Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
File: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json)
Hash identifier: ufazbZVAAKiUEfaT8L6L6hUs8c8O69Q1QFt44nVa898=
Subject key identifier: 83:E2:AB:FE:88:CB:07:3B:ED:92:40:A9:21:D7:B0:A7:EB:C5:6D:4D
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 019CAD22F7EB085AA6E69005B74D82246278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
Manifest number: 0E84
Signing time: Mon 02 Mar 2026 06:01:15 +0000
Manifest this update: Mon 02 Mar 2026 06:01:15 +0000
Manifest next update: Tue 03 Mar 2026 06:01:15 +0000
Files and hashes: 1: 38oAPK8l1QAyS4-vjUH6OdfHPVE.roa (hash: HEbM3ygSfjq8vR4KrtNmnwA7caa3UAN1JiQwsCGLoxg=)
2: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: FD7IvAYnrMzXM/fZVgAuCv90MOeS4hL3asOR/FDA4Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:f7:eb:08:5a:a6:e6:90:05:b7:4d:82:24:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Mar 2 06:01:15 2026 GMT
Not After : Mar 3 06:01:15 2026 GMT
Subject: CN=83e2abfe88cb073bed9240a921d7b0a7ebc56d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:c3:9c:1e:f9:58:9a:84:bc:42:ae:f6:6f:
b4:0b:a2:e6:40:ce:7d:b1:0e:0c:66:03:00:24:e8:
e5:9e:fc:a6:5f:38:10:0f:ba:00:0c:ce:a7:22:71:
d0:90:9a:ba:cc:db:64:b6:5d:a4:d8:3e:eb:4d:d6:
8f:86:cc:fb:99:f1:27:2a:c5:fb:7c:4a:74:10:e9:
74:d5:80:d2:71:18:b6:30:9e:f1:6f:b6:4f:14:55:
0c:fa:60:b4:1a:c2:14:98:74:1f:bb:06:ab:cd:a5:
6b:e4:60:d3:1f:5a:e6:b8:82:a1:fa:71:af:9b:0c:
f6:99:4c:a7:ac:77:58:34:ff:f0:c7:e6:49:8e:de:
8d:cf:1b:c0:2d:fc:71:5b:5a:7d:f9:b9:d6:7b:ee:
69:35:4b:31:4a:ed:f1:61:29:e7:dd:da:88:40:22:
1c:51:93:6a:34:d7:79:81:32:dc:35:b6:33:6d:1b:
6f:22:38:cf:78:72:99:27:c7:9d:47:5d:8e:68:b1:
81:4e:6c:e7:12:ef:64:d4:cf:9c:5d:63:f5:b3:ed:
51:1b:cc:db:1a:84:d9:7a:7c:79:56:19:bb:84:d2:
2d:e1:77:3d:d7:2f:65:84:91:d5:e4:d8:f9:e8:fb:
82:ff:28:49:94:de:93:e7:80:e8:8c:21:63:49:f9:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E2:AB:FE:88:CB:07:3B:ED:92:40:A9:21:D7:B0:A7:EB:C5:6D:4D
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:96:41:04:01:8d:18:81:fd:2b:e4:00:c1:48:94:78:4d:e6:
62:0b:0e:37:d0:3c:54:b7:31:42:30:5d:c3:5c:8e:55:bd:d8:
d6:48:2b:f1:67:ca:1f:4a:87:8c:23:1a:88:d1:ab:2c:96:95:
bc:5c:44:da:a6:2b:13:54:a5:ab:b1:a1:dc:cd:f6:43:42:74:
71:b7:80:2c:cf:3b:cc:6c:1c:c8:c9:57:f9:b7:da:73:f9:ab:
ba:ac:66:fe:f1:e8:c5:27:66:5f:61:1b:81:12:23:61:cc:99:
b1:80:39:7c:a7:0f:b1:41:c1:e7:b6:63:96:a9:2a:40:3a:f8:
d7:b7:cf:06:63:66:e5:fb:f6:89:d8:aa:f4:ea:5c:18:11:75:
4a:fc:87:6b:1d:f6:b2:4b:0d:52:0d:e7:de:af:d5:9c:e2:70:
ec:a9:10:ed:8c:d9:16:f2:70:8c:2a:c7:90:70:59:c1:4c:1e:
2d:59:c2:8b:2e:79:3a:3a:8a:92:3d:2c:da:d3:0b:68:5a:1c:
30:3a:ca:ec:47:4e:aa:f8:43:de:dc:2f:64:13:44:ca:f4:82:
ca:e1:5e:07:cc:3d:0d:28:5a:4e:c6:78:1c:6f:bf:1a:b3:37:
c8:b2:88:03:62:5e:05:73:04:e6:72:6f:92:10:2f:67:3c:ee:
0b:8e:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:28 2026 by rpki-client