Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
File: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft (raw, json)
Hash identifier: qBE/lMebmJnkk+hl4f0S2lFEJvIyxjphjJcss+PyVXM=
Subject key identifier: 4B:35:B3:F7:D9:47:E9:4E:1E:CC:B8:A4:49:72:9B:79:5C:6B:8D:F0
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Certificate issuer: /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial: 019CAF10BF99E76224B3E5BF9BAE8B77A446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
Manifest number: 0707
Signing time: Mon 02 Mar 2026 15:00:36 +0000
Manifest this update: Mon 02 Mar 2026 15:00:36 +0000
Manifest next update: Tue 03 Mar 2026 15:00:36 +0000
Files and hashes: 1: 96LYOeOZrfhBfF0aYpvHmgR3_EI.roa (hash: cZrj9IEY9V0hY5ejfic9+qWXj8uAu/BE+c5uGfFzBJY=)
2: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl (hash: zs/iYH09kh/3jg8l66+jf8yfqQF72hjZNhPyaAeKZz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:bf:99:e7:62:24:b3:e5:bf:9b:ae:8b:77:a4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
Validity
Not Before: Mar 2 15:00:36 2026 GMT
Not After : Mar 3 15:00:36 2026 GMT
Subject: CN=4b35b3f7d947e94e1eccb8a449729b795c6b8df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8c:cc:fb:cc:64:05:29:99:36:e4:b3:e9:2d:
d0:c1:c0:c9:41:ad:45:a1:db:70:81:ef:f3:3d:db:
a8:38:8d:8e:5a:60:12:a5:c7:0c:da:5b:19:b2:11:
fa:2f:08:a2:19:b1:02:c6:2a:46:cc:e0:d3:3d:7f:
4b:c5:f9:7f:ed:75:64:76:88:e0:67:6c:13:b3:e8:
95:ba:20:c4:2d:a4:f1:c4:3a:4d:e0:47:ab:84:f8:
d9:3f:7a:33:e8:3e:47:74:71:e6:c0:70:16:ca:a2:
e8:48:05:ef:3b:4a:b7:29:7e:ab:02:d6:a2:70:36:
e6:fe:0a:b1:8a:19:c9:47:d1:7d:2f:06:82:0f:6e:
c1:6f:e2:0b:a7:be:f3:6e:e4:f7:a7:b0:ce:11:64:
c2:d1:04:2a:e7:cb:ba:ae:85:3a:7b:cc:b0:36:27:
64:99:49:78:b4:fe:7f:2e:94:36:db:ab:e2:64:18:
87:41:1c:38:06:57:d7:5e:78:96:04:5d:26:6d:7d:
1f:76:67:de:da:60:ac:d3:aa:e4:79:f2:b1:03:85:
87:11:b2:bd:ba:3b:87:78:91:4d:d1:2a:67:d8:ae:
fe:86:89:3d:7f:f3:b2:ea:06:b8:21:32:13:60:51:
91:03:c7:89:0e:0f:7a:71:68:da:30:e3:ab:30:35:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:35:B3:F7:D9:47:E9:4E:1E:CC:B8:A4:49:72:9B:79:5C:6B:8D:F0
X509v3 Authority Key Identifier:
keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:29:ba:0a:4b:30:5a:7c:74:4f:21:19:83:a4:57:42:d0:5b:
2d:9a:4f:5a:ce:64:23:2a:85:cf:ac:c8:8d:ee:4d:da:68:4e:
33:83:bf:94:74:a7:60:8d:fe:c4:5d:9e:b0:aa:c0:5c:e9:2e:
19:b4:bd:e6:53:ac:d6:3e:9b:ed:b2:58:5a:bd:eb:e7:d8:ea:
ae:de:52:a0:0d:c5:44:83:4a:b5:db:4b:53:a4:4e:37:a7:36:
19:6d:cd:40:3c:fb:5c:f5:1d:aa:25:e6:5a:90:0b:38:28:54:
2f:25:19:1d:0b:e4:77:50:63:4c:74:8d:21:ad:48:0c:6a:db:
ed:db:13:f8:05:be:11:3b:b2:68:39:ec:30:6e:3e:85:34:b8:
a4:f3:71:98:9e:7c:70:cc:a9:37:8e:3a:48:8e:e4:f0:75:9d:
da:19:e6:ce:1e:bf:f5:97:c0:bb:d7:1d:ce:90:35:fe:b6:59:
1d:68:41:8e:ae:6b:fc:d4:6b:93:5c:ea:de:6b:92:35:28:ea:
9f:70:41:ff:0b:70:22:1f:ee:18:a1:31:90:f2:95:67:16:07:
8e:24:cf:b3:b0:30:49:bb:fd:9c:53:b8:5f:6f:e9:6d:6d:f6:
fa:5b:dd:1c:24:61:60:08:34:e2:16:fb:49:b7:bb:b9:f5:e8:
03:3b:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:07:46 2026 by rpki-client