Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier: HLIq2luawb177bGh8ygOwOSShCxwmcUI7lwcdOUW1A0=
Subject key identifier: BA:95:93:12:4D:8D:B1:80:32:08:0B:3B:AA:DC:37:9B:78:6A:B2:48
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 019CABD8EB325FF931D14E372D2EC1D1448D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number: 110C
Signing time: Mon 02 Mar 2026 00:00:45 +0000
Manifest this update: Mon 02 Mar 2026 00:00:45 +0000
Manifest next update: Tue 03 Mar 2026 00:00:45 +0000
Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: zgsGX5jqhsRf4hVpgSA4vB6AD4fVxwYKVWl9CDj++EQ=)
2: jDnrlpzju9hJvaoQu4OXwOXPSyA.roa (hash: 5ssODwVsvynqY+E+xEJbdKWKWIk6XsrizpcJBHs3DN8=)
3: uxvdRH3Lx7ZudvJAlNDH4WnIMb8.roa (hash: 7H1SzU9/jyjG63PZcxwjrSZgzIIH3ECkB+OiPPAHQwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:eb:32:5f:f9:31:d1:4e:37:2d:2e:c1:d1:44:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: Mar 2 00:00:45 2026 GMT
Not After : Mar 3 00:00:45 2026 GMT
Subject: CN=ba9593124d8db18032080b3baadc379b786ab248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:ac:69:e4:5b:df:7f:10:65:ca:6a:8e:08:
51:88:09:4a:9e:a2:f6:2c:fa:8a:17:c4:d2:83:1b:
bf:fa:6f:d1:3a:3e:3f:17:67:23:f6:1c:13:b4:2a:
17:c9:91:92:a2:76:9c:d1:7c:44:8f:17:9d:58:b1:
e9:84:d7:d4:9e:5e:29:b1:22:bd:fe:0f:00:59:d7:
2c:3c:9a:cd:61:2a:72:cd:69:1d:12:d0:ff:b5:89:
65:07:d4:54:53:b1:9d:98:21:c5:1b:df:64:de:d1:
a5:84:df:25:4a:3a:d5:cf:97:d7:54:b6:fb:13:1c:
2f:b0:82:68:01:fa:89:a9:fd:1c:ff:ac:0e:21:80:
dc:44:42:e6:a8:18:1a:a2:09:f6:34:2f:28:bb:b6:
a0:f1:17:d0:00:62:94:76:e2:ea:ba:52:7b:48:dc:
6a:f6:94:53:fd:66:54:23:c8:e2:bf:87:e6:78:a1:
8b:21:27:48:29:46:25:af:66:c0:4d:d4:70:9d:80:
0d:96:4b:28:17:65:ff:a2:86:a5:0f:7e:33:3a:9e:
23:4a:e5:21:cf:ea:cd:91:f5:8f:6f:2f:57:06:aa:
8d:54:a1:02:13:af:20:64:0d:1f:64:34:1f:ae:1d:
6d:de:ed:ff:bb:1c:ba:3e:4a:fc:b4:1a:80:ba:d9:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:95:93:12:4D:8D:B1:80:32:08:0B:3B:AA:DC:37:9B:78:6A:B2:48
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1a:ec:b2:57:78:ab:8a:fd:b9:96:05:5c:9e:d7:c5:6c:98:
fd:b3:3d:64:ce:6b:32:f1:43:2c:25:3a:b1:03:d6:ce:1b:3b:
40:24:89:0c:05:4f:b5:88:61:b6:72:e7:63:d8:ef:78:21:a7:
43:d8:c3:1c:6d:9f:fe:f5:cd:38:08:13:22:e4:29:f5:bd:6c:
29:63:64:20:fe:e0:a8:ae:fe:bf:40:42:d3:04:fe:59:da:62:
95:0f:0d:5f:0e:93:ff:5f:01:9d:51:42:ed:c9:d4:d1:b6:88:
e8:5d:01:6a:52:3f:f5:b9:c4:9c:09:ac:12:c1:03:ba:3a:56:
b2:43:07:c8:d9:3c:43:9e:7c:87:97:2d:3e:a3:f3:e8:44:cf:
da:45:b2:4e:d1:b0:5b:7b:03:c2:2c:7a:16:6d:7c:e2:a7:0a:
9f:7b:88:7c:11:ad:6f:2b:18:a5:2b:89:d8:86:3d:c8:ef:bc:
f6:e8:0e:c9:be:ad:4c:47:0a:9a:42:71:ac:b3:47:3e:69:9a:
99:23:bf:00:d9:c6:f7:dd:42:16:10:8d:5a:70:53:9c:84:70:
cb:64:60:21:d3:78:56:2d:99:c3:93:02:c7:6b:b7:a9:62:37:
85:f6:91:23:26:2d:8a:03:21:d8:31:4f:91:b4:92:1d:d0:76:
3b:6e:98:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:35 2026 by rpki-client