Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier: Dlbls5ayEhjxh3KEHPhJuwOWQHOkfTk7Gh/ylf9/ojI=
Subject key identifier: 17:85:07:61:AB:CC:DB:B8:BC:BD:9F:29:00:FB:49:0A:7C:9D:B9:57
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial: 019CAC1009F115A16171E3238AFF8DC71E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number: 128F
Signing time: Mon 02 Mar 2026 01:00:58 +0000
Manifest this update: Mon 02 Mar 2026 01:00:58 +0000
Manifest next update: Tue 03 Mar 2026 01:00:58 +0000
Files and hashes: 1: beJshXTCFytgHzjAamZUfkQuubM.roa (hash: Lh9/62VbhV+tIPQCobGS97fKdIV26rAllSw/ibORPkA=)
2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: 70lGcw6FLDH70Gw+uy4gS0nn0mkjL6eQI7GrUrhjJMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:09:f1:15:a1:61:71:e3:23:8a:ff:8d:c7:1e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
Validity
Not Before: Mar 2 01:00:58 2026 GMT
Not After : Mar 3 01:00:58 2026 GMT
Subject: CN=17850761abccdbb8bcbd9f2900fb490a7c9db957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8e:38:66:56:2f:ae:50:88:6f:bc:8c:b4:60:
26:d5:5f:27:f0:15:8b:a8:92:d5:0d:68:ae:03:21:
e6:41:7f:eb:47:a2:8c:78:d7:00:e5:44:0a:4c:bd:
69:f1:da:f1:71:37:ab:c3:da:66:ae:b7:7d:41:3d:
26:cc:d3:93:f4:6b:6a:64:68:3a:09:ee:ba:4c:2b:
dd:b0:b2:a7:e8:d1:cd:ef:cc:03:d5:45:70:f5:b8:
dc:c9:42:a3:8d:42:aa:6e:9f:96:77:ec:f6:05:14:
a4:f2:ec:f0:d2:bc:32:db:d4:63:38:a1:b2:2d:bb:
cf:74:ef:19:4b:dd:29:33:9b:9b:5c:57:10:26:25:
57:d2:c9:61:bc:84:ed:be:2e:76:f0:22:5e:d1:ff:
06:38:27:ff:c4:a4:63:04:b2:fb:29:15:4f:89:e1:
6b:fb:a8:3a:33:da:e2:c7:dc:70:16:bf:e3:4d:23:
04:23:fc:1a:06:78:50:e2:3b:4d:2d:bc:95:50:6b:
5a:30:dd:41:6c:73:c7:a9:22:47:60:79:d6:4b:0b:
76:f1:eb:b5:8f:c4:2a:e2:6a:4e:18:8b:7e:e7:04:
58:70:73:33:eb:28:e8:94:96:8f:1b:84:83:2c:bb:
5b:e2:b9:31:23:9f:5f:52:90:d6:e7:e6:87:f0:c1:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:85:07:61:AB:CC:DB:B8:BC:BD:9F:29:00:FB:49:0A:7C:9D:B9:57
X509v3 Authority Key Identifier:
keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d2:5a:1b:92:c3:e3:1b:1a:7e:6c:aa:49:d9:56:b8:53:d5:
21:62:0b:cf:79:63:3b:0e:d7:f6:49:7e:f1:83:cd:14:b6:d3:
8c:c4:22:e6:f2:78:bb:66:c3:d7:ad:29:df:e9:b8:c7:24:72:
5a:a2:04:03:dc:af:43:31:01:b8:b8:03:7c:65:b5:5e:14:be:
e7:de:81:f5:9b:8e:dc:d5:1b:80:e2:d0:2e:47:3c:4d:93:98:
5d:44:24:46:8d:25:85:04:75:40:1b:de:53:2a:c9:4f:85:3a:
8d:86:b3:0d:30:b0:9c:74:bd:e7:41:d4:5e:0f:74:9e:d4:97:
ff:c2:f3:1b:38:3a:38:47:92:b8:03:bd:07:5d:17:ab:0a:95:
d9:6f:d0:0d:14:12:4c:7c:d2:8d:f0:28:8a:5e:19:6e:37:d5:
5d:79:45:77:45:4a:b9:1c:b3:03:fc:69:55:42:96:1d:f2:c4:
46:4a:1a:06:7e:ff:ca:0b:3c:69:77:1e:3f:29:17:e4:69:24:
dc:1b:99:ea:a5:db:0f:8d:69:e9:9a:1c:4e:e8:d8:c3:25:5b:
8d:10:8c:d6:b0:c5:3f:08:b5:fe:3d:e9:a8:87:2e:34:f1:5e:
4b:e8:db:84:66:87:1f:32:6b:59:22:6b:30:3c:14:b8:fd:86:
92:fa:35:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:00 2026 by rpki-client