Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: Okvg6sAub86jvuYjFOfUXchBiQZwqKOijw1f+EsivF0=
Subject key identifier: 5D:B3:63:39:B7:7D:42:75:CD:AC:4D:2E:85:C8:33:24:64:36:F6:93
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 019CAF10D9E123559BE1845316E22B9E145A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 15:00:42 +0000
Manifest this update: Mon 02 Mar 2026 15:00:42 +0000
Manifest next update: Tue 03 Mar 2026 15:00:42 +0000
Files and hashes: 1: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: 7gWhXkcV5PUBS9RMyfq+0HwfVXlKJFbKwsqK/lEGOJQ=)
2: grQlShm9Yf4p9v0UY4WRgIC18Rg.roa (hash: 0KLMtmRL0pnGPXXoN5qSCFJywF+voZI8ebkJsYdl6wg=)
3: l1AVp_w4-LVuNkKZXyFJBaRiTqU.roa (hash: pv6l02vTFMwEiJ4PcQNABkmbJULiDmx5aoXWeKtSRA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:d9:e1:23:55:9b:e1:84:53:16:e2:2b:9e:14:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Mar 2 15:00:42 2026 GMT
Not After : Mar 3 15:00:42 2026 GMT
Subject: CN=5db36339b77d4275cdac4d2e85c833246436f693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:b2:53:48:e9:b1:15:1a:60:22:6c:84:86:
2d:6d:dd:d9:42:d6:4b:8f:51:d4:64:b1:1a:63:0a:
cd:87:b3:ce:9b:c8:8c:63:fc:85:05:40:5a:65:aa:
41:a0:fa:5b:c6:22:ef:ea:2b:3e:a7:1b:61:18:c5:
64:ce:80:d2:44:af:f7:12:57:a0:72:8c:b1:2f:1d:
9a:e6:5b:13:4e:94:e9:90:d7:4e:24:a0:c8:12:a1:
1f:c4:33:3a:77:67:47:e9:3e:25:a0:03:f0:75:f4:
17:b1:d5:ff:06:b1:c8:f8:55:20:af:e7:05:f3:34:
6f:f1:bf:85:57:dd:1a:92:8f:48:2e:1b:c1:dd:49:
90:b1:5d:10:50:f3:a6:e4:21:51:10:67:cf:2e:40:
a8:4e:45:c8:e8:0b:1b:b2:da:eb:9a:56:2d:b8:6a:
5e:fb:3c:53:0b:58:42:83:02:7c:29:34:30:0c:4d:
00:4f:1e:37:c1:cf:9c:47:3c:94:ad:21:ce:55:4b:
50:aa:42:85:fc:ba:99:e0:f8:67:a9:62:9a:62:c4:
cb:7d:0f:cf:d5:f7:d9:a5:56:b9:bd:35:7d:44:08:
b2:d2:c5:b8:f2:6d:1b:c1:af:6a:4f:33:cb:36:61:
b5:32:cb:6b:bc:75:f6:8b:76:3b:9a:6a:37:77:55:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B3:63:39:B7:7D:42:75:CD:AC:4D:2E:85:C8:33:24:64:36:F6:93
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:58:d8:40:29:81:ab:4f:85:14:09:d5:24:6a:7f:d0:a2:d4:
62:b0:60:bd:a5:f8:cc:eb:cd:e3:82:99:cf:72:6e:6b:3e:3e:
ab:08:ca:ba:d6:34:f1:19:e5:58:75:70:50:0b:34:00:3a:e6:
b8:77:ef:00:b5:e1:98:0b:48:3e:52:d9:a3:7c:79:0c:30:14:
a0:b6:86:10:9b:91:a3:2f:5a:a1:97:26:a3:d9:81:eb:9d:22:
74:54:7b:8e:3c:b0:17:0d:82:51:64:33:da:e7:51:cf:67:39:
a7:d9:e3:ea:24:67:14:81:f3:ea:dd:aa:eb:c9:a2:74:c7:cf:
8a:ef:b4:e2:88:bc:d1:96:d9:43:16:af:9d:c1:81:6f:9c:50:
86:5a:f7:3d:11:03:c8:5e:0d:01:dd:69:3e:98:61:f9:ca:31:
e7:33:85:45:67:fd:6e:7f:f2:0e:21:a6:80:46:3a:85:b7:c2:
83:e0:6b:a4:09:02:ee:d5:3a:9c:b9:89:0e:b7:93:5a:db:38:
3f:82:78:44:8e:a4:39:6f:e0:15:c9:4e:a9:61:4a:f4:7d:c3:
5e:55:92:ed:ea:6a:ae:0e:c9:37:71:b7:a3:3c:60:16:5f:04:
f1:fe:5e:7f:05:56:89:0d:cf:f4:ed:b2:4d:df:fc:68:66:45:
e6:cd:db:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:26 2026 by rpki-client