Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
File: fFkLczxW4U66xp97RNS8lU6TcOM.mft (raw, json)
Hash identifier: /TUE0vAP+2XwEbHrUBsMQF5IInWT3q0h/bAFh2qIVSs=
Subject key identifier: 09:70:7B:B6:9B:B2:C8:9E:F0:C6:98:FB:FA:5C:C2:97:C6:86:46:1E
Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Certificate serial: 019D39418D99E8546B7C0A4E0C9010EF21CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
Manifest number: 1565
Signing time: Sun 29 Mar 2026 11:01:30 +0000
Manifest this update: Sun 29 Mar 2026 11:01:30 +0000
Manifest next update: Mon 30 Mar 2026 11:01:30 +0000
Files and hashes: 1: D4LM_-yMapw5el8niCLWD3O15zs.roa (hash: fm1csnGJtCUdbxvyMsvPSvwlp32QsYfLZeDz4aX3VyA=)
2: fFkLczxW4U66xp97RNS8lU6TcOM.crl (hash: 1n8v953kwD1GUA7p9E3PPnee7xIdIgmssXL46Jw+r/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8d:99:e8:54:6b:7c:0a:4e:0c:90:10:ef:21:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Validity
Not Before: Mar 29 11:01:30 2026 GMT
Not After : Mar 30 11:01:30 2026 GMT
Subject: CN=09707bb69bb2c89ef0c698fbfa5cc297c686461e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:fa:af:62:f7:a9:02:cc:13:8d:6c:94:e1:
0e:5c:5c:ac:a8:92:92:c1:65:aa:7e:0d:38:e8:e3:
d5:11:c2:36:ba:42:cc:0a:24:16:0e:f1:03:8b:58:
24:b9:d3:a3:a7:15:69:a0:2a:29:75:91:0a:60:b7:
0f:56:b4:5c:d6:46:47:af:ac:99:5c:95:05:48:af:
4b:8f:83:d0:58:a3:5c:57:50:14:d5:46:f4:a7:00:
36:fd:12:da:41:ea:a1:b2:68:8e:07:14:42:f6:20:
41:32:4f:8d:37:d3:40:89:3a:13:b8:48:7e:1c:cf:
4e:92:ef:bd:57:86:3d:0b:c5:1f:19:4c:66:0f:fe:
72:6a:a9:50:35:fc:44:62:1b:b8:b7:7b:20:7c:f4:
94:33:9f:c9:49:18:bb:26:28:1c:d5:b2:f7:82:ad:
f4:0a:ad:b7:7b:66:51:b3:b8:0a:76:8a:29:bf:d9:
db:1e:7e:b4:99:89:df:f2:ee:e5:d9:5b:d4:25:37:
d3:47:ab:2c:8d:b2:73:3c:49:99:d0:a8:b1:39:ad:
8a:77:16:e7:00:81:7c:45:6e:a6:35:a3:ac:af:2c:
71:7d:07:1f:e7:2c:09:a4:76:8a:97:2c:75:ca:2e:
61:08:93:7e:72:a2:ec:6f:10:5f:cf:f6:5e:77:49:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:7B:B6:9B:B2:C8:9E:F0:C6:98:FB:FA:5C:C2:97:C6:86:46:1E
X509v3 Authority Key Identifier:
keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e4:85:ae:dc:33:6f:cc:b8:01:f0:2f:64:88:5d:f3:c8:4f:
d1:68:9b:d7:cd:d1:5f:c0:53:9f:39:a9:0c:c1:dc:12:8a:e7:
64:94:b8:ee:28:75:b1:f2:48:d7:9f:b5:04:51:fe:39:6b:68:
3b:7a:d8:26:8a:34:aa:09:42:c6:d9:ec:40:1b:43:71:47:4a:
9f:55:e5:c9:12:85:6c:0d:61:f3:10:11:d3:2c:72:a7:a5:db:
23:14:49:e6:c4:b8:d6:9b:0c:bd:4f:79:39:14:0a:d9:cc:4d:
21:83:75:58:0c:50:85:01:c6:f6:35:0c:e8:5e:2f:77:27:2d:
f8:d1:33:00:b2:14:a8:02:70:33:6a:93:88:17:af:b3:47:af:
d7:3b:bf:c5:09:86:42:28:64:35:7d:19:3c:27:f3:dc:b0:04:
cc:ff:8d:cb:0f:47:f7:40:ef:6c:bd:8f:0d:ee:66:b5:90:99:
37:6f:df:c9:4e:fb:72:87:00:96:f5:bb:b3:10:1d:8b:04:ad:
d9:7f:17:23:4d:83:e8:ba:9e:80:f6:e5:7c:5e:ef:62:57:d8:
74:40:e8:5d:ce:f7:ce:cd:83:1e:b7:eb:42:cf:ca:be:76:57:
80:ed:d3:a1:79:c4:5b:0a:31:9e:66:be:68:21:79:81:64:36:
44:5a:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:24 2026 by rpki-client