Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File: fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier: jjFKg4qD1buyjxYyT2IUMnWZ7pwXhUXTFFS1k3N9OhQ=
Subject key identifier: AB:59:17:8C:DF:BF:0B:3C:50:53:7E:32:B7:54:15:38:1C:28:44:57
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial: 019D3941427228413A58AA942D8CD4AE4D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:11 +0000
Manifest this update: Sun 29 Mar 2026 11:01:11 +0000
Manifest next update: Mon 30 Mar 2026 11:01:11 +0000
Files and hashes: 1: 5ruGjzi72EzHeNevEE3JGyLtXgQ.roa (hash: F631VpzOVt6zeqgnyepT7OlQYefuALhIBPjhvOj+SbM=)
2: MLTMNf6RdXQHgobliz7oe72JkjQ.roa (hash: vynBVcDFPo0FhDEU/VJwzCvxOSeIG5MJSs1ntfusClo=)
3: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: wPV3eDgV6FuGtMERobekWuYyCOFBvE//tYu4nbQinzI=)
4: fXZclwjMmJuKFUf7Q9P-NHbNEpQ.roa (hash: anvE7nbyIQqcqcLLGmm77d4AcDLATJhTxcyjOxhWcfo=)
5: qq9jEWnUkq7RixjGSRxp41ikMoQ.roa (hash: YTairbAOKk2TzoyqKR+ve0ERswXp2cOBJyd3vALW04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:42:72:28:41:3a:58:aa:94:2d:8c:d4:ae:4d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
Validity
Not Before: Mar 29 11:01:11 2026 GMT
Not After : Mar 30 11:01:11 2026 GMT
Subject: CN=ab59178cdfbf0b3c50537e32b75415381c284457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:c4:a8:68:10:fe:73:c6:26:6d:3e:5e:bc:
15:e4:dc:6e:52:b9:b0:1f:d1:d1:80:ce:ac:32:c4:
e4:08:e4:31:2c:cc:b7:a9:56:2b:ca:68:db:d9:ac:
7c:83:fa:36:a1:dd:81:55:40:1a:c9:96:ae:4a:54:
de:ee:03:7d:1f:fb:f8:b4:21:51:2f:03:e4:39:fe:
f7:7a:b0:e0:27:04:09:8e:75:ad:2d:a8:0f:74:8b:
eb:47:16:57:1f:2a:4f:83:4c:46:46:09:85:64:3d:
db:48:13:9d:56:f5:97:bb:de:9c:1a:6d:27:4b:fa:
11:bb:ce:ac:9c:25:5a:10:05:e1:33:71:40:8b:2b:
0e:ed:82:57:df:96:5d:56:3a:06:fc:86:d0:40:e9:
eb:99:1c:e9:e3:04:0c:6d:95:1f:1a:43:04:62:f0:
4f:06:06:74:9f:1a:14:6d:25:70:00:30:ef:fa:63:
53:fb:cd:3f:82:c5:bd:2e:4a:dc:9a:d4:77:bf:f6:
20:56:84:94:30:9b:72:8e:b4:31:21:ef:40:85:5f:
3e:96:d2:cd:5a:61:ac:2c:f0:89:b8:fd:8e:d1:41:
48:1c:3f:4e:a4:13:bc:12:83:68:d0:48:3a:fc:a9:
b5:77:c3:92:77:79:c5:e7:54:7c:20:a0:9e:00:ce:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:59:17:8C:DF:BF:0B:3C:50:53:7E:32:B7:54:15:38:1C:28:44:57
X509v3 Authority Key Identifier:
keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cb:17:e5:fa:10:22:d1:ab:6c:01:0b:86:09:66:69:da:a6:
ce:71:c7:24:d8:ec:33:4b:b4:c8:38:88:30:c2:fb:d9:58:21:
4e:27:9f:74:8e:d6:d7:d1:6f:eb:d9:5a:60:a7:5d:0a:a4:e1:
da:85:02:75:f1:65:49:57:18:bb:c6:e0:44:85:dd:5f:ec:45:
15:25:04:d8:a6:e2:46:d4:f1:d4:d6:57:6c:6e:78:bc:5a:53:
f0:a2:e3:1e:bf:7b:55:43:24:92:a7:04:0d:b4:4e:be:80:03:
31:a6:f7:c3:eb:d8:f3:0f:00:f7:f4:9c:46:9d:4f:f1:22:f2:
18:1c:6a:0f:d1:59:eb:4a:ec:b8:a8:0c:c1:45:5f:16:a5:6d:
55:ec:ef:57:94:66:c2:ac:68:00:41:50:56:e4:3b:78:86:f4:
be:fb:91:a1:c3:a2:92:23:82:0b:bf:5b:c7:12:f5:0f:8d:f1:
3f:4a:04:d4:62:ad:cc:4f:05:16:fb:c7:09:58:4e:a5:ad:95:
52:ee:d6:7d:7c:b5:d7:66:60:01:fb:69:80:90:67:f9:05:1a:
27:b1:f8:23:f2:47:9b:0a:e6:f6:82:f8:28:11:b7:15:14:96:
90:58:2a:0b:db:75:a1:01:c5:2b:3f:ab:62:ba:1b:18:ab:61:
c2:e9:93:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:08 2026 by rpki-client