Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
File: rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json)
Hash identifier: Zn5gisY8SXEWVO8lSo7OD3KFFw8ria2mMu+1SPtU1Fc=
Subject key identifier: FF:43:DC:DA:12:18:8F:4C:13:8F:65:B9:C7:32:5A:1E:D2:A7:74:7E
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial: 019CAB346DEC4834FB3D3290824E8C96AC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
Manifest number: 0B2C
Signing time: Sun 01 Mar 2026 21:01:05 +0000
Manifest this update: Sun 01 Mar 2026 21:01:05 +0000
Manifest next update: Mon 02 Mar 2026 21:01:05 +0000
Files and hashes: 1: 6iAprnV5kqIXyXcpRUbGQgO9SaM.roa (hash: pdyKwoYg0ynw9WDHpbBigS85Bj0l6yeKu12lhKM9YfA=)
2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: YWvdoNyms4k1yjSV+iX6AuCG4I4UADWhbtEr9Rxoz/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6d:ec:48:34:fb:3d:32:90:82:4e:8c:96:ac:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Validity
Not Before: Mar 1 21:01:05 2026 GMT
Not After : Mar 2 21:01:05 2026 GMT
Subject: CN=ff43dcda12188f4c138f65b9c7325a1ed2a7747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:e7:ca:c8:33:4b:80:65:25:be:24:fa:b8:
c5:1c:86:f3:f3:ef:14:fd:6c:9f:cf:cb:15:7f:87:
25:28:44:db:88:ea:e1:2e:59:3f:48:f6:33:33:b4:
ef:59:b6:35:52:48:6b:5c:48:d3:5d:0f:4f:98:03:
84:4d:46:ae:59:ed:b7:65:43:d6:12:1f:a4:c9:f8:
ed:3d:ad:d0:25:74:67:c6:69:64:4f:da:d1:8e:ab:
f7:23:a9:75:26:aa:67:83:2d:cd:94:6a:6f:70:3a:
58:35:3c:54:2a:bf:c3:4a:9a:2e:02:85:cd:7f:83:
5c:1a:b1:e7:1b:9c:37:70:c1:be:28:6c:31:9a:74:
9a:99:58:9e:3d:be:63:d5:b5:0c:92:49:f0:41:30:
96:d6:13:15:12:c6:49:40:42:ca:ec:bd:c9:fa:dc:
1a:09:45:1c:11:b0:fe:ea:ae:f9:a8:df:a4:4c:3b:
74:52:c5:2a:91:7a:f3:c0:d7:dc:af:45:1a:c2:6e:
9e:ea:45:9b:7d:59:f1:39:3a:d1:f8:bd:20:4c:f4:
07:1f:c4:dd:f5:62:8e:f6:fb:d9:db:d8:70:34:02:
7e:81:c2:e2:67:03:88:40:dc:c5:8d:f1:61:97:74:
cc:7e:47:be:0f:1c:a0:6d:a2:4e:d8:8e:e6:f5:43:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:43:DC:DA:12:18:8F:4C:13:8F:65:B9:C7:32:5A:1E:D2:A7:74:7E
X509v3 Authority Key Identifier:
keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:36:53:9c:43:40:28:3d:56:56:ea:2b:8e:be:18:df:19:47:
11:9f:e7:f8:9f:5d:23:4f:f2:91:b3:c8:6c:e0:99:c4:06:6e:
45:c2:5c:7f:0c:e4:e3:d9:27:bf:b9:ad:8e:21:5c:7f:b4:2a:
92:bd:11:cc:b6:19:a1:3a:57:25:d0:fe:e1:ba:1e:58:b0:34:
60:ce:5a:e5:ac:c0:8f:b4:2b:22:8a:04:e0:47:5b:17:a9:c3:
45:eb:ff:57:cd:6f:e5:bc:b0:22:38:53:99:70:b7:11:68:51:
76:f1:78:13:df:f3:b1:7f:f5:06:34:66:54:c4:00:e1:af:3a:
52:1f:76:5c:8b:a3:b5:d3:ad:01:9a:1f:96:ec:81:1d:18:37:
a9:1c:c0:de:b0:b8:4e:00:f1:0d:76:4a:c3:a3:e1:95:dd:1a:
b3:80:f9:40:ec:5e:9b:e2:90:1c:e2:1c:ee:be:80:a1:55:4f:
ea:af:0f:bf:9f:12:7f:23:64:da:cb:77:fb:21:d9:f8:d1:5b:
a9:fe:22:5a:d8:fb:1c:97:67:cf:ac:a0:ad:5d:00:36:c2:68:
e0:23:4e:82:c5:57:72:65:c5:b1:03:08:5a:55:57:28:e5:3d:
6b:39:60:86:3b:4e:7b:3d:8e:5f:22:51:5c:2c:6a:85:85:7a:
59:cf:58:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:34 2026 by rpki-client