Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: b2R3Kqf/IwKlZ4W1OIlzXAlTmTbXKeavz+WTS1vDLk0=
Subject key identifier: 03:F1:B6:50:DE:1D:09:97:F3:90:3B:BA:27:6A:CF:03:75:85:A4:2B
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 019D37527865A0732B5DB6F7E8759D48D828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 181F
Signing time: Sun 29 Mar 2026 02:00:44 +0000
Manifest this update: Sun 29 Mar 2026 02:00:44 +0000
Manifest next update: Mon 30 Mar 2026 02:00:44 +0000
Files and hashes: 1: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (hash: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: YipgYkRdpwJAJjbJVjPEjoBFb8GJVZH8Kcu+bP2X/GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:78:65:a0:73:2b:5d:b6:f7:e8:75:9d:48:d8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Mar 29 02:00:44 2026 GMT
Not After : Mar 30 02:00:44 2026 GMT
Subject: CN=03f1b650de1d0997f3903bba276acf037585a42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:16:58:7a:b9:14:0b:5d:9e:aa:f4:66:e6:
97:59:66:03:08:ea:f7:c2:b5:77:6d:17:ed:f4:96:
8c:9b:79:3f:2c:a4:7f:9a:c2:0a:84:cc:4c:1f:58:
bf:e7:40:ce:fb:3c:2d:4c:a6:39:83:ad:40:35:20:
d3:f5:2a:40:a5:01:26:8d:56:99:75:d5:e6:3d:57:
1b:9b:8c:41:d2:3f:c0:cb:06:16:79:3b:b7:ac:6d:
29:86:ef:f1:e7:25:0f:8b:d3:79:ca:84:dd:07:54:
0c:34:04:f8:da:b8:b5:15:8f:94:46:34:a5:06:ec:
91:f0:b8:5e:72:60:80:87:c7:cf:7a:ad:0d:d2:06:
22:dd:14:4a:87:37:34:38:c2:57:dc:27:bc:76:e6:
58:8c:65:fb:ad:c7:ec:75:99:01:f8:f4:f8:f7:63:
45:b7:b9:c7:b1:93:bc:de:41:30:9e:64:84:64:b0:
75:d0:cb:cb:c5:fb:12:18:41:d3:69:da:b8:56:cf:
a9:f8:2b:f2:68:19:ca:59:fb:0d:3c:ec:84:45:82:
5e:a9:68:cb:a0:f7:55:9e:10:82:d8:1c:91:33:06:
cc:f6:58:5e:ad:8e:1a:17:72:1a:0a:90:1a:92:dd:
36:44:aa:a6:47:1c:cb:6e:4d:bd:32:62:d3:4f:88:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F1:B6:50:DE:1D:09:97:F3:90:3B:BA:27:6A:CF:03:75:85:A4:2B
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c2:e7:dc:b3:f0:9c:de:01:cc:33:17:eb:07:55:01:8a:6e:
34:a5:ba:13:6c:d1:60:de:28:52:e8:2e:5f:eb:b3:62:20:61:
6c:84:e4:7e:6d:c4:03:3f:6d:f6:28:7b:55:6f:68:43:22:4e:
7e:88:40:87:2b:f9:28:54:61:ac:be:24:14:07:b5:48:2f:bc:
c4:9c:2b:6b:f6:b8:32:e9:35:30:17:5f:08:c1:f9:80:dd:92:
79:f2:2f:bf:26:ef:37:35:d7:7f:ee:dd:20:d7:62:ab:cc:ac:
70:e0:52:76:7c:83:0a:b4:9d:81:27:09:1d:d7:63:06:4a:54:
da:b3:72:e6:d3:48:b4:92:21:b1:e5:af:eb:74:ab:b6:93:79:
38:19:eb:75:e7:0d:a9:56:1f:ef:93:42:3a:c7:33:b6:c5:2f:
a7:aa:f4:aa:76:63:69:b2:61:91:a1:da:68:4a:a1:e3:21:e5:
09:3f:ac:0e:fd:3c:b7:20:f2:e3:25:59:e1:5d:6c:06:72:87:
c1:f0:ba:9a:a7:a1:76:d2:30:8a:29:13:ed:c9:a8:07:16:53:
0f:4a:f1:b2:8e:f1:5b:d2:68:fe:4f:30:2f:5c:1b:d1:a5:4b:
c0:6d:c7:75:3a:a6:90:fb:19:40:c3:c8:0c:b7:e0:93:b2:d0:
37:3b:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:56 2026 by rpki-client