Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: IjXGHzxmwttNRoHBRkkJeZDC2WKbVw+b7iUlBEQnL4Y=
Subject key identifier: 8B:B0:75:C1:FD:1C:AF:1A:00:39:00:D5:7C:D3:E4:CC:69:88:7B:F4
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 019CAAC6D49A60010413C02E4D95ED53EBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 0F5A
Signing time: Sun 01 Mar 2026 19:01:23 +0000
Manifest this update: Sun 01 Mar 2026 19:01:23 +0000
Manifest next update: Mon 02 Mar 2026 19:01:23 +0000
Files and hashes: 1: CUW86B2DR7frkjRXhMj0tpGfzR0.roa (hash: +AMltbCrgBtIU8+BHyMcK4ZbfgEd7AgGyNWp1F2ZA24=)
2: FG6edaLthXtNRXgQz784XZNgYd8.roa (hash: 5nX8hTmpLoy7w0liaeZHVLXCjdNjFlEQzahTMpZo9sE=)
3: FOLDqKxEVMdWWcpgZnPDCyuO3M4.roa (hash: 0gkvmBgKUujlvBMJPfV/1P6cRqx430AdiJwroTPunR0=)
4: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: yaSvea5WOBJvuCR/ueJXw91wGDjaqxBR28TDcbcWsOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d4:9a:60:01:04:13:c0:2e:4d:95:ed:53:eb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Mar 1 19:01:23 2026 GMT
Not After : Mar 2 19:01:23 2026 GMT
Subject: CN=8bb075c1fd1caf1a003900d57cd3e4cc69887bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:35:d1:19:98:a7:dd:77:95:b4:10:4f:6f:
d9:5e:aa:5b:07:68:e5:3b:8b:d2:fc:40:0e:fd:da:
2f:5f:ed:e5:48:77:80:70:db:47:16:9d:a4:e0:c8:
9d:a0:f2:83:3b:c1:f7:f8:f5:0e:73:b1:26:a6:29:
9d:59:81:4c:d7:b2:76:3a:79:df:1a:41:c6:82:a7:
d9:f8:9b:11:dc:b0:a6:9f:9c:d4:b6:8e:53:05:6d:
3e:76:2d:21:b0:05:b2:13:79:fd:ac:cf:da:4e:98:
da:08:98:08:5a:a2:9b:83:c4:38:0c:28:a9:56:d8:
d9:03:d4:98:ce:89:af:f8:cc:87:c7:12:7f:17:66:
cb:c9:d7:0c:47:7e:bf:d4:e7:54:41:2d:7b:d1:1e:
b2:a5:ba:e1:44:02:50:9d:76:0b:0e:34:29:7d:4d:
fc:f2:df:aa:39:7e:44:f5:a2:72:94:04:56:d6:73:
65:43:f2:0f:ae:6a:97:00:2a:bf:01:38:52:50:63:
81:b8:18:d1:e0:55:a8:77:c1:18:35:cc:ae:32:de:
92:06:6d:72:cc:11:94:5c:85:97:72:9e:02:0b:ee:
de:d6:d2:d6:1a:13:89:c3:7d:e7:0a:be:34:51:20:
55:0e:03:d0:a9:98:9c:02:92:d0:8a:c5:d6:10:f4:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B0:75:C1:FD:1C:AF:1A:00:39:00:D5:7C:D3:E4:CC:69:88:7B:F4
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:12:eb:64:16:86:c9:4e:e7:c7:a4:b7:d2:33:02:fb:14:b5:
1f:13:28:28:0d:be:c0:f6:eb:da:df:65:6b:56:e6:a3:04:80:
a6:46:48:9e:d3:29:f7:53:2e:a8:de:87:79:34:d5:52:ef:b3:
28:e2:a2:05:5f:82:5d:55:d2:a2:23:bb:21:a6:45:b8:c2:0e:
d2:95:7a:4b:de:40:b2:1a:4a:4c:6c:65:10:bf:d3:94:5f:19:
d5:51:89:06:8d:31:b1:52:6a:fa:8e:e5:82:1b:0c:7e:ed:da:
76:bd:ee:24:87:db:61:29:05:02:6f:66:ed:de:a4:00:91:69:
a5:a4:4d:bd:f8:39:0a:f6:13:a2:29:a8:27:f8:3a:11:33:74:
11:c5:24:13:9c:af:d6:ad:6d:b3:84:16:d0:67:52:16:bb:b5:
87:0f:b0:5c:61:4a:1a:92:7f:69:8f:d3:d5:4b:72:4f:a6:82:
c1:59:fa:89:49:96:66:40:bf:7f:1e:4d:45:ee:69:00:5a:7a:
2d:ee:7b:c9:44:f8:8d:d3:53:a8:6d:c0:98:d1:ee:94:cb:67:
e9:ea:e3:2f:2e:11:81:d2:ef:c5:de:13:c5:f8:ea:1e:71:91:
e4:1b:bd:2e:80:72:ce:fe:4e:83:c6:c5:9e:03:8d:88:08:e4:
df:e3:1f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:05 2026 by rpki-client