Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File: fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier: rrlDeZoBO34pzHRqMvJY9ZvZ8EQBuMhE5yJ9GkBrSQE=
Subject key identifier: B1:AC:7A:5B:4B:24:30:D2:DE:F5:F8:25:7E:17:21:E9:98:3C:B2:D0
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 019D9A3E389D1DB38F205EE221DEAE059BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number: 1021
Signing time: Fri 17 Apr 2026 07:01:02 +0000
Manifest this update: Fri 17 Apr 2026 07:01:02 +0000
Manifest next update: Sat 18 Apr 2026 07:01:02 +0000
Files and hashes: 1: Oz9Ttp-AVh76JnAb-kMb1xzkjno.roa (hash: sEZiAkfsJFCuDJdfukBNYz0nrUtamX75upkoItAaXTU=)
2: bvjL4ilRFW0KRgukAA7c6bj--pM.roa (hash: NB7wiQjjbBAzpwPNdbh06lraiRIpqpLN7dXPm6C9Qc0=)
3: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: 3mADjnc8A3YC39nmMVY2AKPerl9P8zo3mPeONJxx1hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:38:9d:1d:b3:8f:20:5e:e2:21:de:ae:05:9b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Apr 17 07:01:02 2026 GMT
Not After : Apr 18 07:01:02 2026 GMT
Subject: CN=b1ac7a5b4b2430d2def5f8257e1721e9983cb2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:c0:91:93:cf:f9:c8:69:da:6b:17:52:0f:
96:12:77:e1:79:37:60:05:b9:e9:c7:ac:14:ea:ac:
40:c6:f9:8f:07:8c:1f:a0:53:04:e9:c4:85:c4:66:
c7:36:98:ac:a4:55:6a:6d:d3:89:cb:49:77:c0:a0:
39:55:6b:36:12:e1:80:c1:38:23:9f:bf:0e:3a:6b:
02:38:8c:00:14:d2:08:f5:4b:db:f6:f9:51:5a:78:
53:f6:89:20:4e:71:58:d7:60:47:5d:e1:ff:8f:90:
a4:ba:61:8a:52:23:ce:02:ee:5e:19:4a:06:58:23:
f0:22:1e:c9:63:e8:89:94:b9:68:c6:7b:82:f8:51:
ba:6e:19:16:5c:71:9e:f4:49:5b:7e:e0:da:e8:25:
a3:56:78:a9:58:48:c7:c6:28:54:61:ef:fb:07:c8:
48:c4:bc:9a:6a:74:5b:2b:58:38:72:c4:e8:66:c7:
ea:92:e2:87:a4:83:5e:e7:cd:03:15:6a:f2:fb:47:
f6:c6:12:83:2a:b3:0b:8f:f2:c0:07:51:f4:dc:84:
e9:04:08:02:cf:71:41:45:34:f1:06:9c:f1:10:db:
b9:72:5f:c0:a6:62:55:08:d0:bd:e6:9a:25:92:3a:
5e:bd:7a:43:90:b0:df:af:49:57:77:14:d3:3e:8e:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:7A:5B:4B:24:30:D2:DE:F5:F8:25:7E:17:21:E9:98:3C:B2:D0
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:62:32:64:8a:a0:40:ce:1d:ea:65:b7:b5:5b:30:fe:46:37:
ec:21:f9:3a:c4:f0:2a:2d:7a:56:0a:c1:b1:72:1a:ae:d3:04:
64:73:84:d7:1c:ad:05:15:44:9e:44:79:83:f4:44:8e:32:fc:
d9:7d:e8:60:de:e7:f2:ad:97:04:51:99:0b:e5:6a:41:41:48:
2d:26:6e:3d:f4:b4:14:9f:1c:2b:67:33:a4:4a:3a:a1:e4:b2:
1c:a3:e7:a0:55:61:e5:9a:28:92:f5:d3:e3:ff:00:d3:da:0e:
97:0e:ce:22:41:9d:9d:ab:f7:b0:ef:55:c1:ac:09:69:7f:6e:
59:db:93:89:2a:3c:df:07:e1:41:21:dc:3d:fd:41:43:c6:e7:
5c:92:23:12:4e:e6:9f:2b:2c:6d:66:a9:35:af:3f:4b:3e:80:
56:85:08:11:03:11:2c:76:e6:13:fc:f7:42:05:09:05:be:be:
54:d5:c5:b5:2f:7a:be:0d:24:2f:08:01:cf:6b:50:57:15:6b:
03:63:91:29:89:a6:4b:4d:c8:08:cf:0b:05:dd:e3:06:a0:00:
59:30:0d:4c:55:a7:15:f0:3f:0a:40:79:ec:ee:d2:0c:21:11:
98:ed:59:ab:4c:ba:3a:5c:3f:cf:5a:06:b9:e3:70:bb:21:96:
bb:ab:fe:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:56 2026 by rpki-client