Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
File: fGHj2B8FrLVr33mO1K4q9jd5QgE.mft (raw, json)
Hash identifier: JtjB4yRSnVeh18M64r5adu6I9+N4FxSOmF2KovfDOKQ=
Subject key identifier: 48:07:28:59:BD:EA:F1:B9:AA:E8:07:11:9D:B2:09:A6:29:D9:C2:7C
Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
Certificate issuer: /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Certificate serial: 019DA45429A0C83CC1D897FF04550A332A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
Manifest number: 0EEC
Signing time: Sun 19 Apr 2026 06:01:12 +0000
Manifest this update: Sun 19 Apr 2026 06:01:12 +0000
Manifest next update: Mon 20 Apr 2026 06:01:12 +0000
Files and hashes: 1: OM1cSFU8Ho_5gGRm9_J5AM__9Vo.roa (hash: gWCTvEKc3tzachY7brHH1xI78OvzIY3uE0uOo2Zryuw=)
2: fGHj2B8FrLVr33mO1K4q9jd5QgE.crl (hash: 92l7aPbXlmbkX9oP0I1H69d93fe/5RJwcb9K62giQv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:29:a0:c8:3c:c1:d8:97:ff:04:55:0a:33:2a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Validity
Not Before: Apr 19 06:01:12 2026 GMT
Not After : Apr 20 06:01:12 2026 GMT
Subject: CN=48072859bdeaf1b9aae807119db209a629d9c27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:7b:1c:2a:e5:d2:11:2e:69:f6:96:a0:6f:
b7:f5:3e:a0:4b:ec:c1:69:e5:23:d7:d9:46:ab:41:
41:9b:1c:ac:69:73:7d:56:a0:85:79:b8:85:22:b0:
6b:08:9e:3f:72:39:a0:72:16:c9:75:5a:56:5c:ef:
28:35:ba:57:0f:5b:32:a4:0b:41:bc:8c:4f:9e:ca:
57:f9:76:a7:bd:67:f4:07:ac:42:33:7c:a0:8e:c9:
33:8d:79:a0:67:a5:c6:45:4d:3c:96:b8:27:05:e7:
4b:8d:83:79:d0:33:3f:31:6e:28:93:21:5b:19:18:
55:04:2e:94:26:02:a4:24:a5:b9:c8:ec:7a:00:6c:
ed:11:4f:7f:75:9d:61:9a:4d:f4:46:8b:86:ac:2a:
d0:1c:c1:43:72:69:a5:c8:45:88:ee:1d:6e:eb:91:
72:db:61:74:9e:92:22:36:f0:3e:50:b2:2f:4d:18:
4e:e1:d8:1d:69:3f:f6:ac:99:f8:85:33:67:da:94:
2b:7f:66:8a:90:c9:71:27:7f:e1:ab:26:40:0c:7e:
05:64:ad:f5:d3:80:32:8e:b2:8c:27:89:0b:ae:f7:
1f:26:b7:5d:61:04:48:db:f2:fb:37:cc:50:a5:92:
2b:54:db:b6:5d:27:8b:75:e0:56:73:42:d7:f5:13:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:07:28:59:BD:EA:F1:B9:AA:E8:07:11:9D:B2:09:A6:29:D9:C2:7C
X509v3 Authority Key Identifier:
keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:63:06:63:dc:71:20:83:2e:df:19:89:f7:f9:6e:14:da:
7e:7a:b6:9d:59:e3:20:32:b0:a8:7b:bb:c1:68:48:83:c1:5f:
22:e4:a9:a6:9b:8f:1d:f7:bc:b3:bf:6c:c5:f6:92:cc:2d:d9:
af:76:4b:4f:25:bc:d5:91:77:09:eb:89:bc:35:b0:31:40:40:
1b:7c:9e:30:bf:9a:f9:d1:cd:bf:a5:eb:1b:0a:53:6b:78:80:
fe:4a:6a:ad:84:6e:db:db:26:7c:29:ec:d3:9f:45:9d:6a:f1:
71:54:55:75:33:51:a8:02:24:6a:51:4c:9b:58:de:45:0d:3c:
b6:ca:8c:d4:29:d5:94:25:ca:f0:05:75:91:9c:53:5d:f0:18:
cb:f7:18:0e:28:ef:d1:57:4e:34:c0:85:d4:af:04:5d:02:d3:
75:43:59:df:f0:99:c3:e3:b6:b8:73:63:d9:41:65:3d:32:be:
75:14:7c:3f:b8:c6:82:85:e2:04:9c:b0:5b:37:d6:4a:be:d3:
f1:9e:3d:79:a7:a2:4d:eb:8c:24:2a:86:21:22:57:9c:ad:d7:
b0:cf:e0:b7:3d:8a:19:72:c6:cc:f2:1b:ea:31:db:8c:8e:08:
8f:2b:73:ad:ad:b7:99:7e:71:06:94:29:55:58:fb:5b:ff:a4:
fd:5a:da:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:16 2026 by rpki-client