Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File: fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier: g1DLjQNgtU5OFQer/frbomp0xtb8CRWwrdxcOcT3BO4=
Subject key identifier: 6C:0F:10:6A:9B:C3:0A:A7:C7:18:EF:16:10:04:17:BB:CD:98:22:B6
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 019CAAC6E227F3EF06F69DC6F0C3E7F4B059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number: 0FA5
Signing time: Sun 01 Mar 2026 19:01:26 +0000
Manifest this update: Sun 01 Mar 2026 19:01:26 +0000
Manifest next update: Mon 02 Mar 2026 19:01:26 +0000
Files and hashes: 1: Oz9Ttp-AVh76JnAb-kMb1xzkjno.roa (hash: sEZiAkfsJFCuDJdfukBNYz0nrUtamX75upkoItAaXTU=)
2: bvjL4ilRFW0KRgukAA7c6bj--pM.roa (hash: NB7wiQjjbBAzpwPNdbh06lraiRIpqpLN7dXPm6C9Qc0=)
3: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: qJLjXLzXKvGUmm6RYn68fbXZCPIsW9Z4VfGfTs5nATY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e2:27:f3:ef:06:f6:9d:c6:f0:c3:e7:f4:b0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Mar 1 19:01:26 2026 GMT
Not After : Mar 2 19:01:26 2026 GMT
Subject: CN=6c0f106a9bc30aa7c718ef16100417bbcd9822b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:75:e5:0c:9b:ee:da:e5:3c:4e:30:56:3d:
9d:f2:2e:35:7d:7a:27:f6:92:e4:f3:b2:9d:c9:ca:
1f:3a:00:50:da:80:21:c2:ca:d9:10:27:4b:59:b0:
39:92:62:d3:e4:a5:c9:88:03:4a:76:27:a8:71:d5:
f9:21:61:55:b7:b6:2a:83:86:77:f8:7d:29:d1:48:
bd:83:52:aa:4e:16:9d:d7:ca:a0:58:d6:f9:32:3d:
21:51:fd:0d:54:b2:2b:84:d3:fc:c8:9e:a3:58:86:
de:54:1c:e3:d5:40:cb:10:a3:98:0a:13:e5:9d:b3:
ff:8c:0c:3f:34:b1:d5:c8:2c:2d:64:e1:5a:3e:a9:
dc:49:09:70:c1:94:cf:7c:f0:2c:ef:6b:75:90:3b:
e3:57:41:f6:a5:8d:9f:bc:5a:4e:b8:e0:ef:eb:ef:
29:a4:a2:19:4a:10:5e:d9:ac:41:4f:47:60:bb:29:
a2:68:a9:d6:4c:33:a2:f5:25:15:6c:5b:86:c3:f6:
22:01:d6:87:83:3a:a2:29:d5:a2:e6:b8:2e:49:0c:
f3:7f:39:ab:57:b5:17:82:85:d6:75:1c:ce:33:a7:
19:38:d6:ac:93:9e:ac:40:5d:a5:7d:6a:ce:52:ab:
d6:7f:0c:41:9f:81:25:00:7b:ae:d8:8e:15:40:0b:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0F:10:6A:9B:C3:0A:A7:C7:18:EF:16:10:04:17:BB:CD:98:22:B6
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2f:76:0f:66:65:41:34:62:39:a5:d4:c0:04:6a:75:ab:36:
b0:d5:f0:79:70:ed:7c:66:1c:dd:54:96:48:15:a8:23:d0:14:
16:da:86:28:b3:e5:d7:20:9a:c0:33:7f:4b:db:d5:da:99:6d:
99:f3:99:ca:8a:48:5b:6d:e0:66:1e:bc:be:a3:fe:72:6c:84:
57:32:61:d5:70:88:8a:6a:c2:22:17:5d:07:3f:17:f4:1a:30:
55:36:ed:d9:ab:9a:9e:46:bd:af:db:d3:b5:d0:ad:f1:36:80:
52:10:f1:3c:8e:97:05:3e:fb:ab:df:06:e6:cc:99:a4:4b:b2:
c7:f5:ed:b3:3b:72:79:91:27:d2:53:fe:1f:04:e4:af:33:37:
68:7b:85:02:1c:2c:90:6a:cd:6a:af:9d:c4:16:97:9a:dd:f3:
4d:51:6a:3d:6b:fe:20:12:6c:b1:d1:8a:07:d5:47:9d:1d:bb:
2f:be:24:8a:95:d3:c0:76:f8:d5:7c:ca:b1:05:0d:41:7e:98:
2d:ad:57:50:62:f4:db:f5:60:81:f4:92:6b:c3:d3:0f:42:0d:
36:c9:f9:c0:8b:90:c0:fb:6f:42:91:f0:1b:6f:02:3d:1b:91:
08:37:11:89:79:05:e3:1a:5a:ed:53:02:2d:17:39:95:d0:0f:
ea:ca:4c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:35 2026 by rpki-client