Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
File: fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft (raw, json)
Hash identifier: eYsTmbMXAXOwgt2hxNWVjf+s2qGVx8cX0uef95/2rBM=
Subject key identifier: BC:35:1C:F5:1F:FE:A1:66:C5:83:35:12:96:D1:92:3F:3F:B5:E9:71
Authority key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
Certificate issuer: /CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Certificate serial: 019D9A3E0AF3C4C28D3D244F6565C687562A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
Manifest number: 070B
Signing time: Fri 17 Apr 2026 07:00:50 +0000
Manifest this update: Fri 17 Apr 2026 07:00:50 +0000
Manifest next update: Sat 18 Apr 2026 07:00:50 +0000
Files and hashes: 1: A0kDV6HOq6FdY-LkUzRoio2xA9Q.roa (hash: i9DOUjMa7c5ZM14JioAbWMihtBuOPOBDq4Dq7r6lxQg=)
2: fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl (hash: +v8ziPce/qRV+j92J87wVR1VsnxCl1UMyBmFFjDTehw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0a:f3:c4:c2:8d:3d:24:4f:65:65:c6:87:56:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Validity
Not Before: Apr 17 07:00:50 2026 GMT
Not After : Apr 18 07:00:50 2026 GMT
Subject: CN=bc351cf51ffea166c583351296d1923f3fb5e971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:c0:56:6c:ce:aa:53:ed:0f:63:ea:5e:78:
50:db:c0:d6:fa:71:75:47:e2:38:c2:d9:17:11:7b:
6a:e3:a8:10:69:4f:5f:25:ec:09:32:4f:8d:7f:1b:
c0:c0:ea:8a:96:a7:70:d0:ce:c8:9d:e9:c3:ca:6f:
48:f9:69:c8:d0:56:9f:d1:2e:ca:08:6e:e7:d7:f7:
38:5e:7d:d2:df:ca:c5:ea:49:9e:1d:8a:3f:42:27:
d6:71:b9:99:9f:17:e4:2a:ce:1c:63:52:84:6e:fc:
af:b1:9c:a8:fa:52:2c:df:64:f4:c4:a8:65:b1:36:
3f:cf:69:d6:e6:a8:55:1f:67:8d:d9:7e:fc:9c:73:
03:0a:36:35:f7:85:1c:e4:3b:cb:11:3d:d5:47:e4:
13:cb:1d:7c:fc:15:5c:1e:69:50:6c:e9:7a:26:ce:
d5:10:71:5f:61:5e:7c:74:98:49:f8:0b:46:7b:9f:
f6:7f:16:2d:04:97:3a:b5:b8:7d:ee:4d:68:92:0b:
2a:99:1d:ba:75:fb:af:87:12:1c:50:ef:3f:38:21:
7c:40:f4:00:dd:db:2b:f4:85:08:3d:fc:2e:74:bd:
90:87:c9:97:10:2e:f0:63:06:c7:11:31:a0:df:a7:
7d:29:50:c7:83:c4:cb:08:98:b7:53:54:69:17:f8:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:35:1C:F5:1F:FE:A1:66:C5:83:35:12:96:D1:92:3F:3F:B5:E9:71
X509v3 Authority Key Identifier:
keyid:7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b7:44:34:e7:9c:30:fc:48:a8:5f:83:62:15:82:2d:10:9d:
1d:9f:cb:3b:60:7d:34:5f:c1:e2:09:79:33:02:62:06:a9:1c:
74:58:f3:b6:95:23:b4:6d:6c:95:a1:30:ed:4c:19:d9:a9:9f:
48:e9:5f:c5:14:21:aa:30:24:bd:bf:f7:ee:e5:6e:6e:69:4d:
2c:e9:93:af:2b:5c:83:64:6d:f3:b3:4d:3b:65:22:a4:84:9e:
b1:86:01:bd:bd:54:a3:83:57:d3:aa:73:37:bf:4d:27:fb:5e:
ee:ff:19:bb:0c:36:b0:76:89:25:44:a2:a0:f3:ab:6a:82:f9:
3b:26:ab:8f:e2:55:cd:e3:1a:32:97:a3:fe:64:11:c5:81:a6:
47:a0:37:3e:f5:00:f9:ba:f7:c3:6a:f9:fb:5c:9a:9b:06:af:
69:35:1a:cc:64:e7:ec:c2:0e:c2:27:d7:00:a2:c3:80:f5:03:
ea:aa:d5:f2:e2:8b:5b:0b:41:55:f6:0a:1e:ee:ca:76:dc:da:
39:68:58:31:ea:39:f8:dc:2b:cd:fc:8e:b3:66:52:2b:0e:9a:
10:3b:39:79:3e:cb:56:d2:25:3e:b2:f9:c8:cb:e7:9a:a4:3e:
d9:83:e9:9c:8b:3f:8b:b1:39:81:6f:04:22:10:49:2c:ff:48:
fb:4e:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:16 2026 by rpki-client