Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: GEmz4hhTwBGr1iMLzJpl0sjUr8mUXr2Q4rNAHa7lFx4=
Subject key identifier: BB:2D:D3:DC:D6:60:04:30:C6:82:EC:F7:44:A8:DE:B7:48:BC:51:AE
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 019CAA58AD614244290CAE08A009FB5C6DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 11EF
Signing time: Sun 01 Mar 2026 17:01:04 +0000
Manifest this update: Sun 01 Mar 2026 17:01:04 +0000
Manifest next update: Mon 02 Mar 2026 17:01:04 +0000
Files and hashes: 1: OGNMh9luEfhWYSfkuTxUdvEw3T0.roa (hash: W+Y0DYRWsQtmVscqd/FelKkUl50HuhEP05K5AvhVU6w=)
2: _wcSqPRV5JgTozaPPAply-Zy5SI.roa (hash: kaddq5Zo4l9c0eBW6a1M05v2cAL5RJlZmJFBmkNxnmk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: XXHLwYroUSf19YjgJbf6o3rG7TJMvkXhdLIUAIcDEPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ad:61:42:44:29:0c:ae:08:a0:09:fb:5c:6d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Mar 1 17:01:04 2026 GMT
Not After : Mar 2 17:01:04 2026 GMT
Subject: CN=bb2dd3dcd6600430c682ecf744a8deb748bc51ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:ba:16:27:02:34:fd:0c:86:23:6d:6d:29:
00:c6:6b:4d:f2:6c:c2:8f:b1:c9:ba:01:ca:91:c5:
89:be:f8:b2:4c:7f:49:c1:10:9a:70:8c:ac:0a:c2:
57:43:17:73:ce:4d:11:4e:95:35:8b:c6:6e:db:41:
f9:da:6a:ba:62:34:ad:d1:19:53:7f:8c:4b:90:72:
7a:aa:92:7b:19:f8:72:3c:67:51:53:cb:b6:de:6d:
52:1e:00:9f:b3:fe:a6:71:e0:33:06:c9:5d:07:fe:
89:39:54:04:ba:89:51:8e:7a:bf:b8:fa:b6:08:aa:
5e:68:f6:6e:75:34:bf:c8:e7:14:ac:4c:9e:c5:cc:
fb:b6:67:4b:67:5d:90:cd:9d:96:ea:9a:61:fa:88:
12:fe:c0:aa:75:75:a9:33:10:ee:a4:ff:06:c0:ba:
2a:a5:ec:31:84:09:96:92:71:62:20:cf:d5:2e:b3:
58:61:b1:a0:c7:9b:ba:1b:2a:0e:eb:a4:79:c8:9a:
4a:98:ec:d4:09:32:3a:7f:01:b8:b5:f1:20:69:af:
a4:a6:ad:2c:82:30:ab:bf:4c:30:6f:84:50:a1:4c:
f0:c8:a4:b7:d2:0b:a8:77:a3:08:02:46:a4:f9:fb:
cb:04:85:a5:cc:be:d9:d6:29:a1:f4:ab:06:bb:fd:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2D:D3:DC:D6:60:04:30:C6:82:EC:F7:44:A8:DE:B7:48:BC:51:AE
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fc:ba:b8:43:be:91:57:1f:75:c4:fa:67:ae:53:78:00:e9:
7e:2b:ee:ba:f6:66:a6:6f:6d:6d:da:49:d4:64:ca:d8:a4:a0:
3e:f3:56:e2:c5:d4:91:b8:59:40:35:c7:3f:46:cf:e4:72:3a:
ac:48:84:88:d4:45:31:36:91:c6:21:42:ed:e7:32:e6:2b:49:
c4:26:7b:d8:ec:f6:1e:81:1a:57:58:ab:0e:23:07:d7:95:00:
54:b5:c9:36:0d:ef:cb:f8:53:0b:10:09:6c:5c:ab:75:bb:8a:
3a:c5:59:f9:ba:cb:b1:06:41:7a:fc:38:3c:dc:e4:e0:ec:4f:
c5:e6:ff:51:44:dc:ff:16:9b:02:cb:cd:91:ce:84:e4:21:91:
36:d1:65:92:12:49:73:cc:43:ec:83:79:95:92:b4:c1:95:c8:
6c:91:14:5b:57:ef:33:f8:23:40:4d:b1:f0:55:29:79:25:21:
22:77:87:a1:f3:e0:68:37:8d:b0:fc:8e:e9:8a:67:69:3f:06:
6b:90:9c:52:ed:3d:b0:b0:f8:f0:a0:f4:7d:d1:8c:4e:59:9e:
cc:e5:c2:d5:9d:e8:e1:2b:99:69:15:99:2c:ce:75:88:ed:12:
2b:be:66:41:33:2c:f8:76:b4:c3:a7:5d:ed:05:87:6a:4d:86:
c8:0f:5f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:26 2026 by rpki-client