Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json)
Hash identifier: vnPmwpCbXfqr/86cxQbgxvTUubCxVGz8pS/tQOsIHiY=
Subject key identifier: 90:4A:61:3E:45:4B:4F:09:BE:EA:49:60:52:5A:09:9A:AD:80:7C:6E
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial: 019CAA5917925457A128ECD2E76DED520CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
Manifest number: 0F01
Signing time: Sun 01 Mar 2026 17:01:31 +0000
Manifest this update: Sun 01 Mar 2026 17:01:31 +0000
Manifest next update: Mon 02 Mar 2026 17:01:31 +0000
Files and hashes: 1: LVBBw3kbDfM8QLo8U8FpkgZWBKY.roa (hash: 3JSgEpOjV3VwZSuSqrVrhNnp29HLqalajVpqLvd8t0Q=)
2: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: n6iyA0J2N/Y+P8Q4VPLtNdLnTP0S4vL9bK1dPtM7/sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:17:92:54:57:a1:28:ec:d2:e7:6d:ed:52:0c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Validity
Not Before: Mar 1 17:01:31 2026 GMT
Not After : Mar 2 17:01:31 2026 GMT
Subject: CN=904a613e454b4f09beea4960525a099aad807c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:6f:2f:67:75:75:7f:a3:51:c8:55:36:ba:
55:51:3f:13:51:64:05:d2:74:43:d0:37:be:1b:9a:
b3:de:74:39:a7:51:d4:42:46:97:4a:67:fd:75:12:
0d:c3:f3:f5:ea:99:1c:6e:56:30:db:06:60:3a:16:
71:c2:0f:4f:00:d4:64:29:b0:85:be:86:2f:91:d6:
9d:e1:f2:2b:e8:1e:15:bd:84:16:d1:c3:1e:60:1e:
2c:06:db:0d:88:a7:db:ab:f7:e1:ef:f8:73:e4:27:
4c:d7:7a:59:95:d4:39:d4:d0:0b:87:3b:99:51:be:
ae:8b:1c:a8:6a:8d:f4:7f:7e:45:14:9a:b0:fa:4b:
05:c7:bf:f2:4f:10:6a:bd:59:07:b3:e1:38:ff:32:
b8:34:1e:a0:3e:31:2d:ea:28:d2:15:b9:94:91:27:
08:13:f4:67:77:a8:69:d5:b9:22:83:8a:95:f5:1f:
dc:1e:54:65:0c:4c:5b:7b:4a:9d:bb:52:fd:42:20:
ba:1e:d1:c3:c2:55:c1:04:a6:5f:b1:e3:72:3e:8a:
10:7e:0b:9b:da:bc:8b:79:ef:ef:00:0a:f1:b0:76:
7d:47:2f:b6:83:c8:fd:da:06:56:52:21:4d:90:f8:
f0:50:e8:01:08:87:f6:5e:34:84:ac:03:80:7c:df:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4A:61:3E:45:4B:4F:09:BE:EA:49:60:52:5A:09:9A:AD:80:7C:6E
X509v3 Authority Key Identifier:
keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:01:33:c7:2e:b8:54:c4:41:ca:fb:23:d7:6d:3e:11:3a:5a:
b6:9a:99:34:5c:00:96:33:45:fe:39:7c:bb:81:c1:1a:1d:e4:
e9:7d:d7:f0:5b:73:4c:c7:22:8e:4a:ab:f6:cd:7e:8d:58:45:
cb:51:ff:f1:ed:09:f4:5f:06:a2:11:53:cf:9c:27:48:6f:e7:
c6:3c:2a:a8:8c:13:3e:43:07:83:19:b4:f1:0e:9c:92:f4:1b:
62:20:63:fa:71:c8:b1:b6:a8:ef:aa:b6:0b:d1:9a:cf:06:37:
18:46:f0:6b:2c:d3:70:da:ae:3c:25:33:b3:87:df:7e:1c:40:
8a:f4:ef:86:e1:26:81:aa:a0:7c:45:a0:ca:f9:ee:3d:02:32:
23:6e:f8:84:de:bb:1d:4d:18:49:69:f9:b7:69:fa:ca:3a:01:
07:23:58:22:ef:49:99:2f:03:94:74:a7:48:35:ed:95:ed:61:
10:82:5c:9d:f0:31:4e:02:55:84:28:eb:9a:d7:95:86:85:be:
e8:b8:09:c1:e2:58:73:35:e1:aa:f2:95:dc:9b:f5:9f:2e:a3:
4c:0a:47:be:35:d6:e0:ff:87:ff:cb:cd:76:a5:f4:ed:1b:33:
1c:3b:a2:09:e4:e0:a3:d6:64:7e:d4:2b:89:85:a8:b4:57:9e:
e9:9a:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:33 2026 by rpki-client