Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: FRKVOtsqhHfE4OstKsK0zTAhCAB/e+DD5ShnIrcW/8Q=
Subject key identifier: 33:8B:15:DB:BB:E6:3D:F4:BF:00:92:61:23:21:F5:11:FB:DB:70:CD
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 019EC0DA9BD4BD0CF0FB72C1072E3E9466A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0E90
Signing time: Sat 13 Jun 2026 12:00:12 +0000
Manifest this update: Sat 13 Jun 2026 12:00:12 +0000
Manifest next update: Sun 14 Jun 2026 12:00:12 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: kikUv8VU5Q0gdUgHFFaG4aCrECZJdfd2aDZdLLgmU1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:9b:d4:bd:0c:f0:fb:72:c1:07:2e:3e:94:66:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Jun 13 12:00:12 2026 GMT
Not After : Jun 14 12:00:12 2026 GMT
Subject: CN=338b15dbbbe63df4bf0092612321f511fbdb70cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:f7:92:ce:59:96:46:6c:96:b4:97:55:22:
e0:58:5a:ba:5e:67:0c:2a:aa:ba:5f:de:b9:84:db:
3f:cf:53:7e:25:77:4d:9d:28:04:4f:60:7a:05:21:
4d:41:24:b1:c9:eb:4b:bf:78:6f:22:a0:41:16:8d:
26:ee:60:c7:8c:ac:55:bd:9c:bd:3f:42:99:5a:57:
e4:e3:3d:a3:c9:be:f8:19:fb:22:3d:a1:8c:ed:82:
37:b3:b0:88:66:cc:76:e6:f0:74:44:21:a0:49:21:
95:29:21:f7:76:91:ff:9a:08:db:75:92:de:e3:44:
fa:a8:b8:74:18:08:e1:6f:b1:8d:d9:67:32:5c:90:
e2:01:8b:4b:c6:11:df:c8:5c:28:69:8c:4b:d1:9a:
30:9c:e8:10:ef:95:9f:fb:1e:32:f1:94:c9:09:a8:
d9:e1:e8:2e:3b:d8:5a:2d:4c:f4:a4:63:a2:0f:bd:
81:ea:64:99:ba:d7:c2:bd:44:7f:35:49:5e:39:95:
0f:8d:55:d4:9a:2b:c9:61:e7:a4:21:30:a7:40:8f:
86:61:f2:62:a2:ba:05:2f:0b:21:0b:01:30:33:03:
96:c0:0e:df:39:a8:e3:de:fa:63:bb:82:6f:ee:0c:
be:ba:4e:4e:f6:f3:7f:dc:39:f9:c7:80:12:cb:ba:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8B:15:DB:BB:E6:3D:F4:BF:00:92:61:23:21:F5:11:FB:DB:70:CD
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:65:90:32:8c:b9:2e:fd:82:5a:33:a1:18:2d:f7:d5:dd:a2:
f0:3e:58:85:6b:c8:87:27:b7:a5:e5:0c:b4:f8:16:2b:62:4b:
e6:b5:7e:01:78:c1:c2:2e:bb:7b:c3:c2:6e:e6:da:a6:9b:c6:
62:70:a6:ca:f4:1e:0f:c7:93:ae:8a:7a:ca:73:eb:02:da:f4:
3b:86:05:bb:7c:c5:22:1e:71:d9:16:20:ff:49:f1:6e:75:96:
4c:57:e9:2f:b4:a2:7a:8e:5e:a7:b3:91:03:9d:20:c6:9d:18:
da:33:35:ca:23:be:6e:53:f3:7b:82:fb:50:c4:35:f3:8a:82:
66:e7:1f:ed:cd:e1:f9:39:99:98:81:d1:3b:28:ae:ba:e6:bc:
ef:5c:62:c8:5c:5c:08:63:9c:66:fa:6f:5b:56:7a:62:d6:ff:
3f:8e:93:39:f8:b2:17:be:29:51:94:0e:07:b1:c4:6c:6b:58:
91:4d:b3:93:d6:77:2e:01:fd:8c:a2:aa:33:d4:be:c8:14:f4:
21:24:3c:1b:58:e0:8a:f7:08:2e:05:9a:31:ad:31:28:15:b6:
34:86:8d:af:a6:b4:0d:00:cd:af:3f:88:38:b9:72:9b:ec:4e:
7b:b9:1f:3a:70:c3:7c:b9:75:01:a4:14:47:39:06:68:fe:3f:
75:04:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:12 2026 by rpki-client