5E1712067D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:01:19 +0000
Manifest this update: Sun 29 Mar 2026 06:01:19 +0000
Manifest next update: Mon 30 Mar 2026 06:01:19 +0000
Files and hashes: 1: 5LuGzHTGNXh7ooCOYMthjUDSS6E.roa (hash: ueacTOAGFcsAA9jabTl3i8ESOHojLkJGvrFKPoo+SiA=)
2: Up6FPG2EmlxGGm-IJpPlY2eyxIw.roa (hash: vllY3zX6/fq+SiGXdC5fpCJcuaKw1ngd9//Sa26iQZc=)
3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: jczPkFr8P9twD8VbGPULst/A9MgACwr55jZp3OvtA2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:b9:52:e3:7d:c8:1d:c9:23:b5:e1:71:20:67:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Validity
Not Before: Mar 29 06:01:19 2026 GMT
Not After : Mar 30 06:01:19 2026 GMT
Subject: CN=79900c71e29018cb3d71b0a198ccb1965efd79fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:b2:8f:4b:9f:c9:26:c6:bb:0e:fb:e4:9e:
4f:5b:e6:1c:a6:97:c3:3e:ea:53:f3:97:0a:1e:4e:
48:38:64:c0:f5:41:fe:81:8f:23:71:d2:77:c4:a2:
fe:fe:20:1e:d8:7c:7f:ae:e5:ce:31:e2:95:f3:f8:
c4:47:b2:9b:2c:99:42:a3:93:a1:cd:f1:94:29:47:
cd:65:f5:b8:66:ca:f0:99:be:6a:b7:1a:88:b5:55:
d4:77:f7:15:c2:fc:25:1e:eb:56:85:28:64:47:34:
9f:d0:29:13:8e:bb:5d:90:f6:e4:d5:d0:46:cd:1c:
aa:b7:a4:de:53:17:ff:cd:cb:b3:63:b8:b8:26:70:
53:b7:16:8f:bf:95:25:9c:bd:78:79:eb:8b:46:a6:
b3:ab:9e:0e:81:be:e9:9d:b4:46:61:2b:6e:f3:06:
3d:85:f6:1f:65:05:46:8f:48:05:89:d6:56:20:50:
8d:76:47:0c:e7:97:7d:44:b7:3a:bb:cd:ac:19:80:
97:34:a9:ac:1c:33:e3:bc:19:67:37:5b:da:47:cb:
1c:e0:62:b4:ec:4b:b1:35:15:c4:5f:ea:90:a0:55:
9c:14:22:d3:64:2c:60:af:00:a9:50:bf:7a:1c:9c:
37:ed:e2:cf:97:03:23:20:9e:af:fe:50:19:d0:13:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:90:0C:71:E2:90:18:CB:3D:71:B0:A1:98:CC:B1:96:5E:FD:79:FA
X509v3 Authority Key Identifier:
keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f0:f3:f3:27:a5:8d:0b:38:ee:11:2b:b3:a7:7f:eb:fb:78:
91:22:e6:a2:5c:a7:78:37:bb:08:7e:12:d6:38:cc:b3:f5:9c:
fd:9f:79:36:2a:eb:4a:49:c8:82:ad:4a:5f:2d:85:4b:4a:cc:
d6:ac:78:0f:04:47:2e:89:2c:85:d0:bf:d0:3e:e5:d3:2a:cd:
50:fe:ff:a9:f7:ca:0c:83:4a:9f:0e:45:ed:9c:03:98:a1:9d:
df:49:ef:f5:dc:3e:25:43:10:5b:16:60:a8:d9:6a:0e:ef:c8:
e6:50:be:20:8a:e9:45:56:ea:9c:ce:ef:2d:2c:cc:68:cc:d6:
e8:10:6e:24:17:b9:5c:9c:58:d6:6d:f7:83:87:77:d2:49:e5:
e0:76:81:ca:65:83:4e:d7:5f:1f:d9:9d:c2:b1:f3:b3:12:77:
45:f3:38:c2:a6:57:00:a4:78:76:64:25:88:df:38:2d:97:63:
0e:0a:e7:8c:76:dc:dc:53:e3:47:11:62:46:83:ed:27:95:75:
96:25:5f:9d:a8:08:eb:9e:1b:f4:51:24:dd:12:c7:80:95:6f:
17:45:de:ab:55:9a:fb:9c:ef:cf:57:8d:54:38:ed:f4:e5:ba:
59:17:4f:af:d6:66:e5:f6:28:75:67:4a:2e:60:d8:18:00:53:
f8:59:0e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:56 2026 by rpki-client