Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: aYl8vx1vEprkMNR5UadoUbBuuKDN69Cm89g04RKWEu8=
Subject key identifier: 68:5F:FD:72:EF:53:2D:8A:B8:CB:A8:8D:F7:01:34:0B:A9:B6:9C:27
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 019CAB344AA6B275576D3ABF52B65AFC041F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 21:00:56 +0000
Manifest this update: Sun 01 Mar 2026 21:00:56 +0000
Manifest next update: Mon 02 Mar 2026 21:00:56 +0000
Files and hashes: 1: F9K0hFQXxtbhSJLkCfsnizzHs0s.roa (hash: KFw62b/4AeJuATgKU0557hosLMq4NoClO0EkpuHlym8=)
2: H4bKxOh-hy6T67ooqNK2-ku15B8.roa (hash: 3bzS3/bPOoZXps3p17llktHkmheeXpLyUJCVejVIYgE=)
3: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: Z7jOUa//4nDq+Hr4IgVQgHVyG6Z5Kt2j72ep4XB6rYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4a:a6:b2:75:57:6d:3a:bf:52:b6:5a:fc:04:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Mar 1 21:00:56 2026 GMT
Not After : Mar 2 21:00:56 2026 GMT
Subject: CN=685ffd72ef532d8ab8cba88df701340ba9b69c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:f8:6b:e6:ed:ff:9d:05:90:ca:06:fb:12:
4d:81:f6:3e:1c:00:19:d2:43:d9:db:b7:bd:da:e9:
51:5f:12:54:8e:0e:da:13:00:df:1b:05:d2:ca:d4:
ff:64:0b:95:3e:ba:ad:d1:50:96:61:f7:82:9d:c8:
61:85:be:87:72:8b:21:66:3f:81:eb:c1:fe:50:2d:
de:68:d4:46:f9:0c:f6:1f:7f:b0:05:85:aa:db:16:
5e:d4:bf:8e:1b:79:7e:17:4e:b5:dc:30:8f:7d:d3:
db:b9:c9:7a:0b:70:f3:a4:d6:86:52:da:1b:ee:2d:
00:36:86:16:3c:0e:92:30:65:21:9f:9c:30:cc:4c:
2e:1c:2e:3c:dd:9d:01:c7:99:11:43:92:05:f0:ab:
1c:c0:5b:51:35:6a:f9:aa:02:bc:71:30:39:ec:a5:
4b:4e:d6:43:a5:1c:a5:ca:60:57:7e:04:ca:5d:27:
43:c8:fa:c6:56:bb:e9:30:b7:d8:38:59:a9:5c:05:
a1:54:04:45:cd:0b:e3:92:b7:a5:e6:da:a5:69:f0:
67:11:2c:c6:9a:c6:75:3e:56:79:30:08:7c:5c:71:
40:e6:10:00:b2:24:33:6c:16:2c:4a:bf:ec:e5:5d:
f6:ff:31:fa:8c:ce:2d:96:c1:5b:fc:d0:66:71:cc:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5F:FD:72:EF:53:2D:8A:B8:CB:A8:8D:F7:01:34:0B:A9:B6:9C:27
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:26:7d:f6:a0:bb:5b:db:8c:ab:15:1a:b2:07:ef:9a:a4:a7:
7f:d5:26:4d:05:b1:ed:4f:96:8f:48:42:98:56:46:27:3c:f1:
4b:4b:db:38:31:fb:32:77:8c:00:bb:bd:3e:8a:8b:ee:f8:0a:
a9:10:6c:fc:de:27:c3:30:36:03:3f:b9:71:f2:69:5e:78:75:
04:eb:a1:84:68:27:41:2b:f1:e4:69:7a:c6:a8:c5:0e:c2:b3:
95:d5:5f:c7:b1:a2:1e:3c:d1:a8:6b:eb:e1:15:82:e5:0a:be:
6c:dd:47:90:c9:60:2b:5d:14:d2:9e:8a:18:a9:d9:c9:41:60:
4d:7a:24:c1:3b:f1:c7:99:ee:8a:94:70:c1:61:d7:18:30:a4:
3d:46:b0:91:f8:80:2a:7f:12:3a:92:53:dc:c9:12:d8:e4:0a:
b9:11:79:c8:5b:2d:1f:82:d1:79:7c:d4:0f:d6:2d:b8:f2:b9:
77:56:ca:f2:eb:4d:32:6e:1b:60:f6:e5:6c:75:e1:fa:22:33:
00:84:c7:7b:e2:cd:ff:8f:9e:a7:9f:85:6f:f2:31:b2:d8:b8:
dc:8d:2c:32:7e:2e:fc:58:c0:3b:1e:1a:74:6d:2f:d9:e1:93:
6f:d5:e3:88:f4:07:57:b3:04:be:36:c3:07:88:66:40:04:aa:
56:34:c9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:32 2026 by rpki-client