Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
File: FYlivF2icS8gj8ixXr3CRq9Mvs8.mft (raw, json)
Hash identifier: HyZAEWeEtVmEmMreclNOAjexG/dKMV007qFIN2VKsS8=
Subject key identifier: 81:41:AF:50:FE:87:40:DA:D7:E8:D3:59:A7:FE:50:CB:00:F2:79:5A
Authority key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
Certificate issuer: /CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Certificate serial: 019CABA20E5EAA1EE3C252CE6D8191FE8A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 23:00:50 +0000
Manifest this update: Sun 01 Mar 2026 23:00:50 +0000
Manifest next update: Mon 02 Mar 2026 23:00:50 +0000
Files and hashes: 1: FYlivF2icS8gj8ixXr3CRq9Mvs8.crl (hash: e50xalLcC0hy8h24RgisSTzpch8/8jqvljCkPYy1zuE=)
2: RXspwIUrgHZfrSVCO63AFZW1IxY.roa (hash: 2OggZdJRXeMt/msbNLPkl5fnqJJuk9plsaJeWQW6pRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0e:5e:aa:1e:e3:c2:52:ce:6d:81:91:fe:8a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Validity
Not Before: Mar 1 23:00:50 2026 GMT
Not After : Mar 2 23:00:50 2026 GMT
Subject: CN=8141af50fe8740dad7e8d359a7fe50cb00f2795a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bb:91:93:d1:9e:0f:65:25:a2:64:04:7b:03:
0f:02:92:72:38:01:4d:54:ec:80:26:d0:f7:49:f8:
ec:2d:d6:3d:3c:0f:97:09:36:1f:6f:5e:1c:9d:a4:
ab:cd:f9:30:86:fd:78:0c:fd:0d:aa:62:78:8d:46:
e0:c3:28:f2:4e:0a:d5:5b:39:5d:d1:88:f1:e7:c3:
8a:8c:6f:49:22:30:ce:28:de:3b:93:22:c2:b5:b9:
50:b4:da:e8:c5:8c:c6:02:28:5f:bc:3f:ea:c1:ff:
b5:f0:8e:62:2a:fd:bd:af:af:3b:04:cb:1d:24:7c:
b7:a3:da:b4:c3:48:3c:e0:7e:97:15:4d:b3:af:c3:
bb:4c:bf:8f:d9:c7:79:2e:9a:1f:9a:3f:4e:a1:2d:
08:2f:03:4a:fd:93:e8:77:fb:1d:e9:12:0c:31:e8:
de:80:ac:64:67:51:c6:d2:6e:cd:cf:7f:a6:6d:71:
af:dd:3f:bc:08:3e:20:53:0b:00:a1:f0:19:dd:3b:
7f:47:f7:26:00:d2:e1:39:6a:19:37:cc:1f:ba:cb:
a2:9a:69:48:23:76:0f:1c:ca:a5:6d:e0:87:78:e5:
de:43:63:78:ee:84:9b:e1:0e:d9:e9:46:2a:69:f6:
68:f2:cd:22:d9:75:4b:94:64:dc:f0:fa:4b:96:1a:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:AF:50:FE:87:40:DA:D7:E8:D3:59:A7:FE:50:CB:00:F2:79:5A
X509v3 Authority Key Identifier:
keyid:15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2b:f6:d8:9f:28:6c:d0:b1:51:f6:e4:38:2a:ea:ea:27:ac:
a1:26:14:f8:cf:28:03:bb:d3:5a:d9:b8:e5:e3:08:27:30:8e:
2a:bc:f0:42:5b:ef:10:ed:5d:24:10:52:f5:be:98:47:49:55:
66:59:33:c0:06:6e:d9:40:d6:0d:95:1e:35:38:ad:62:3e:0f:
b2:68:fe:8c:9a:ec:37:08:d5:96:bb:e4:48:ca:49:05:ef:a8:
6f:b6:ac:49:e9:aa:6e:2f:5a:f6:a7:c5:65:a1:8a:2a:2a:7f:
73:84:8f:12:1a:91:92:a2:ab:69:8a:e6:fa:f8:f4:8f:40:e7:
41:57:a1:54:8f:9d:f8:5b:9d:46:a1:96:12:c9:74:f6:ef:75:
ec:ed:66:13:bb:06:a5:62:a0:dd:b9:a4:b4:9e:61:90:c5:b0:
c3:bb:a6:cf:ca:79:cd:ca:bc:20:07:c7:11:ec:41:21:f1:e8:
83:dc:95:ee:1c:05:2f:2f:9b:4b:af:2a:cd:db:63:e7:a6:da:
85:7d:a5:49:10:98:a6:e2:cd:71:46:f1:07:18:c9:4b:7a:48:
31:38:7e:f9:cb:c7:55:90:47:ef:77:1d:84:e2:75:8d:27:71:
f6:b6:d3:20:c1:8d:80:a0:8f:28:61:7b:f8:67:b0:00:e8:ac:
ff:99:c6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:10 2026 by rpki-client