Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json)
Hash identifier: tajnUtiH0cAmVqkVht4pTeLHYvmpIM+c4DbvCUHOMWk=
Subject key identifier: FD:82:7A:72:1D:33:8D:88:23:20:8C:ED:BC:18:8C:5E:C4:BB:0E:C8
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 019CABD96BE37FB67E136FA2F32AF72508A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
Manifest number: 1061
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: Gtwjc7NNuv58O6hnKDqBYDJmyRQ.roa (hash: LK5oiJ5hBo2z5XWsMY/8RHb1LgIogizoQEzKylCXOUQ=)
2: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: ipeG1Ib3ae2tWzddpD9T3PNB+1wW4Q7rJ3P2ytFvfZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6b:e3:7f:b6:7e:13:6f:a2:f3:2a:f7:25:08:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=fd827a721d338d8823208cedbc188c5ec4bb0ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:0d:bc:2a:f8:6e:6d:d3:c1:a9:40:6d:43:
f4:5d:d6:97:ac:c1:a2:ac:df:88:40:48:d6:ea:c8:
ae:b6:3a:b8:7e:e6:26:22:5a:c0:78:92:30:cb:2c:
a9:7a:cf:ce:b1:74:19:bd:cc:3e:a9:f1:b5:3e:94:
c1:17:b3:c7:c7:27:6b:8c:6c:75:97:21:16:fa:e6:
1b:ab:e7:76:bf:fe:06:b2:5a:ce:ec:29:fe:92:4a:
ac:14:48:68:f5:b9:5f:80:e5:ab:eb:04:12:48:88:
5e:6b:1e:ee:39:ec:73:b7:88:48:a0:bb:37:70:41:
06:8d:75:24:cd:de:df:b1:bd:9a:7c:e4:e0:34:ae:
99:da:94:1a:79:8b:e5:1c:de:c9:8e:4c:26:6e:1f:
42:42:1b:99:ac:ed:79:e5:4e:3b:ac:af:4c:1e:7f:
ee:a6:0b:f4:e8:8a:13:18:5c:a6:17:5d:9b:73:16:
40:60:6f:e7:b0:ad:ca:a0:15:5b:ff:33:74:d4:7a:
2d:2b:a4:ff:21:4f:76:c2:1f:68:22:64:75:28:41:
c2:18:0a:f8:0e:1d:43:74:93:f3:51:b8:60:5f:a9:
b7:2f:d9:a5:58:c2:84:b3:d7:88:16:79:77:49:87:
fd:5c:52:4f:b3:0c:3a:e0:4f:fc:67:26:f9:86:30:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:82:7A:72:1D:33:8D:88:23:20:8C:ED:BC:18:8C:5E:C4:BB:0E:C8
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b5:1a:7c:d0:8a:6d:d8:8d:35:45:de:5e:ad:64:75:8e:b7:
da:92:88:e7:8e:d1:c3:94:0a:e0:7c:bf:45:cf:55:1b:d5:4a:
77:67:eb:e3:48:38:7a:8d:c9:0f:25:5a:d2:6c:d7:ce:d8:93:
91:8b:b2:fc:63:3b:91:a9:d7:50:3d:b1:8a:20:43:12:7f:90:
7c:3b:d5:1e:e5:31:f3:b5:45:f4:66:0e:64:08:9c:cd:0d:b9:
95:11:05:f9:04:48:70:25:e7:5e:ff:eb:f8:15:3a:db:1b:46:
d6:be:cc:b3:40:60:56:45:44:e7:af:1c:02:33:be:92:e1:af:
ec:53:85:6f:41:ab:fe:ab:fe:94:39:cc:6d:5f:28:33:e8:1a:
11:b2:8a:da:22:06:1c:75:8b:1d:3d:98:8d:25:1f:40:0b:84:
e4:8d:b9:9d:a5:93:42:49:f5:ea:3e:4e:2d:2b:45:0d:69:80:
d4:83:72:89:92:ed:2a:4e:2d:64:8e:39:9a:48:a1:5e:11:ea:
50:55:13:09:9e:b5:4b:73:3f:30:fd:5d:e3:5b:fc:26:83:15:
e4:a9:08:cc:32:0c:0f:7c:4b:1d:1f:e1:e0:9b:c5:03:dc:57:
56:be:e7:76:6c:77:de:32:f2:00:6a:fa:e3:f8:fb:16:9c:0e:
85:ac:2b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:02 2026 by rpki-client