Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: a0adyKQgU1mqbpwI/jyse9XoxAfLbCLJQV8JDo+SL1A=
Subject key identifier: CF:18:EC:8A:01:63:67:6D:85:AE:62:D4:93:22:30:93:EE:EA:89:47
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 019CAB33F1C4A34B0210AF39437698F6862F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 07FC
Signing time: Sun 01 Mar 2026 21:00:34 +0000
Manifest this update: Sun 01 Mar 2026 21:00:34 +0000
Manifest next update: Mon 02 Mar 2026 21:00:34 +0000
Files and hashes: 1: JuhHdC_-wskYknvP7LIY1ggd8So.roa (hash: Qx3w+8OYL4pNm6xzXbZj9QOdHwp0WRkNESd9pe1uoik=)
2: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: GtXVNwTY3iVGEB8fSL/yNeah7uQ/bORvJxS7llhIu1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f1:c4:a3:4b:02:10:af:39:43:76:98:f6:86:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Mar 1 21:00:34 2026 GMT
Not After : Mar 2 21:00:34 2026 GMT
Subject: CN=cf18ec8a0163676d85ae62d493223093eeea8947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:53:71:f7:75:62:49:7a:06:1a:fd:5a:e9:
22:ac:a7:eb:77:3b:1e:f2:99:e1:8d:24:ea:68:c3:
4a:95:cd:1c:44:ca:85:40:1f:87:29:2d:32:cd:e2:
e5:6d:a6:8b:c3:8c:4d:78:5a:17:a0:a3:55:be:31:
71:b8:70:97:a1:57:c5:52:9a:bc:cd:9d:d9:c6:79:
ed:d9:df:ee:6b:1f:fb:d0:72:d8:f1:2f:a5:85:fd:
76:89:e0:05:00:b4:54:94:1c:ee:92:49:5f:73:e9:
de:3a:1b:e2:d0:cb:8e:e7:a3:9d:57:54:a0:eb:ff:
34:ba:4b:13:20:7a:db:96:21:f2:33:ad:2c:57:54:
c0:0c:c5:27:c1:27:98:a2:4d:d7:2e:84:2e:83:76:
75:e5:c6:74:09:02:eb:dd:c8:d8:1e:8b:1c:0d:ae:
7d:e5:77:fc:fa:d6:c2:42:1b:2f:b7:2f:c2:6c:5f:
4c:d9:79:00:4f:b4:39:02:3f:ba:52:18:c2:9a:5f:
1f:a6:29:a1:65:c7:de:9b:c7:cc:57:f6:fe:10:ad:
d1:80:b7:dd:d2:a4:d9:4f:c1:20:73:d6:09:0c:21:
ac:36:ef:cb:64:43:53:2b:d3:86:fb:3d:20:ba:ce:
cb:3a:24:ae:a2:fa:e0:2b:93:31:44:b2:4c:31:b6:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:18:EC:8A:01:63:67:6D:85:AE:62:D4:93:22:30:93:EE:EA:89:47
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fd:ab:3e:e9:f6:f0:3c:f2:46:ab:1b:6d:e6:3c:83:84:8e:
62:20:45:fb:e7:fb:f8:18:e0:74:9f:ad:28:8c:ba:06:4e:85:
2f:95:e5:61:5b:9c:92:92:b6:c1:3f:4e:8d:f3:36:1e:58:c2:
52:38:1f:eb:98:8f:55:55:36:41:12:f3:e7:7c:79:ba:da:82:
dc:85:3d:ca:69:d3:95:fb:cc:61:59:58:6e:8d:ac:ac:c2:e0:
9d:d8:41:d8:06:3a:73:73:ac:99:ac:ee:35:c9:a7:bf:d1:78:
a7:79:a5:ec:ea:02:49:36:e3:c1:fd:c8:f1:89:b6:a7:0e:b6:
f6:7a:41:93:62:a7:91:80:4a:14:4d:38:65:ac:2b:60:49:38:
9b:d9:db:13:d1:b4:4f:d0:6c:28:58:60:33:42:95:16:23:3c:
5f:c0:d9:cd:f4:01:fd:d6:03:82:d8:d5:94:4f:41:02:d9:5c:
bb:bc:24:a2:90:dd:22:0b:78:4d:67:b1:b3:99:67:5c:fa:b1:
e2:26:13:77:7e:74:96:35:7a:ef:87:f2:78:e6:72:c3:13:23:
af:7a:3e:1b:71:96:85:f3:54:c4:f5:cc:0f:94:bb:16:88:bb:
ee:8f:af:cf:e3:73:4e:42:0e:62:3c:37:14:c6:65:6d:ce:cf:
53:f0:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:42 2026 by rpki-client