Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
File: fG9Mjzo3f0bFUiAJZ4841hVxxso.mft (raw, json)
Hash identifier: Mp+X21iyaR1sVTQVg7v2kbWCaerZR21Cako0uhku5D4=
Subject key identifier: 0E:A1:62:B7:82:A0:C6:37:AE:03:A9:2A:F9:37:BA:FA:9A:A2:95:FE
Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
Certificate issuer: /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Certificate serial: 019CAA21CF8A62DCD22E7A64A49F08D73159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
Manifest number: 0CBC
Signing time: Sun 01 Mar 2026 16:01:08 +0000
Manifest this update: Sun 01 Mar 2026 16:01:08 +0000
Manifest next update: Mon 02 Mar 2026 16:01:08 +0000
Files and hashes: 1: Dro43UswDXgv1T5j_BRPwIsOV10.roa (hash: oIkm99AZjkjz6X4ghJ78sK9ulOao8b5MSKTe16jyBVE=)
2: fG9Mjzo3f0bFUiAJZ4841hVxxso.crl (hash: gXkM827ectaFm/ea4UDp+r8nmdABiNJI3eVofxZG8Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:cf:8a:62:dc:d2:2e:7a:64:a4:9f:08:d7:31:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Validity
Not Before: Mar 1 16:01:08 2026 GMT
Not After : Mar 2 16:01:08 2026 GMT
Subject: CN=0ea162b782a0c637ae03a92af937bafa9aa295fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:ce:35:3b:3d:77:87:76:33:08:57:53:83:
ef:77:5c:9c:16:da:99:93:a0:c4:71:6c:ad:66:59:
66:23:24:30:be:05:4d:e0:b8:98:db:e7:11:43:7a:
3e:a5:54:1a:fd:19:94:9c:5c:76:7b:ee:64:93:31:
d5:d6:a4:52:48:6e:7b:7c:e3:9a:0a:14:02:51:bc:
07:55:06:cf:fa:70:a7:c4:ec:2f:d7:56:be:61:36:
1b:6e:a5:c9:7d:6b:ce:c8:d7:c6:37:9e:14:69:6a:
4b:40:b8:3a:e4:db:bc:e9:76:92:ed:2e:66:f1:1d:
93:9a:de:fb:e4:48:68:d9:92:05:e5:f0:6e:f8:83:
81:25:78:b1:e8:7d:75:1f:71:1e:53:44:dd:86:90:
a1:59:a3:5e:df:69:3a:cc:ca:57:67:56:5f:9c:5d:
67:42:0f:54:fa:2a:c5:cd:ca:02:e7:42:5b:41:22:
cc:35:81:53:ab:c3:a0:11:86:82:ab:05:eb:ed:be:
6c:d3:8a:7f:12:c5:e6:de:95:17:dd:8f:03:7f:8a:
fc:48:fc:a8:68:c8:98:6f:cb:45:26:7d:08:21:1b:
c7:45:c5:a0:b6:65:7d:da:0e:76:a9:fe:c3:24:e8:
54:e8:c0:73:95:ab:9b:3b:7a:f6:d9:59:73:2d:25:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A1:62:B7:82:A0:C6:37:AE:03:A9:2A:F9:37:BA:FA:9A:A2:95:FE
X509v3 Authority Key Identifier:
keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e3:77:ed:54:30:d7:52:d4:2b:9f:2f:b5:24:a8:83:32:35:
f2:13:c5:49:90:42:e6:2a:ab:86:69:76:0a:fe:79:37:9b:4f:
4d:0d:14:42:80:7a:f5:87:32:0e:d1:50:2a:ce:c4:2e:82:a9:
71:8a:c0:f3:4e:0f:0a:c4:dc:69:68:07:00:59:6d:f5:c4:a5:
75:9b:89:10:ad:f1:88:40:f6:c1:e3:03:26:f4:cd:fd:e2:a5:
56:11:d3:d2:23:35:cb:c4:8f:a5:7a:e3:da:e0:10:02:ad:2c:
32:f0:85:9c:7d:e0:2f:9b:58:9a:7a:6e:85:5e:75:0a:d5:eb:
5c:0e:1b:f3:01:86:2f:8e:c5:5b:40:c8:86:a3:2a:27:b8:3c:
06:72:e3:63:0d:88:9b:b8:fb:a1:8d:22:28:00:35:d0:2f:1c:
f0:06:cc:e1:bf:ad:c4:1c:15:1b:09:e5:3d:cb:68:c6:ed:8d:
ed:93:0f:9d:6d:d9:3a:2b:d5:e1:79:54:08:88:13:22:23:05:
b0:93:c8:48:e2:d6:df:a8:2d:cd:dc:db:fe:bf:b9:1d:11:93:
0d:85:c0:14:bb:18:b3:88:58:2c:d3:f0:d5:65:c7:34:95:b8:
03:0d:0e:14:9e:23:a7:89:f0:a7:5c:0b:56:af:a0:a5:48:fd:
6a:cc:dd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:39 2026 by rpki-client