Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
File: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft (raw, json)
Hash identifier: kyS6NY7NcJUq44pCaMN2qzDBaDfzIg7abbRkEoUOlGg=
Subject key identifier: 5E:04:B0:BB:88:1F:BF:7E:C2:97:A3:1E:59:47:FA:67:ED:A5:2D:85
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 019CABD9586A86363CCA5634CA3889731B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
Manifest number: 0CB5
Signing time: Mon 02 Mar 2026 00:01:13 +0000
Manifest this update: Mon 02 Mar 2026 00:01:13 +0000
Manifest next update: Tue 03 Mar 2026 00:01:13 +0000
Files and hashes: 1: WDfbjRg4ihOKTvhRrJJRD1g3RiM.roa (hash: 27A9TuMLCLsH9w3Xm8KR6AJ2CdSs60GHyEW7+A7yzkw=)
2: fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl (hash: VVEC2H/kQSjM/UAAKXrzPyKsPH/K1Drgn7ODRmeBZMM=)
3: xEtH3nZkjZP1cHLTfmkxzgvLsMU.roa (hash: BGUb3g3pcbUOTctA2o1s832xh1EgHk8oxohuvzvEQok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:58:6a:86:36:3c:ca:56:34:ca:38:89:73:1b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Mar 2 00:01:13 2026 GMT
Not After : Mar 3 00:01:13 2026 GMT
Subject: CN=5e04b0bb881fbf7ec297a31e5947fa67eda52d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:20:6b:1a:99:56:b4:b8:60:33:34:cb:a2:
84:e4:38:63:86:f4:6a:66:50:63:52:07:fc:6d:dd:
7b:52:9f:12:15:bd:f2:aa:fd:50:83:f8:fb:cc:a4:
f1:42:8b:54:41:ac:53:8d:6c:63:50:49:5d:53:bd:
ba:6b:62:e8:55:f0:f4:8a:1d:3f:2b:65:5f:86:31:
2f:b4:8f:59:f7:92:ae:33:af:36:49:60:b0:9e:b2:
d7:c8:a8:75:9f:65:97:66:42:18:1b:1b:01:a4:b2:
55:65:fa:dd:a5:a9:7b:76:07:e1:3e:cc:af:5e:26:
a2:02:2a:e1:62:a5:0b:26:17:00:4e:b2:69:1b:83:
cf:2b:35:ee:9d:84:11:b4:7b:9a:40:7a:c0:c2:07:
96:fa:29:1a:02:d0:28:c8:28:19:46:29:21:d6:25:
e2:13:db:1c:4f:b5:3e:bb:2d:0f:5d:3c:e7:2a:2d:
54:bc:20:f8:5b:17:d7:fa:01:0b:43:83:f8:a5:04:
2e:16:82:b8:f2:92:10:09:de:d1:69:0d:e6:0a:e0:
4d:2e:9f:50:67:46:d6:d0:95:48:4b:48:7b:2e:c3:
cd:fa:44:f9:88:54:37:cb:5c:58:6e:e5:cd:e9:fa:
f8:52:95:92:42:17:fa:ea:38:22:e3:76:3e:d8:93:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:04:B0:BB:88:1F:BF:7E:C2:97:A3:1E:59:47:FA:67:ED:A5:2D:85
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cc:72:b2:54:4f:5d:36:3c:ab:87:59:77:75:2a:11:ae:df:
ba:23:0d:36:01:46:28:1e:61:ee:98:f0:6c:37:77:6c:d5:a2:
07:9c:e3:94:38:f0:d0:75:05:ac:e7:76:99:66:af:4a:59:d5:
a0:29:d9:0f:bd:df:14:f0:5b:0b:87:8a:e9:d2:ec:f3:1f:74:
4c:9d:bd:09:95:ce:b2:83:c3:c2:b2:86:b5:28:22:c6:8f:f8:
2f:d3:74:a2:7d:96:6e:44:d8:77:54:45:da:18:a3:54:73:61:
5b:23:6a:65:29:2e:f2:f8:bb:60:ea:0c:ff:47:20:d1:14:20:
95:ca:68:e4:58:82:72:2f:a4:5f:73:14:e6:10:e2:eb:e8:56:
45:d3:cb:f5:1b:f3:46:f1:e0:2e:b4:ad:94:87:7a:63:ee:08:
27:81:62:9b:6d:67:f6:e8:1b:18:24:9e:5d:ef:11:94:9b:1f:
40:77:44:e0:93:4d:c2:9b:ee:f5:79:36:3f:d4:56:9e:8a:ce:
b7:17:f4:47:f6:d8:7f:37:48:1c:19:3b:a0:4c:e6:cd:ad:15:
dd:ab:44:35:38:36:bc:37:2c:4c:af:70:d5:7a:27:52:73:52:
45:42:38:ff:22:80:ec:90:7e:c3:9f:fc:48:b3:40:e8:0f:87:
5b:03:24:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:58 2026 by rpki-client