Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File: fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier: pt4/57/Cbq5CXekJZIVTM9N1msv8ltTkR5DrxoQ9SZ8=
Subject key identifier: 09:80:70:58:35:BC:64:75:04:02:C8:22:64:61:98:11:53:23:D0:1E
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial: 019CABA209FD0A103376FF009EB61A495E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number: 161C
Signing time: Sun 01 Mar 2026 23:00:49 +0000
Manifest this update: Sun 01 Mar 2026 23:00:49 +0000
Manifest next update: Mon 02 Mar 2026 23:00:49 +0000
Files and hashes: 1: CTvb0FUa15u0RFsbQjogkyjXQEo.roa (hash: rc8P8+g7ke0pQjl95RJtZC0Plvgs/SZq9fu71nIHzfo=)
2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: 8a0283TDQHkq8v5I9ai3l4PDIYzaXk8KnD/fMRSoGAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:09:fd:0a:10:33:76:ff:00:9e:b6:1a:49:5e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Validity
Not Before: Mar 1 23:00:49 2026 GMT
Not After : Mar 2 23:00:49 2026 GMT
Subject: CN=0980705835bc64750402c822646198115323d01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:2b:1f:08:19:05:86:2e:c6:73:fe:a1:28:
77:0e:1e:c0:e9:ca:ba:46:1b:cf:f2:e6:ca:2f:9d:
34:4d:17:64:2e:d2:90:f2:10:ce:47:59:de:e8:34:
64:83:25:74:82:47:a0:62:b0:2a:89:3f:99:e0:5e:
a4:89:30:29:cb:53:e3:2a:6d:2d:92:c9:fd:c9:2d:
41:53:8e:cd:ab:5a:6d:25:2a:76:44:16:6c:20:43:
68:ff:44:d2:c9:d6:83:28:83:01:1b:6a:8f:18:42:
95:85:59:55:8d:02:6a:cd:ec:ee:29:ff:aa:2b:61:
3a:ac:d1:91:ae:54:ce:f3:2d:92:df:40:d6:53:db:
15:76:08:01:04:0f:be:e7:02:16:8c:a0:e1:62:94:
2b:5b:5c:e0:b8:b9:be:77:5a:c4:94:e1:0e:2e:be:
1d:50:0f:25:db:60:6e:bc:88:37:83:30:25:af:0a:
e2:e8:73:0b:dd:a6:c1:db:85:94:71:e3:dc:28:84:
17:a8:f8:39:a4:e1:4f:e1:a0:20:ab:b0:33:23:d6:
d9:1f:90:5e:2a:af:cc:ba:82:da:c6:7b:c4:7f:06:
90:29:34:26:23:3c:bb:b4:ba:dd:9a:be:5b:2c:d6:
11:06:c6:47:3d:fc:5c:4b:24:fb:e6:5f:75:c0:28:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:70:58:35:BC:64:75:04:02:C8:22:64:61:98:11:53:23:D0:1E
X509v3 Authority Key Identifier:
keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ef:61:66:64:e2:11:39:10:49:7c:79:1d:28:08:98:68:08:
a3:61:d7:00:45:6f:4a:df:a0:f8:df:55:28:ff:58:a8:52:02:
54:e2:f6:2b:35:69:18:e6:fa:dd:36:b5:e5:bd:84:4d:44:4a:
d4:11:86:66:4c:0f:fc:9d:18:b7:a4:66:ed:89:fa:7b:fd:2d:
29:b1:d9:3d:e0:74:5d:c4:63:8f:b0:70:71:e0:33:e0:5f:78:
ed:f6:36:eb:9d:5e:12:fa:4d:bf:17:d1:04:75:26:45:66:6e:
8a:1b:26:6c:73:4e:7b:b2:04:3c:e8:42:3a:28:a9:21:b6:91:
a1:7d:7d:71:81:61:09:f4:43:18:e5:3c:78:87:8e:1a:bd:26:
37:ee:b7:35:3b:f7:9f:f6:21:40:47:39:d6:3c:9e:67:cf:6c:
3d:f9:5e:39:56:92:32:dc:b2:bb:e9:f5:99:e2:d2:85:17:59:
6d:9c:5e:e2:0f:3f:e4:25:55:8c:2a:7d:ba:3b:d9:c3:c7:45:
b8:61:95:9b:05:03:97:cd:bc:81:a8:08:ea:2e:8e:c4:ca:0c:
1b:0c:df:7a:99:9f:4d:9c:35:3b:3c:29:ab:75:e6:2e:1c:1d:
e5:10:26:95:e2:b7:cc:32:31:03:5c:05:2a:f4:bc:79:b0:29:
20:c0:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:25 2026 by rpki-client