Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
File: FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json)
Hash identifier: kPiiMO+6xOE4NR8akUsaJYRkuFniRMdnKRmIKSsUaGw=
Subject key identifier: 9C:44:4B:15:DE:F3:58:30:F3:47:DA:25:A8:ED:A8:63:EC:DD:97:A2
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial: 019CAB6C07A9CB98EFA49654BA4CB3352D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
Manifest number: 116A
Signing time: Sun 01 Mar 2026 22:01:49 +0000
Manifest this update: Sun 01 Mar 2026 22:01:49 +0000
Manifest next update: Mon 02 Mar 2026 22:01:49 +0000
Files and hashes: 1: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: f+8usqQeUtiWp7LjgMhJOhYQvB1M9SZLuxxBOIm2U2g=)
2: ujvUCeMeHFa3WfWN6G6OHhHxhuI.roa (hash: pG5oPA2yhKapDXzeja3NTKTYlcJo6W9vaHYK9VMmI4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6c:07:a9:cb:98:ef:a4:96:54:ba:4c:b3:35:2d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Validity
Not Before: Mar 1 22:01:49 2026 GMT
Not After : Mar 2 22:01:49 2026 GMT
Subject: CN=9c444b15def35830f347da25a8eda863ecdd97a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:6b:3e:c9:3b:a5:92:b6:16:ab:be:f1:98:
e3:1e:e4:50:73:29:d2:cc:d7:e7:31:f9:db:9c:00:
c6:98:eb:93:ff:c8:aa:d5:60:6a:65:57:ef:36:83:
70:80:6f:61:f4:a6:14:bb:41:b9:70:ba:d5:23:78:
c3:0b:26:ef:7d:89:ad:91:ef:1d:fa:f1:f1:32:01:
dc:e7:80:18:fb:2b:4e:19:28:95:c5:e7:b8:f6:9d:
d9:65:66:c5:73:f4:c2:16:d7:ca:8d:8e:91:e3:3e:
d2:8e:0b:53:20:61:60:9d:e6:06:df:71:87:b6:b2:
44:3b:5b:03:78:0b:e6:52:1f:36:32:51:ba:88:55:
dc:3b:c7:ff:dd:d5:64:ce:75:79:14:a2:59:34:ec:
5c:4c:67:a3:2c:b2:00:62:be:e5:3d:bb:88:12:fb:
fa:d5:87:1f:7b:7d:30:34:5d:35:aa:96:6e:ba:f0:
64:f2:88:5c:4a:ee:d1:01:ed:d9:0a:69:42:39:27:
ac:d7:ea:0f:ca:c7:b9:35:8b:2b:68:35:cc:9c:cb:
69:11:51:b2:d3:14:45:f2:ad:57:73:ff:a3:8e:8b:
c3:05:9a:52:87:d9:d0:e7:88:30:4e:57:65:83:f3:
72:72:3b:28:a9:8d:27:79:64:ab:d8:8e:b9:77:19:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:44:4B:15:DE:F3:58:30:F3:47:DA:25:A8:ED:A8:63:EC:DD:97:A2
X509v3 Authority Key Identifier:
keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d9:d2:3b:aa:92:9b:d4:61:86:d8:2a:0f:37:3f:8a:d6:6e:
6d:b7:cb:32:ce:84:bc:0c:0f:5e:58:76:9f:5f:7a:b7:a6:12:
5f:12:8a:f5:41:aa:7e:f1:43:b3:92:16:99:e9:b2:66:86:ff:
b3:e9:15:d4:fd:70:80:36:41:93:88:73:10:7a:75:be:48:5c:
73:5c:70:55:0f:36:b7:a9:53:1b:e6:32:32:08:0d:db:07:bf:
13:b4:ea:1d:04:38:16:10:81:73:00:51:72:92:54:c4:fd:84:
c2:03:bb:41:a9:c3:c9:09:27:b9:28:37:27:f6:0f:1f:b8:21:
11:f2:f1:7e:95:09:bf:a5:23:9d:da:68:05:02:a6:10:bc:5b:
9a:9f:63:86:b5:eb:25:60:c0:92:2d:ad:5c:96:53:c2:7e:02:
ca:b7:60:73:05:9b:1d:a8:e3:51:ab:da:4a:a5:5a:9e:ba:66:
1c:62:e2:39:53:a0:a3:35:62:5e:a4:6b:1f:58:e4:87:fa:38:
a6:ff:2a:7a:f6:73:08:c2:c2:d2:c8:7d:0b:d2:d3:ee:76:2b:
81:0e:b9:69:8e:82:44:eb:3c:d3:fd:b3:ce:90:c3:33:b3:14:
45:86:76:43:81:e4:43:2c:c8:eb:4a:a4:9a:b5:1d:62:09:83:
28:60:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:32 2026 by rpki-client