Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: QxsScJWxoIQ+0a6rJX5x1zW2/FTnEfbr2HJ8zXr5CAE=
Subject key identifier: DD:0B:2D:A2:6E:2A:8A:EC:5E:CE:4D:83:11:1D:12:4D:9E:BE:D4:46
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 019CAF47A4A435F9F75BF84FA8520AFD51F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 0362
Signing time: Mon 02 Mar 2026 16:00:33 +0000
Manifest this update: Mon 02 Mar 2026 16:00:33 +0000
Manifest next update: Tue 03 Mar 2026 16:00:33 +0000
Files and hashes: 1: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (hash: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI=)
2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: M83x42pIZrB5Ou81I1IKAYZFNLgxigwVCtkUi8Hdt2Y=)
3: kZ_QLDF4UjP63-RQO5uGQvJwAKg.roa (hash: GT17iGmvyx7VuRxULTyyPoqEbSTqD+0/CsQqVCeuwic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:a4:a4:35:f9:f7:5b:f8:4f:a8:52:0a:fd:51:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Mar 2 16:00:33 2026 GMT
Not After : Mar 3 16:00:33 2026 GMT
Subject: CN=dd0b2da26e2a8aec5ece4d83111d124d9ebed446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:70:f9:f5:27:7f:23:ed:fe:d6:f8:3e:49:
33:86:5d:a0:23:16:9a:cd:69:19:30:05:53:b1:9c:
9e:ac:50:73:e4:7f:b5:59:ef:57:5a:17:8b:de:2f:
e0:f6:87:20:88:3b:83:58:c2:7b:48:30:03:f1:b5:
5a:64:fc:4d:be:a4:02:0a:90:16:0b:0f:27:5c:5a:
4c:11:fa:4f:20:33:9f:2e:25:e8:ee:96:cd:3c:61:
f9:ee:62:8b:9d:37:a7:97:dc:bd:e7:e4:f2:65:a9:
b0:91:40:57:38:16:76:73:e8:f1:26:18:95:64:26:
e8:dd:9a:4e:90:27:89:6b:c3:47:79:26:db:14:23:
0b:1f:47:27:94:2b:0c:d5:39:fd:7c:ae:e0:d3:1f:
39:c2:15:e7:1e:84:de:bb:bd:06:4e:ad:68:63:0e:
f8:cb:bb:39:7a:f6:5d:14:43:ff:7d:bd:d3:79:72:
b4:5d:ed:c1:04:7f:03:56:90:ad:41:12:29:35:b7:
4b:99:d9:d6:1e:e8:bd:b3:86:c0:f9:d6:aa:0f:a0:
b4:81:90:dc:1d:74:67:f9:51:ae:59:d4:b2:be:86:
8a:64:f0:b1:fb:5b:d4:78:b8:92:75:53:16:cd:2f:
f7:9f:f0:11:1c:b5:7a:29:bf:d7:ed:48:3b:24:d7:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0B:2D:A2:6E:2A:8A:EC:5E:CE:4D:83:11:1D:12:4D:9E:BE:D4:46
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:8a:39:b2:27:f7:1a:3c:78:4e:97:f2:c7:dc:c7:5b:b3:f4:
07:d7:a5:72:59:47:de:e1:06:6a:ae:ff:fb:e3:0b:c5:64:d5:
fa:bd:57:0d:fb:53:c4:9a:9c:07:60:ab:3b:d2:bc:91:0a:77:
66:81:be:8f:8c:6c:e5:66:a8:88:9d:5a:22:9f:20:75:2e:18:
f6:1a:23:89:40:63:c2:38:37:8d:cb:36:76:ac:8a:50:2f:ad:
47:a6:80:ba:42:91:cf:67:41:38:ce:22:5b:d8:3c:d0:b6:f1:
d3:b1:cc:7e:eb:c6:6e:ce:5e:0e:d0:b7:f6:ae:1b:74:e0:fa:
11:7e:be:24:0d:7b:1a:f3:2f:4b:8a:f8:de:80:29:fd:89:e4:
e7:30:3f:67:7d:3c:1b:60:82:22:b7:16:b3:49:8c:be:99:ab:
7e:74:ad:41:e8:df:46:e2:2c:ab:84:f6:3f:dd:32:39:20:f9:
4b:01:c0:b0:14:a3:89:96:af:6a:d9:68:67:74:31:bb:5f:43:
e7:d5:42:cc:b8:27:e8:81:ca:8c:80:74:be:43:79:e7:de:8a:
ae:3e:c8:59:fd:c3:e2:73:24:39:cb:b3:10:65:0e:c4:07:0f:
a6:45:bf:70:cb:88:ba:d3:ad:2e:00:43:15:0f:03:44:26:10:
af:76:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:25:52 2026 by rpki-client