Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: FcXB2ia7Ecw6L6Gfutk3ykadvTfQbNi2NsyHYIBfqfA=
Subject key identifier: C9:A7:F4:FA:6D:03:E8:B3:09:4B:23:91:7B:85:40:B9:6E:70:83:8E
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 019CAD231637703BC35CFBE73B1D70404C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 07F3
Signing time: Mon 02 Mar 2026 06:01:23 +0000
Manifest this update: Mon 02 Mar 2026 06:01:23 +0000
Manifest next update: Tue 03 Mar 2026 06:01:23 +0000
Files and hashes: 1: 7oxbulzY2boNaAxovnlWeEdnhvk.roa (hash: uX0ykLCKBF2SBolWYgvfJLXxPgVn9j68zHuR3GSzDLo=)
2: ImYdN1r7SuqmH4KCOghmFfGT43A.roa (hash: C3iHTDptRbcDAgsUC9QRyc1MkBmaJjNlKZ93XUJOKLw=)
3: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: nn3fMsAiimWdQdJzJPNG1VVKZJb0eJ0vcUsPwM1ceK4=)
4: mmK4BcjEIajvATTw8BCsnASXF-E.roa (hash: n3pCENYT8mZdK4x4Xmug43GNcd+EWFtMNaK1ThGL1zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:16:37:70:3b:c3:5c:fb:e7:3b:1d:70:40:4c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Mar 2 06:01:23 2026 GMT
Not After : Mar 3 06:01:23 2026 GMT
Subject: CN=c9a7f4fa6d03e8b3094b23917b8540b96e70838e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:31:f0:bc:f0:a5:bb:38:6d:a0:bf:2f:70:
61:94:e7:12:e4:48:53:ba:dc:b6:23:11:6e:9e:07:
6e:4c:f7:a7:20:7b:5f:a5:7b:34:9f:a8:36:52:26:
57:56:38:76:b9:33:43:85:4b:07:5a:9d:0c:f9:59:
c5:1b:f2:8d:8f:dc:0d:61:49:7c:78:97:61:45:38:
51:54:9c:11:78:22:d5:c4:6b:99:45:24:7b:fd:ef:
77:36:f4:e6:1c:86:b6:68:4a:74:05:0b:cb:3d:11:
2d:4c:ae:44:ec:82:7d:21:76:70:c5:f3:69:17:11:
76:1d:2c:f1:a1:f7:a7:eb:8b:31:a8:2b:e5:aa:31:
5d:57:fa:ad:49:2d:53:f2:a8:98:a8:ae:b0:61:cf:
e9:5a:56:10:9b:69:02:26:7c:f2:db:ab:14:0a:f5:
5d:84:95:73:60:b8:06:0b:62:1f:d9:9d:8e:dd:2c:
fb:76:52:5a:de:e1:b5:fd:f5:fd:13:1d:ca:dc:41:
4f:51:96:2f:06:fb:cb:12:2c:ad:92:a1:bd:8c:9b:
2d:3d:f7:33:f1:59:74:16:08:78:47:94:6a:8f:e1:
6c:2d:40:d4:bb:ac:c2:f7:9a:29:00:65:87:2d:be:
16:0b:1a:d4:f6:52:e7:9c:0f:4f:b8:d7:56:c5:2f:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A7:F4:FA:6D:03:E8:B3:09:4B:23:91:7B:85:40:B9:6E:70:83:8E
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c8:38:47:50:d4:e2:7b:b7:8c:ba:66:72:db:cf:c8:92:a2:
6a:6e:e2:ed:49:6e:ae:49:63:9d:58:87:1c:2f:b9:ff:ba:39:
0a:a6:c4:dc:62:4c:42:54:22:22:a2:0f:ca:b6:70:a6:e3:d9:
1d:ad:f6:d8:42:f2:28:a8:6d:90:f6:51:5d:4b:e8:d9:5c:fb:
d8:4c:c4:3c:f5:19:7a:20:d4:f2:00:e3:5b:7e:69:fc:4d:95:
8e:43:18:b4:d3:77:ff:6d:be:cc:5f:2d:71:36:b4:28:5d:8b:
97:1a:7d:5b:5b:c0:b0:42:32:f1:25:bc:5f:7f:41:d1:bd:f0:
c1:b5:36:39:4d:51:f6:14:eb:f7:71:af:2c:75:9d:95:6d:dc:
73:ba:c3:6b:21:22:9a:96:ea:ce:f8:3c:03:19:53:ae:3a:57:
8a:d5:0b:e0:fd:68:db:42:7f:27:f7:b7:ab:7e:d5:b5:b5:57:
80:9f:ce:80:13:3c:0e:65:af:9d:06:24:be:06:36:2b:97:cf:
c0:ad:32:60:37:1b:0a:bf:63:13:f0:74:c1:98:5e:1f:42:f8:
04:1d:ea:6b:02:c1:69:b7:90:9d:24:5c:6f:e3:fb:24:08:6d:
ac:95:20:95:8b:df:ba:fc:b7:5d:ad:e5:82:45:8f:4e:9c:89:
c0:b9:d6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:09 2026 by rpki-client