Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json)
Hash identifier: PajzBa0ANyqTeRc4pHqPQC6jAgzMWEC9yHoPTGTIgKI=
Subject key identifier: AF:C9:BE:3B:56:F4:A8:F3:FA:4A:42:A9:B4:FD:54:78:7B:94:3E:CE
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial: 019D97E1779962A9CC7310B59D909D98B160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
Manifest number: 0F7C
Signing time: Thu 16 Apr 2026 20:00:28 +0000
Manifest this update: Thu 16 Apr 2026 20:00:28 +0000
Manifest next update: Fri 17 Apr 2026 20:00:28 +0000
Files and hashes: 1: LVBBw3kbDfM8QLo8U8FpkgZWBKY.roa (hash: 3JSgEpOjV3VwZSuSqrVrhNnp29HLqalajVpqLvd8t0Q=)
2: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: ircOsSrGqAaQGeAspB9e1Hq5DC5hzK+gTiJ+D7DTNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:77:99:62:a9:cc:73:10:b5:9d:90:9d:98:b1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Validity
Not Before: Apr 16 20:00:28 2026 GMT
Not After : Apr 17 20:00:28 2026 GMT
Subject: CN=afc9be3b56f4a8f3fa4a42a9b4fd54787b943ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:71:5a:ac:4f:63:3a:b3:74:cb:02:92:98:
bb:a7:b2:86:bb:79:ea:b4:54:d5:14:ae:0d:94:e0:
a6:57:34:2f:d8:42:e6:7b:83:b9:82:76:9c:31:bc:
a1:09:4c:95:b1:de:ed:d7:fb:63:c5:bc:16:48:dd:
eb:ff:ba:e5:e1:59:a8:f8:27:60:69:6d:dd:ce:98:
bf:75:5c:1b:92:0e:56:09:e5:2c:8b:e0:84:e5:dc:
69:a0:b4:79:74:b5:04:11:a3:54:02:f5:9f:6d:6e:
a7:7c:40:14:76:42:4a:5c:29:d2:ff:f2:02:a8:fe:
57:f5:a9:b9:ee:35:ba:03:28:c3:88:21:ae:10:4e:
93:e2:57:ff:87:38:87:65:c9:d1:cb:78:d3:2c:5b:
84:04:56:5a:f8:50:c1:98:69:74:05:0b:01:ff:f7:
18:6e:0d:3a:c3:98:aa:c6:43:be:07:4a:96:48:9b:
2b:67:c3:42:b8:40:41:0e:09:d9:e3:23:cf:4c:2d:
b0:12:90:8a:d0:c7:b6:ad:1a:1b:49:bb:16:72:e5:
06:22:58:3e:65:2b:ee:e3:27:a5:1a:42:db:30:3e:
5f:6e:83:9e:9e:96:e1:24:e2:0b:59:94:7f:73:ef:
3a:b4:44:2f:8c:3e:e7:5e:2b:29:b8:89:26:13:0f:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C9:BE:3B:56:F4:A8:F3:FA:4A:42:A9:B4:FD:54:78:7B:94:3E:CE
X509v3 Authority Key Identifier:
keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fd:c5:52:fc:7b:90:2b:cf:ae:ef:38:b2:fe:fb:27:5e:c7:
22:f5:27:73:11:cb:13:ca:4b:e4:25:bf:40:b5:6a:ad:5a:07:
d1:43:4e:f7:4d:cc:7f:2f:98:e9:e3:ff:f9:c0:c5:ce:fb:aa:
cb:cf:5e:9f:29:74:8c:ac:46:9c:fc:57:45:37:97:7d:31:a0:
15:2c:f1:4c:a4:94:52:51:76:60:40:7b:5f:83:97:d4:53:ab:
54:9e:90:f7:3a:7f:fc:d1:ac:b0:71:ea:45:ea:bd:34:af:33:
e6:e6:f0:94:74:cf:70:5b:32:fb:af:fd:0e:ec:76:65:79:e0:
dc:7d:4e:77:76:7a:61:59:25:69:bb:35:60:8e:cf:65:d7:ae:
b6:21:a9:a5:d0:6b:4e:48:10:a3:e9:65:37:07:03:ae:b1:de:
a1:1c:ff:af:30:43:6b:26:e3:b7:07:d2:8e:81:7a:a9:d8:85:
b1:f4:9c:5c:23:d5:1f:b4:06:13:db:a2:df:85:d7:e7:c7:ef:
6c:ff:c2:2f:52:10:68:0d:42:ab:81:3a:59:55:dc:6e:23:b1:
7d:e6:6a:cf:d2:fe:ae:3c:cb:6a:29:43:40:22:7a:b1:ca:7b:
76:f9:10:ac:e2:2d:82:27:3e:aa:b4:2c:b6:3e:80:dd:eb:af:
34:43:72:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:40:39 2026 by rpki-client