Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
File: 58fsjXgFA9t8q8sUHWuZHNAppqI.mft (raw, json)
Hash identifier: mOj0k/dwoFz3gZBDTmYmWAkYtzTZ8ovCVM73SctnD5Y=
Subject key identifier: FC:AB:74:B1:8C:B6:EE:E7:53:0C:84:2F:96:79:AA:E1:58:70:D5:FC
Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
Certificate issuer: /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Certificate serial: 019D38666F5AC5FE4EE6B3FF11DD653D9A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 07:02:10 +0000
Manifest this update: Sun 29 Mar 2026 07:02:10 +0000
Manifest next update: Mon 30 Mar 2026 07:02:10 +0000
Files and hashes: 1: 0u1EuXjDpMxmJEton1vb24EC90g.roa (hash: c5s8FvXe/Y+Qj5eKBuhwHIjGOjYzX65vKHhFShS4Kfo=)
2: 58fsjXgFA9t8q8sUHWuZHNAppqI.crl (hash: RaYUx6fCvMcuKJXm9JjfI7a/fjFpG/4FX4ClsjR4mNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6f:5a:c5:fe:4e:e6:b3:ff:11:dd:65:3d:9a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Validity
Not Before: Mar 29 07:02:10 2026 GMT
Not After : Mar 30 07:02:10 2026 GMT
Subject: CN=fcab74b18cb6eee7530c842f9679aae15870d5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:96:cb:ae:96:5b:04:e2:8e:e3:9a:e5:4b:
dd:92:1b:97:e6:de:96:63:41:c3:82:08:b8:7c:75:
a3:58:b2:70:3e:57:48:69:a4:7d:5a:d8:dc:9b:a5:
6f:7b:e7:e9:41:10:d1:8d:28:ad:75:f2:94:a4:d8:
a8:86:8d:e9:a3:09:bf:80:28:44:54:f2:74:8d:d6:
2f:ab:e4:aa:7d:7e:f1:3c:4e:af:e3:96:16:e0:d5:
1a:83:43:38:81:12:ad:c0:bb:be:88:47:0c:26:70:
91:52:86:b6:37:d2:7a:6f:7c:93:2a:62:40:21:47:
c5:24:2c:d0:b6:4b:8f:ff:e5:5c:bb:7b:90:1d:d4:
6d:26:a9:a1:60:73:1d:7f:f4:06:4a:55:54:30:72:
6d:ac:a5:98:45:6e:32:25:da:70:f5:fb:43:bd:38:
2a:fe:5f:c6:07:78:55:5f:c2:f4:bd:f0:86:7c:84:
58:bb:5e:53:ac:52:97:c7:e0:4e:9b:d0:a6:6f:b1:
a3:85:58:64:aa:4a:24:33:6b:70:bb:1e:78:a7:b2:
f1:dd:d2:7d:8d:23:f0:07:72:db:6b:66:fe:e6:95:
15:8c:ff:7b:f0:f0:1d:cd:da:60:ba:c4:d6:66:98:
dd:c8:71:65:3b:e2:9d:6a:30:92:fd:ae:c5:f8:10:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AB:74:B1:8C:B6:EE:E7:53:0C:84:2F:96:79:AA:E1:58:70:D5:FC
X509v3 Authority Key Identifier:
keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:60:1f:31:ec:31:04:66:5c:fe:0f:19:3d:bb:4f:da:2b:95:
95:eb:4b:22:ab:59:55:e8:ce:d5:c5:33:08:d5:15:be:00:95:
ba:47:fc:9e:f4:96:06:7b:03:f0:12:ca:c7:5a:7d:1e:d7:62:
98:21:60:fb:1d:c3:cb:98:55:6c:0a:f3:15:4e:46:ce:00:14:
cd:c0:c2:88:44:a1:54:92:d0:07:28:b6:bd:e0:c7:07:14:91:
c8:2f:3f:7b:1c:43:cc:f3:05:a9:7f:f0:da:1c:8e:47:36:3c:
7e:15:2b:4a:6d:d7:fe:83:81:54:dd:91:2c:de:ad:c9:cf:2b:
db:dd:f1:dd:9e:da:43:5a:bc:52:b0:0e:fc:a6:b6:e6:b2:fa:
3f:00:4b:63:81:37:e1:c5:db:ab:8f:72:da:c5:78:70:46:32:
20:ad:b9:a8:e3:b6:6b:bb:6c:18:59:37:2a:54:9f:2c:b4:0e:
fd:1c:bc:de:12:68:85:a2:40:04:bd:4a:b1:b4:16:a1:41:db:
a9:ea:56:a8:88:d3:de:7f:05:55:3b:fe:82:5f:77:1a:4e:da:
1f:70:98:10:e2:c9:b6:25:5b:48:b8:82:9a:cd:23:20:27:ed:
e6:88:50:c7:50:00:8a:1b:5d:55:6d:5b:3f:c6:47:7f:dd:91:
0c:22:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:07 2026 by rpki-client