Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: ACpt8JE4aLL1W7KP/8TSrBZ8z2nV1anL0JwOCLlvcK8=
Subject key identifier: 44:D1:3F:BD:30:42:1B:D2:25:EE:D1:75:98:27:1D:F0:55:86:67:A3
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 019CAF7EB7DFDD4E769C23620FD2576B6657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 03D9
Signing time: Mon 02 Mar 2026 17:00:43 +0000
Manifest this update: Mon 02 Mar 2026 17:00:43 +0000
Manifest next update: Tue 03 Mar 2026 17:00:43 +0000
Files and hashes: 1: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (hash: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8=)
2: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: YsOiC8akK1npo9hk1kngXXwOsgJQV0lOVHfAQpCGxrU=)
3: r9NWEPI6u6L0HITxoVcmXnXadCs.roa (hash: os9y7CavhWu63QlaCtuG1FYwA+ohXqqwFQrtt1Hmj8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:b7:df:dd:4e:76:9c:23:62:0f:d2:57:6b:66:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Mar 2 17:00:43 2026 GMT
Not After : Mar 3 17:00:43 2026 GMT
Subject: CN=44d13fbd30421bd225eed17598271df0558667a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:95:97:0b:51:06:14:47:43:07:f7:61:2e:
29:34:1e:b7:e3:de:65:13:3f:a8:0e:82:95:16:5f:
89:7a:1d:54:60:a0:7c:53:74:4c:c6:9c:53:3d:a3:
89:20:5d:1e:f1:cb:35:22:7b:44:74:41:ac:42:72:
5c:03:6a:fa:46:02:2b:9d:a7:86:d1:9b:16:0f:7d:
97:61:01:4b:f6:5d:ae:21:ce:61:28:cd:27:0b:96:
d1:15:73:46:c0:fb:94:0d:ec:9f:cf:d8:32:65:26:
06:b5:b1:87:10:8c:15:93:1f:98:97:81:85:45:e0:
08:71:c8:ad:88:8b:02:63:bf:b4:86:2e:3d:4f:5b:
d9:1b:e7:72:7e:76:c7:a7:dc:d9:32:e4:e2:41:45:
50:36:20:97:5f:45:6c:98:28:d5:65:b5:0f:27:ef:
52:50:53:be:7f:84:c9:6f:e8:b7:fd:f9:f4:5f:a8:
d0:fb:8d:ea:72:76:41:46:01:a7:77:4c:ef:df:1c:
75:6f:a5:02:96:22:6d:a4:1c:5f:cd:26:22:9b:bd:
28:32:1f:a3:b7:08:d6:0e:21:f4:c9:c6:ad:63:e9:
99:60:18:7e:e0:e2:e3:99:8d:26:04:1b:3c:8f:f7:
4e:4d:47:f9:5c:c6:b0:f5:da:8f:07:6d:f6:63:54:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D1:3F:BD:30:42:1B:D2:25:EE:D1:75:98:27:1D:F0:55:86:67:A3
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:08:c8:7a:62:9d:52:6b:d8:d0:1c:1f:02:da:d3:01:89:4d:
8a:46:b1:ec:59:38:4b:bc:58:2b:10:9c:a2:ed:a1:07:f9:b2:
7a:cc:a2:4a:c0:14:89:a3:e5:3e:5c:65:70:ae:c6:97:05:a6:
70:df:cc:03:1e:64:af:8a:bf:a6:7f:b1:7e:b9:47:d8:3f:77:
a9:cd:a0:07:06:0f:23:87:52:5c:db:87:a9:fd:6f:bf:cf:3f:
ad:01:10:8a:c8:00:b2:1f:c6:ed:9d:31:ea:64:8b:cd:09:f6:
13:2b:39:16:2f:2d:21:f3:31:98:c9:81:61:c7:e6:cf:4d:f4:
f9:e3:89:f5:d9:a0:d1:ca:00:d2:b6:fd:cf:35:7d:02:de:a5:
7a:c4:33:fb:0b:8e:b3:f1:0e:82:0c:cd:0a:1b:74:68:0e:f9:
f0:45:09:99:db:f9:be:70:ee:98:5d:a4:b9:96:56:30:b6:72:
0c:32:30:ae:16:22:4b:33:c1:83:1a:ac:9a:36:50:94:bd:fe:
06:36:e1:d0:8b:d5:dd:3d:c5:c8:21:36:12:03:29:25:c1:62:
97:99:04:78:b0:bd:a3:66:6f:ae:9a:b5:58:50:d7:14:6e:41:
78:04:29:64:2a:04:2d:e4:bc:97:ad:5a:34:0e:f0:3d:4f:80:
f7:8c:3c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:25:34 2026 by rpki-client