Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
File: fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft (raw, json)
Hash identifier: FKJEbkLuQQFhy8wQ7cVBkdt9Qiba7PN4haGe6vTYURo=
Subject key identifier: 21:55:0D:E0:F6:1D:A0:25:01:7A:11:64:85:55:B6:BE:A2:D3:52:62
Authority key identifier: 7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
Certificate issuer: /CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Certificate serial: 019CAEA2FE1C7785BF2687EE9805D4C912DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
Manifest number: 012F
Signing time: Mon 02 Mar 2026 13:00:43 +0000
Manifest this update: Mon 02 Mar 2026 13:00:43 +0000
Manifest next update: Tue 03 Mar 2026 13:00:43 +0000
Files and hashes: 1: 1-DzzhuQacybavI0JEFJ_Pxy7kt4.roa (hash: uRHVp/iNbMxJaaaPObGWSNEIFbTXLqpiK+JCvtnSoQ4=)
2: fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl (hash: R4SF18tQ5KXOFoNnMlDYw/4k1v4CcBAaVax4I6ZudGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:fe:1c:77:85:bf:26:87:ee:98:05:d4:c9:12:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Validity
Not Before: Mar 2 13:00:43 2026 GMT
Not After : Mar 3 13:00:43 2026 GMT
Subject: CN=21550de0f61da025017a11648555b6bea2d35262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:20:c1:63:de:fd:85:60:6c:c0:fb:00:d3:
be:30:17:cb:bc:a5:a4:6e:a4:aa:05:79:a7:5b:47:
2b:62:5f:26:58:65:80:a9:70:95:a2:6e:a0:70:f6:
b3:60:4e:ad:d5:b9:5d:19:70:82:d4:4b:a2:43:78:
16:13:66:73:52:26:97:96:03:95:0b:75:19:45:26:
01:44:b8:95:0f:41:11:3c:a2:3c:30:73:05:e5:b8:
9f:2e:7c:9b:6b:92:ed:b6:56:b5:95:3f:96:19:f3:
5a:ca:52:5d:85:ce:c7:69:56:b2:54:9a:41:dc:2a:
bb:65:f1:b6:75:b1:6a:47:25:be:83:94:70:68:21:
4d:b7:e1:6a:02:ce:99:eb:11:40:ef:1b:af:d4:3b:
d0:7c:32:71:3f:52:93:27:90:13:d8:30:96:ce:85:
5c:14:6d:e5:8e:a1:f4:ea:74:5e:cb:13:5a:a1:17:
d0:80:e1:5c:8a:24:a6:1d:5e:d7:45:9d:ca:62:37:
61:63:cb:4c:2a:f3:17:fb:85:21:a2:b8:ea:bb:e3:
fc:db:d8:64:f7:d3:aa:a6:b2:1d:7d:36:37:e4:55:
bf:e5:8f:b5:92:f8:d8:ce:27:17:59:9a:d3:fe:44:
32:67:e2:c3:23:7e:d5:87:2f:bb:30:12:3f:39:52:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:55:0D:E0:F6:1D:A0:25:01:7A:11:64:85:55:B6:BE:A2:D3:52:62
X509v3 Authority Key Identifier:
keyid:7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6c:0d:45:e3:26:a6:cd:33:b8:ad:ae:0b:75:59:14:e2:8d:
d4:fa:2b:0a:1f:03:95:b6:eb:bf:e9:9d:f0:86:5d:35:13:9c:
9f:f5:d2:0e:00:be:4f:5f:84:5c:5a:fe:a2:0b:5a:de:11:4a:
a8:0e:06:ad:1b:94:3c:eb:95:8c:8e:6d:29:cb:54:2d:62:a1:
25:da:e8:4c:f5:6b:5c:2f:af:dd:b5:95:87:e2:07:9c:5f:91:
b0:a8:33:57:7e:37:83:9e:40:c9:7a:d6:e8:dd:74:02:7a:50:
df:9c:64:da:67:1c:44:6d:0e:4b:55:ae:57:c9:1f:78:d7:94:
24:02:26:cb:58:be:dc:1f:c3:11:b2:c8:58:d5:5c:71:33:91:
08:e1:11:9a:03:08:45:dc:14:fa:d3:38:71:3a:65:cb:25:54:
f9:ad:05:9a:6f:c5:f1:be:31:05:bf:e3:6d:85:9c:64:f5:16:
2b:09:9f:97:d6:14:f1:21:fc:7b:5a:a6:0d:aa:fc:30:12:aa:
bb:c1:db:73:7f:fe:57:89:a0:67:2b:1e:5f:04:c6:89:3f:56:
f3:01:f3:67:5a:69:78:be:19:b2:ac:0b:87:22:4e:24:a1:8b:
c5:1b:38:83:77:e4:66:5f:eb:e8:30:80:56:14:0f:ca:3a:f7:
ff:e4:69:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:44 2026 by rpki-client