Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
File: fggLq1W_NHMYjCDHNmpssETHGVw.mft (raw, json)
Hash identifier: l5fVU/r4Xk6lQ+VrA0sbM9wjIIUkLH99USYmAkEqJ3Q=
Subject key identifier: 90:B1:29:23:A0:03:BE:38:BD:79:76:49:0A:A1:0A:17:1B:55:42:D2
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 019CA94580972CD8CB4A124549E3D91D0816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
Manifest number: 12EA
Signing time: Sun 01 Mar 2026 12:00:30 +0000
Manifest this update: Sun 01 Mar 2026 12:00:30 +0000
Manifest next update: Mon 02 Mar 2026 12:00:30 +0000
Files and hashes: 1: 7Xjnrks0V0KJBUvovHU5FPRBPgI.roa (hash: Uj+974AkqjIOmRxxULMnodgkGY00aGKR4YY4cfemHV0=)
2: fggLq1W_NHMYjCDHNmpssETHGVw.crl (hash: 2OSPkYzL7RydMRdx7qhmetAr+orSwytOL1TKsM1U3wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:80:97:2c:d8:cb:4a:12:45:49:e3:d9:1d:08:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Mar 1 12:00:30 2026 GMT
Not After : Mar 2 12:00:30 2026 GMT
Subject: CN=90b12923a003be38bd7976490aa10a171b5542d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:c5:9e:65:05:81:11:83:fb:58:2a:e2:f3:
16:97:0e:8b:62:90:61:b3:74:2a:af:f6:fa:e8:34:
d9:31:d0:4c:3f:49:e7:62:c1:9e:62:fa:ee:0d:7e:
e8:45:bd:2c:81:a7:0f:cc:7c:0c:f4:0c:e6:22:28:
9c:b5:90:8f:f5:73:7c:6a:bb:41:f0:b6:db:d2:49:
17:32:76:70:25:64:75:00:43:c6:bf:da:35:2c:ff:
bf:5b:e7:41:2f:87:a4:e3:5a:4a:5e:03:75:bf:1f:
56:95:55:ba:fc:80:9e:1c:0c:c3:ce:d1:c4:cc:48:
6c:bb:02:58:43:bc:3d:9a:47:7f:31:c5:ff:88:53:
d9:e2:1e:91:51:a2:e5:a8:2b:dc:ef:03:ff:06:db:
00:22:05:d5:a0:8f:a5:8f:48:45:cc:02:f5:1d:1d:
34:e3:0f:6d:ff:34:ca:d8:3c:29:2a:dd:bd:27:de:
52:8c:f7:7e:0c:8e:32:d2:57:c7:72:2e:00:0f:76:
35:e9:1f:d8:36:e4:84:65:c7:08:61:b7:25:59:c2:
68:1d:cf:98:08:2a:bc:5d:29:1a:27:b3:fc:f8:35:
c2:65:ea:20:cb:1a:26:6a:63:e7:f9:aa:54:26:a5:
6f:9b:f9:d8:45:77:60:0f:86:56:a0:2b:89:7d:32:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B1:29:23:A0:03:BE:38:BD:79:76:49:0A:A1:0A:17:1B:55:42:D2
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:f1:f9:05:5d:36:69:c1:29:3c:08:38:de:6d:d9:d0:7d:
57:76:5a:13:23:a2:d3:f6:78:59:ad:e3:b6:a8:f5:8a:c1:d9:
fb:07:e8:33:43:fa:ea:65:2e:8a:55:60:3c:07:06:14:72:20:
0d:32:86:5a:61:63:73:44:9d:a3:97:64:2e:3f:2e:9f:3b:d9:
5b:54:b5:9b:ef:29:ad:08:e7:e4:20:11:23:8d:e4:72:f6:42:
d6:8e:60:61:7b:e5:74:b3:57:b4:2c:05:1b:33:1c:5b:69:3f:
ba:06:43:e2:15:80:89:fa:2e:ce:5d:d7:4d:3f:e3:2e:02:7b:
0f:cd:09:ea:d2:f2:b3:33:59:e3:15:5b:cd:0c:e0:fb:6c:6f:
3b:44:3c:58:13:1c:95:a0:db:11:03:9e:3b:ae:0e:81:85:40:
b0:47:f5:6e:3d:6a:1e:01:6e:54:eb:fd:c1:b3:0d:a6:ec:a7:
b5:1f:33:0b:25:f8:25:4e:79:da:8c:b3:f1:3a:d2:58:00:b8:
b1:3c:3a:2d:7a:a6:1f:47:81:15:df:b8:7f:7b:df:0d:df:27:
ee:88:1b:52:a3:84:53:e4:63:9f:f2:58:cc:75:0d:b6:e1:d4:
b8:68:99:03:6f:2e:78:0f:0a:1e:91:7d:46:95:4f:91:1c:a4:
1b:80:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:00 2026 by rpki-client