
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
File: FVCvriuu-2uI-XUbsyGOs5uUtXY.mft (raw, json)
Hash identifier: PcYYL0khXdqg+u8p89WWeZY5WFDCE2G3jK1sea3hXUs=
Subject key identifier: 3A:6A:95:05:A0:C8:91:0A:CD:C4:7E:14:9B:71:46:98:AA:2D:53:BD
Authority key identifier: 15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
Certificate issuer: /CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Certificate serial: 019CAAFCEEBA1C8D48E271FF396AC96A20EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:28 +0000
Manifest this update: Sun 01 Mar 2026 20:00:28 +0000
Manifest next update: Mon 02 Mar 2026 20:00:28 +0000
Files and hashes: 1: FVCvriuu-2uI-XUbsyGOs5uUtXY.crl (hash: pWUJ8jDI8e8V8hjmDBsJ7+oVEdvIl2uFcNAr1m/O4uY=)
2: JN9CiCwjJw0FyXyBUSHgEZZqXu8.roa (hash: gFUGZzp8lJcrd+UrHFxGBVNmpm6H+3Uu/Q+cwgrB2bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ee:ba:1c:8d:48:e2:71:ff:39:6a:c9:6a:20:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Validity
Not Before: Mar 1 20:00:28 2026 GMT
Not After : Mar 2 20:00:28 2026 GMT
Subject: CN=3a6a9505a0c8910acdc47e149b714698aa2d53bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:09:8a:10:6c:43:ef:65:ed:21:d8:d1:19:
ae:e7:ce:36:37:b7:9d:ee:b5:4c:d7:69:2e:c1:41:
01:75:2d:00:db:de:25:03:b8:96:b2:8b:f0:0a:38:
fd:f3:ce:a2:b3:8c:30:ef:69:71:b3:98:b2:08:cd:
a0:7c:d1:df:23:95:da:5b:42:26:f5:74:0a:f6:8d:
6d:f7:dd:1a:49:d6:3e:4c:57:7f:a0:7c:69:ca:7a:
02:a1:f2:d2:f3:c2:12:d8:17:4d:7c:96:0b:e3:5f:
2a:22:c0:67:54:0c:99:ff:16:9c:79:d3:35:4f:2f:
63:b7:a5:fc:09:9c:67:c8:61:b8:61:30:1a:ea:d3:
92:0a:70:d2:7f:c4:cc:ff:0d:59:40:9e:d9:5c:d4:
fb:2a:27:15:7b:b0:f4:01:17:5f:60:bb:37:c5:62:
19:08:6a:f1:6e:15:05:bd:36:d7:62:bb:9b:0a:2e:
75:50:60:d8:44:10:82:c4:42:82:13:b2:73:64:a2:
0d:57:db:f3:80:2c:5f:ee:71:1b:8f:19:f4:46:21:
12:68:2c:3c:e5:51:4d:1e:0f:ba:0d:28:7e:8c:e0:
56:47:17:87:40:cf:c2:59:a3:1d:e5:2c:8f:39:f3:
b9:94:78:d9:51:c0:41:8b:54:aa:2e:1f:9e:6c:e6:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6A:95:05:A0:C8:91:0A:CD:C4:7E:14:9B:71:46:98:AA:2D:53:BD
X509v3 Authority Key Identifier:
keyid:15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5c:19:da:17:e6:10:5a:03:b4:c3:61:0a:68:cf:05:1e:3d:
b2:cc:1d:71:85:32:0e:68:f0:08:cb:80:23:66:0f:4f:37:5f:
04:65:1c:2d:99:a5:23:07:db:ab:2f:ce:11:9c:e1:b0:56:14:
ee:c8:fd:9c:87:b9:c1:48:4f:7b:17:7c:f2:f5:3f:33:1a:b1:
e2:e0:a8:5d:02:35:60:37:1a:e0:5c:fa:a2:76:15:af:a5:50:
c6:d9:25:2a:07:45:e4:76:cb:51:b1:e8:60:37:56:5d:a7:a9:
e2:b2:ab:e7:3b:fb:81:24:c6:f6:b4:50:27:09:43:73:20:6b:
5d:50:ca:3b:fb:9e:7d:0a:d5:a8:b2:92:42:4d:8d:03:c2:b6:
3a:82:e0:36:38:ff:3e:1d:3e:77:03:01:93:09:56:8a:00:07:
8f:e9:a6:f5:df:8d:69:55:e7:92:2f:6a:cf:fa:e5:9e:6d:08:
d5:64:d2:ec:37:ad:da:10:4f:7b:06:13:13:95:b6:ad:b7:fb:
0f:6b:7d:1e:ab:1f:58:e1:4b:04:13:c3:d3:be:58:a6:bd:27:
1e:9e:c6:1c:e5:91:39:ed:72:39:ff:2a:4f:13:25:53:2e:45:
f7:0a:e8:07:ea:68:24:43:32:c0:3a:1e:79:6a:05:24:a5:69:
a8:3d:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:52 2026 by rpki-client