Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: F4np99iqTYuLZnWXzdM5A78eNnNBTxHoCdwOZNDmP/s=
Subject key identifier: E4:3B:10:3B:D5:1B:BA:20:AD:A2:CE:83:FD:D3:07:03:7E:04:63:2C
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019CAE3528ABB75F6CBC3F4A3982F0F57C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 11:00:45 +0000
Manifest this update: Mon 02 Mar 2026 11:00:45 +0000
Manifest next update: Tue 03 Mar 2026 11:00:45 +0000
Files and hashes: 1: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: gEsFYKqN+4i1czZhJXix0JR6U0G2/P4PANPYXq3j3Jc=)
2: gFOjbWB7I_w-vrenN-Bunfa99k4.roa (hash: jwgceh/3ITVpquNuTB6w5OIjCduknP3STqxn7Za9hOo=)
3: yDOczuJC_WLHV4Ya3yqTtThAzjc.roa (hash: rUsqBRYV5w6oIt/F9qarEoMetvvYx4/9g1ZMzy8MePc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:28:ab:b7:5f:6c:bc:3f:4a:39:82:f0:f5:7c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Mar 2 11:00:45 2026 GMT
Not After : Mar 3 11:00:45 2026 GMT
Subject: CN=e43b103bd51bba20ada2ce83fdd307037e04632c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:90:21:5e:cf:73:ab:7d:f7:ca:6e:1d:5d:
01:91:eb:3f:a1:89:2e:be:31:c9:da:cd:9c:79:46:
32:fa:15:1b:e6:b6:58:11:99:33:53:8c:ab:1e:54:
18:86:e1:1c:b0:12:79:38:ad:1c:a1:34:45:35:70:
b7:3c:50:e9:37:b1:50:0a:32:5c:99:b7:ac:d6:a8:
a3:6c:9b:ca:1a:b2:29:5c:44:e4:af:ff:72:46:9d:
3d:ff:b4:67:3d:23:4e:d8:ef:f6:ed:52:cb:bb:ad:
b7:bf:dd:e2:14:cd:43:a1:6f:b1:2b:64:e5:3d:54:
26:24:7f:62:08:3e:e8:0e:32:ea:c4:02:00:8b:2b:
41:3e:d1:d2:0d:75:46:99:45:e8:aa:a7:fb:9c:61:
76:cb:80:cb:43:8f:1a:a9:2e:81:68:61:f8:31:d3:
bc:2f:15:e2:33:1e:ec:50:f9:a1:09:f9:99:91:fc:
42:24:28:ae:21:2a:c4:dc:48:37:26:8a:c0:95:9f:
9a:94:fd:4c:3a:c8:58:ff:e7:31:10:b6:a1:64:3b:
75:8a:7e:c7:c6:28:f4:34:16:65:a0:0c:46:3c:79:
36:a0:d9:3f:05:ff:0a:0a:81:78:00:d8:f3:49:12:
83:71:14:13:fc:b5:3b:56:49:b5:02:83:88:85:e8:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3B:10:3B:D5:1B:BA:20:AD:A2:CE:83:FD:D3:07:03:7E:04:63:2C
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:be:64:4c:1d:b0:22:86:5a:2d:62:76:a1:76:11:0d:ca:4f:
24:9a:ee:82:76:94:7d:8b:83:0f:b5:a3:9c:d1:52:c1:df:bb:
5a:47:98:90:b5:5a:9d:d8:ed:5e:b1:c8:11:e1:97:63:fb:dd:
32:68:c9:74:a4:21:90:44:65:be:9c:d4:73:fc:8f:ae:1d:73:
85:aa:dc:75:9d:8a:ec:eb:bd:af:11:ef:00:1b:12:78:9b:84:
7f:bd:b9:6a:b6:74:ad:4d:42:4c:a2:8d:2b:40:f1:a2:db:db:
78:f5:8d:f2:81:49:7e:c9:f4:38:31:e6:5e:ed:6b:cb:ab:ee:
9f:e6:70:a6:7b:a6:e8:56:1b:0a:ce:b2:2c:8b:4c:2d:64:82:
be:1e:5e:de:84:46:70:33:42:11:90:f4:a7:31:81:59:0f:7d:
a1:bb:30:87:ba:b7:b5:74:6c:e0:38:12:dc:2f:d5:bb:33:69:
a2:5e:30:39:34:1b:c3:07:47:d9:47:24:e5:67:2e:5c:0d:0a:
a7:d1:ad:ab:7f:ce:60:c5:65:17:ec:e7:cb:7f:b0:2f:2e:4e:
43:5a:67:66:54:29:53:87:c9:f1:d9:72:5d:a5:12:ba:94:5e:
cf:dd:06:94:2a:0c:2d:b9:76:ca:18:13:b7:b7:3d:25:f0:85:
91:83:64:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:01 2026 by rpki-client