Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File: Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier: iT8v1pbbummBjLjqYiiI8yxQUvPc7i+g7iqp9OOTVPU=
Subject key identifier: CD:21:4F:29:70:42:D5:CC:2F:D2:1D:35:30:24:94:C7:69:EC:1A:E7
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial: 019CAA58F24AE8DCA8C79489473E29D63D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number: 0678
Signing time: Sun 01 Mar 2026 17:01:21 +0000
Manifest this update: Sun 01 Mar 2026 17:01:21 +0000
Manifest next update: Mon 02 Mar 2026 17:01:21 +0000
Files and hashes: 1: Bv7qdIynKdZMI-P6-xF9VWllpNs.roa (hash: bLK9TvfWN2sH1qp924dJMpWvZP4Q59J3E6kgUjRdOMk=)
2: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: qPTrKynv6KiLXOpM3RNZUkyGbNrx5bBBaUXDqt9+wiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f2:4a:e8:dc:a8:c7:94:89:47:3e:29:d6:3d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Validity
Not Before: Mar 1 17:01:21 2026 GMT
Not After : Mar 2 17:01:21 2026 GMT
Subject: CN=cd214f297042d5cc2fd21d35302494c769ec1ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:6d:24:39:d2:24:54:9e:bc:f8:4b:b5:62:
fe:27:2a:5b:a1:a5:3a:14:d0:5d:19:92:bc:99:1a:
72:ec:88:e2:6f:88:51:25:54:ca:fc:27:0e:9f:1e:
54:2a:8a:11:40:f1:ea:da:52:c8:b8:9f:a3:aa:b2:
d6:2d:48:60:3f:b4:eb:a8:83:25:b0:a2:aa:8c:f1:
0f:c3:db:49:b9:9b:58:19:ac:f4:19:f7:7d:02:46:
e3:70:03:66:2e:45:ef:62:a4:ac:7f:23:1b:41:22:
e0:e1:c6:a8:8f:73:3a:8a:48:b4:bc:99:81:5b:9d:
64:86:c4:f0:ce:5d:0c:e0:f0:bc:cb:51:65:b6:8d:
3f:28:88:fd:48:2a:43:8d:39:bd:9c:f3:95:1e:58:
89:ea:29:7e:ed:a3:6b:1f:c7:0b:6b:b4:fb:d1:a9:
c2:fa:6c:04:3a:c8:85:c5:65:94:a7:c2:14:98:7f:
bb:2b:ab:1b:46:eb:8c:cd:07:98:24:1a:43:00:50:
16:47:54:74:92:31:66:62:9c:94:d7:31:33:bd:ad:
76:64:72:10:44:62:0f:de:c1:ce:83:aa:99:9d:a0:
d3:af:7f:1c:a8:6b:01:b1:e3:a1:55:7d:38:64:a6:
8e:dc:65:c5:87:d1:a1:2c:70:c7:2d:43:6c:f3:99:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:21:4F:29:70:42:D5:CC:2F:D2:1D:35:30:24:94:C7:69:EC:1A:E7
X509v3 Authority Key Identifier:
keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d3:62:ac:c3:e4:d0:8c:89:ea:9a:74:13:c8:6f:e1:c6:fd:
3c:37:f9:61:e4:0e:94:28:43:c0:45:23:0f:91:5c:c6:c6:24:
5d:48:f7:be:e1:ee:35:6c:71:89:22:aa:66:5f:82:58:b4:e7:
6f:94:41:1e:cc:46:0e:82:d1:b0:0e:b9:bc:3f:32:cb:4b:c0:
9f:80:71:c9:fe:b5:a1:d1:c2:ac:cb:57:36:7f:4f:d9:bb:1f:
ad:12:9c:6e:ca:21:ef:96:78:0c:9a:6c:d1:57:e4:23:17:5b:
85:ba:75:d9:9e:4e:77:f7:3d:c3:b8:54:46:d2:8c:9e:72:cb:
57:ed:97:d5:dc:ed:a8:72:1c:63:5b:7f:c5:f0:b0:95:30:be:
5d:05:69:43:92:69:2d:45:94:5f:fc:a2:40:4f:2e:d7:5a:97:
2f:c2:b8:c2:18:92:3d:2b:be:dd:1e:80:f5:39:e6:66:82:76:
fd:21:4f:e0:4c:e5:5b:71:ae:4c:72:f6:b2:77:56:e2:40:5e:
21:45:ad:f4:f2:8e:e7:d9:4d:2f:74:9c:b4:e8:45:6e:ee:76:
0c:d4:57:fa:91:d2:77:dc:c4:eb:e2:a6:c9:8c:97:e9:32:e1:
65:4a:ef:f4:db:4b:cc:ab:4a:35:ae:3f:73:f5:cc:76:4d:99:
40:13:8b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:58 2026 by rpki-client