Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File: fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier: JukE4kY9Y/zJKS1w3ZiKs1Gd5sgqlRahH3WiMhKPs5E=
Subject key identifier: A5:CA:43:49:AB:12:B3:B7:1E:43:EA:9F:FB:82:EA:0A:8F:6F:47:43
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial: 019CAA585510CC3ADA69C89579DB66C38D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number: 134A
Signing time: Sun 01 Mar 2026 17:00:41 +0000
Manifest this update: Sun 01 Mar 2026 17:00:41 +0000
Manifest next update: Mon 02 Mar 2026 17:00:41 +0000
Files and hashes: 1: 9w9SZI03wkoC4C4p8xbj1xyQTSk.roa (hash: 4ZjNUluDOnXe4+ntofvgh0yoY5kqpiMhMwraHxso+o8=)
2: CfxZ0eGeh6IDIqEVp-fjZEspGOw.roa (hash: 64gVJuHjRSQovFr9XT+uIvTrz2Nlh3y9/QzHL+fzAZ0=)
3: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: USBHGEh4Ku5oNuNxcU//ESNy3OhUVs8S480z1yNAn3A=)
4: hLVnBuf3u_JFi21jPT8scSeq55o.roa (hash: 9Kl/ni4B9iNPukEzlMtSOKbm3FCZbPlEMODKtlh8/eY=)
5: t9sZ-svkNCOn_aB5PqRUJcIA5qw.roa (hash: kWqIg6Zu9e2cjZJBsJNhAniK6OQKlOVK34Tp81YEZc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:55:10:cc:3a:da:69:c8:95:79:db:66:c3:8d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Validity
Not Before: Mar 1 17:00:41 2026 GMT
Not After : Mar 2 17:00:41 2026 GMT
Subject: CN=a5ca4349ab12b3b71e43ea9ffb82ea0a8f6f4743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:59:4a:b7:65:62:77:cf:e9:4f:52:97:3f:
48:d2:d7:4d:a0:56:43:16:4f:1b:c9:53:eb:58:ae:
b2:17:36:f8:55:34:40:ae:89:77:17:d8:59:00:94:
82:70:e1:5e:31:a9:58:f1:1a:59:84:f6:64:ed:f0:
94:e5:e1:ef:72:d3:d9:7a:48:87:6f:7a:4b:c2:30:
0e:76:5d:0c:2f:15:e9:0d:71:e7:c6:31:a1:ec:fd:
80:fe:a3:42:34:74:11:ec:d3:3a:77:d3:40:f2:9b:
7b:fc:ac:3c:70:3f:90:dc:12:74:03:26:37:00:3c:
c3:89:16:50:20:94:ee:5d:14:b7:29:51:bf:fc:91:
c5:53:37:79:90:55:09:08:54:ef:68:9e:6b:25:19:
0d:f1:ce:36:da:05:a9:a1:77:d3:d9:2f:f8:48:37:
07:51:cb:a3:08:87:33:5a:93:b4:99:c6:bf:22:0b:
3d:d3:05:68:1e:a4:a3:aa:e6:95:90:dd:38:ad:4a:
95:ce:ef:c2:ec:32:40:5b:26:70:e1:16:3d:61:d8:
f3:e2:dd:df:5e:8a:b6:0e:28:e6:2f:10:c0:6d:e3:
25:e2:bd:cc:2f:c8:ca:26:65:f9:63:31:74:59:0d:
81:cf:0c:37:6f:a5:71:32:af:82:86:08:b4:af:98:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:43:49:AB:12:B3:B7:1E:43:EA:9F:FB:82:EA:0A:8F:6F:47:43
X509v3 Authority Key Identifier:
keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:97:dd:b1:9d:92:40:9c:da:c6:65:3d:80:44:54:12:c3:38:
b8:a4:3e:50:1b:e6:01:e4:94:36:9f:9d:23:9f:ad:15:4a:ba:
cc:f7:eb:9b:e9:c3:c6:d5:90:64:b6:59:51:d2:f3:22:dd:7d:
e3:9f:34:da:15:47:ec:50:cb:d9:a3:d5:25:8f:aa:8c:28:20:
18:11:4c:a1:3f:ab:88:a8:a2:6a:13:ca:18:a5:5a:0c:de:1e:
20:33:06:4b:5a:f8:94:67:12:1b:98:0a:41:c3:09:bd:3c:e4:
b5:ec:49:1c:1f:bb:aa:05:39:fb:fc:b0:a8:cd:b8:ab:92:db:
04:c5:37:86:a5:73:c1:38:3a:28:4e:d4:a6:c5:23:74:08:db:
d2:30:4a:26:a2:65:19:a8:4b:14:91:15:b4:38:de:1a:7b:2a:
07:da:c7:f7:26:f8:55:7c:cf:ad:12:b1:05:ac:1c:b0:60:6a:
f4:15:2c:73:96:e0:52:ca:01:44:b3:a9:41:37:b0:20:50:0e:
33:5b:1f:f9:e6:64:85:b3:c0:ad:1a:ac:44:bd:4f:05:1d:8a:
50:31:1a:a4:09:44:91:20:4a:06:78:28:da:df:93:1b:a8:d1:
39:d4:36:be:ae:0c:cd:98:fc:5b:d9:45:ea:a3:a4:ba:ef:28:
58:af:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:08 2026 by rpki-client