Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
File: fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json)
Hash identifier: bc0c8UWMxpOZBdFbuXInxHXoHqfqSeJeMSVzCVJE60Y=
Subject key identifier: 00:E1:26:D9:C4:FD:25:5A:2B:11:43:5D:2D:14:D6:2E:96:4D:F5:05
Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Certificate serial: 019CAD594410DCB42A86258763E5FA303BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
Manifest number: 0230
Signing time: Mon 02 Mar 2026 07:00:34 +0000
Manifest this update: Mon 02 Mar 2026 07:00:34 +0000
Manifest next update: Tue 03 Mar 2026 07:00:34 +0000
Files and hashes: 1: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: WotvtTqp4AaVO0tWn+0Zs82qFIMBbdOoAJP12TH+vBk=)
2: hhYndYmrtj6UVK4MXLjISC5kjY8.roa (hash: Hp6kG7ylNYSrFI+JCOb5ieLSxf03lMDks7YDXEs5v7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:44:10:dc:b4:2a:86:25:87:63:e5:fa:30:3b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Validity
Not Before: Mar 2 07:00:34 2026 GMT
Not After : Mar 3 07:00:34 2026 GMT
Subject: CN=00e126d9c4fd255a2b11435d2d14d62e964df505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:d5:f7:db:ce:d3:41:16:ef:82:7e:3d:19:
12:fa:13:c0:e7:e9:2a:08:63:54:26:a1:74:ab:93:
78:6f:c2:8f:0a:1d:91:fd:58:5b:8f:74:a9:a4:fa:
2e:c1:8a:26:ad:98:36:9e:ce:de:7b:aa:a0:ee:9c:
af:b1:fc:4a:2a:be:a4:84:a6:ad:5a:ff:7c:53:e7:
14:42:63:01:48:b2:cb:ad:ea:86:80:0c:ac:3f:ea:
6d:44:75:ac:9c:45:79:4b:f4:2c:24:d0:fd:6b:92:
c8:46:4f:15:bf:5e:09:92:32:90:fe:d7:36:10:09:
7e:81:78:21:5f:ac:07:81:3c:68:9d:68:c2:fb:21:
eb:74:00:6c:85:7d:04:c8:d5:91:70:80:40:75:dc:
de:77:3e:0b:aa:79:a4:d0:a9:85:d2:0f:7e:ba:46:
1f:74:bc:d9:04:84:48:1e:9c:e5:7e:7d:41:a2:64:
fc:db:b7:17:99:11:2a:88:e7:0e:e9:f3:a3:25:64:
a9:b1:91:6d:e1:27:e9:49:be:ca:e1:61:23:ea:f7:
55:a9:20:86:aa:71:73:1d:c9:0e:b1:10:5e:1e:cd:
17:b2:f8:6a:29:e9:21:7b:4a:a0:82:13:18:51:77:
71:cc:bb:34:88:28:1f:01:a9:21:4e:ac:59:68:fa:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:26:D9:C4:FD:25:5A:2B:11:43:5D:2D:14:D6:2E:96:4D:F5:05
X509v3 Authority Key Identifier:
keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:50:20:ce:14:89:9b:70:f8:35:5f:13:48:c7:bb:bb:ff:40:
ef:08:4f:09:48:d6:29:52:2f:bd:ad:6e:b4:8f:57:82:b2:ed:
d7:b3:41:06:ba:0b:4d:64:d8:4e:a5:04:be:1f:a2:fe:c9:b6:
6a:93:e4:82:62:78:6f:3b:97:e3:51:d5:57:0b:16:20:78:e7:
0d:1c:01:b7:86:cd:46:f1:ed:89:1a:65:7a:45:a2:75:ed:25:
42:77:5a:30:9b:4b:60:91:4b:9b:84:da:5c:7c:f6:ff:ca:cb:
e6:ae:c7:e3:02:58:0b:17:d7:57:c0:54:2a:fd:58:48:96:db:
20:54:45:7a:e7:4f:4d:6b:a0:dc:07:96:07:95:03:7e:93:9f:
9f:df:e5:78:1d:2d:24:44:e9:fa:5c:07:36:1c:12:7d:99:07:
41:bc:53:0a:82:03:f3:fe:fb:95:b8:c4:11:f0:73:ef:77:51:
37:e5:cf:78:98:69:c0:d8:bc:72:30:28:39:33:72:94:4f:3a:
74:b5:a5:31:8d:c8:dc:1a:a7:02:37:b4:c3:84:85:f5:be:85:
25:5e:c7:ac:de:da:d7:06:84:1a:1c:b4:d3:93:a8:7f:0f:90:
1b:f0:36:c1:d0:72:6e:3c:3e:9a:66:8e:6b:16:f5:90:1f:8f:
c5:4b:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:44 2026 by rpki-client