Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
File: fGHj2B8FrLVr33mO1K4q9jd5QgE.mft (raw, json)
Hash identifier: foD/uG6eCiutJd+dBJQ5E77b860pSVzL0wiv/jtCO6A=
Subject key identifier: 99:5F:53:E5:D0:B2:8B:CB:8B:36:C2:E6:DB:2D:69:96:59:3C:E8:7B
Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
Certificate issuer: /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Certificate serial: 019CAD22E0C16A1F4B04923FDFEC60232AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
Manifest number: 0E6C
Signing time: Mon 02 Mar 2026 06:01:09 +0000
Manifest this update: Mon 02 Mar 2026 06:01:09 +0000
Manifest next update: Tue 03 Mar 2026 06:01:09 +0000
Files and hashes: 1: OM1cSFU8Ho_5gGRm9_J5AM__9Vo.roa (hash: gWCTvEKc3tzachY7brHH1xI78OvzIY3uE0uOo2Zryuw=)
2: fGHj2B8FrLVr33mO1K4q9jd5QgE.crl (hash: hUQFWGEHFgdxpYJCB4wljS0VRrvepL/sIuTxZ87oBoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e0:c1:6a:1f:4b:04:92:3f:df:ec:60:23:2a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Validity
Not Before: Mar 2 06:01:09 2026 GMT
Not After : Mar 3 06:01:09 2026 GMT
Subject: CN=995f53e5d0b28bcb8b36c2e6db2d6996593ce87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:64:09:2a:25:ac:8a:5c:46:ae:f2:a1:81:
60:f4:a7:6d:2a:b2:1c:54:0f:1a:c5:1f:e9:df:5c:
0f:e8:35:20:af:35:83:19:b0:8a:75:34:0b:f8:79:
c9:56:05:c6:0a:15:a6:12:1b:79:9f:d1:f8:b1:d6:
ee:9c:db:56:97:d0:4d:35:5d:ef:a6:63:b6:38:19:
a2:bb:1e:66:7c:51:9e:69:5b:65:c3:7e:2e:79:3d:
3b:ff:d3:82:77:6f:e9:0f:31:17:44:52:5e:38:46:
80:3e:5e:62:a9:10:ea:e8:8a:0f:99:de:c2:c7:d9:
04:42:97:14:b4:0b:30:f3:93:89:cf:85:85:28:37:
05:af:bd:34:52:c4:c0:7b:ef:42:e9:71:5a:57:05:
f2:1d:c9:3c:b9:8d:08:75:09:82:6a:14:ba:30:e8:
da:f6:10:84:25:43:1f:b9:35:de:fa:d8:ac:a3:b0:
b8:e7:39:6f:50:cd:18:73:c7:54:52:89:5e:ac:b8:
52:c1:79:6c:8a:55:53:3c:4d:28:9f:cd:47:aa:85:
b1:2a:44:ed:ae:4d:3c:e2:7b:c1:7c:5e:e7:cc:f3:
a8:81:f9:86:85:c5:59:9e:f1:6f:40:8d:17:f3:dd:
e7:bc:eb:7e:6c:db:62:7b:b8:2a:c1:25:d2:c1:78:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5F:53:E5:D0:B2:8B:CB:8B:36:C2:E6:DB:2D:69:96:59:3C:E8:7B
X509v3 Authority Key Identifier:
keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f9:d6:c7:23:fa:53:fb:38:78:7a:27:22:37:68:bc:10:0d:
e9:50:bd:b7:51:16:f2:84:06:a4:8e:3a:8c:d7:0b:e8:32:58:
28:af:ae:c6:0c:4b:fd:34:30:ba:5e:ff:21:f7:5e:4a:b3:96:
73:b4:50:5c:84:2e:3c:5f:08:bf:39:24:40:76:b1:66:6e:48:
4f:dd:c6:49:3c:de:91:3c:74:b0:02:eb:5a:11:ab:cd:6f:b8:
64:14:3d:dd:3d:96:3d:47:af:e8:2e:d3:1f:cd:6b:c1:50:74:
45:be:45:dc:7d:b3:eb:70:d7:e5:b8:8a:76:54:d2:7e:5b:23:
24:5c:16:1c:97:7d:32:fd:d4:ba:82:6b:55:a6:05:05:9d:2e:
28:9a:f9:13:a1:b0:6f:1c:b5:b3:8c:9c:ee:ac:33:5a:5b:3c:
48:8b:f3:8f:be:46:e0:30:b9:f8:49:02:06:ad:53:e8:d1:7c:
72:11:d1:ab:cc:27:72:10:09:2c:ab:ab:8b:ef:a5:b8:e8:9d:
3f:4a:cf:7d:fa:d4:ed:c3:d8:44:ad:2d:81:d6:8a:33:a1:74:
67:8a:c9:0f:a7:9e:a6:c8:a9:98:8d:59:47:4d:3b:58:28:e3:
8b:d2:7a:19:17:f9:6d:17:60:78:75:ec:9a:6b:67:04:34:ef:
79:09:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:21 2026 by rpki-client