Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
File: fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json)
Hash identifier: b6Rd+SjhFVOqn3lA4XHDTE07W26MG+tJ1UILKBXHgq8=
Subject key identifier: 29:46:44:06:A6:EC:60:76:D1:96:68:79:78:84:56:61:D8:4C:0D:D1
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 019D389BCFBA1DAD4D957861B634A8675466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
Manifest number: 18A3
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: HzUTCI6rnR_-Bj8kKATXDhcrj40.roa (hash: GgWzcPFkABNTGnVrCM8IRcPBvuN2ZS1sm43MZ5/Hi28=)
2: R7AO6IcvjTtY4l0ByEe_0R_j0AU.roa (hash: MxomD2zeC9vv3+OGbCN11f0B1+3GrxfrkJYc0+4VX6I=)
3: ZSFvFvOHpvhz9jdVYyPf-qedyuc.roa (hash: y2p8lWtao0cmGhQ7xMI9uO+GzRfpUJD6YxLs8A6673A=)
4: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: lB6FU/qgrKpl43wJb6Ld9PSFTazJs3O8oawReku9He8=)
5: lHWMLrOWJPIs4BBwC991DrKwGo4.roa (hash: y28g4c7JhwolCgwgEN4bgF07Be1DrEjj6ZIL1k4Kjr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cf:ba:1d:ad:4d:95:78:61:b6:34:a8:67:54:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=29464406a6ec6076d196687978845661d84c0dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:09:d1:ea:46:56:d3:bb:74:ed:27:74:d3:
3a:df:14:7e:55:ee:99:b2:61:d2:36:5c:ca:70:d9:
67:37:39:ab:7a:eb:87:c2:02:e5:e4:85:c1:89:b8:
5d:1c:66:80:46:2f:e0:a1:d5:19:7b:c1:8b:d3:59:
12:d4:9f:9e:e7:66:f3:66:ed:37:bd:54:ad:78:a6:
41:65:6b:71:ac:fa:8e:4b:28:73:8f:1f:b3:a0:61:
52:7b:c2:c0:1f:3f:9f:28:10:0c:fb:1b:86:3e:82:
98:eb:d1:e3:20:0b:28:f0:92:1b:28:f9:d9:b6:f7:
f6:ad:c6:ed:4a:bc:e6:c4:be:c1:51:66:5f:b1:8a:
ec:e5:11:3e:38:d2:03:89:2a:02:f6:ac:db:b4:76:
58:2b:8b:8e:10:2b:64:5c:45:f4:ca:6a:93:c4:f0:
f3:d6:95:d2:25:09:9e:b0:6a:cc:dc:7f:c7:20:d2:
dc:0d:95:ab:23:a4:ea:0b:45:cd:f2:a0:f4:1d:41:
26:c3:72:43:72:7b:89:9f:ab:1d:92:06:14:0f:95:
35:f5:e0:7b:a7:33:1a:f2:63:f8:34:7d:ce:30:85:
33:70:d2:be:d3:db:f4:8e:db:3c:89:a2:fa:d2:2c:
05:60:c1:60:30:df:52:ff:4a:c6:f3:fa:c3:ee:ba:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:46:44:06:A6:EC:60:76:D1:96:68:79:78:84:56:61:D8:4C:0D:D1
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0d:07:b7:c3:da:e2:11:0d:83:5e:2d:2c:12:82:16:6a:d1:
2a:81:58:ae:d9:8e:66:e6:d8:36:6d:02:fa:14:27:51:f1:10:
58:45:d9:13:66:1a:34:37:e6:67:db:ca:1a:1a:8a:0d:40:1b:
7a:c9:f9:db:ee:8f:b6:3f:76:4b:be:ed:f2:7e:a9:6d:16:fc:
57:9c:4d:27:29:85:9e:09:61:d6:35:f1:22:46:7f:83:5c:03:
09:a7:59:82:dc:4e:f4:05:8c:9c:3d:65:c9:a7:01:5d:1c:68:
50:14:4f:2a:97:44:dc:4f:b2:16:af:de:1c:b7:57:67:6f:6b:
d7:fa:04:d2:b5:61:7e:d0:7f:35:2e:19:5e:92:f0:1d:d2:82:
b2:f1:6f:09:d9:f3:28:2a:10:2b:79:4b:45:0f:1e:80:37:69:
c6:90:49:b0:c9:c3:fd:49:55:93:9e:6e:b5:fb:2f:7d:28:38:
96:75:88:df:46:e4:c2:4b:11:11:04:68:fd:54:e4:56:80:2f:
57:a4:e4:ce:8d:a4:28:0a:25:cf:4b:0f:81:a2:c9:0d:fd:32:
07:47:0d:6c:00:ba:71:ec:6c:5f:6c:58:6c:df:1b:0f:6b:7a:
45:a5:32:3a:63:99:48:53:d4:5c:dc:dc:6b:82:71:1d:e5:2d:
64:5b:8d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:56 2026 by rpki-client