Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
File: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft (raw, json)
Hash identifier: GgxP3qRZFUzk3oiqdqkIOT4uKJhfUo5R1dPsNTHLXWA=
Subject key identifier: 37:6F:83:AA:50:19:7A:96:CC:DA:D4:92:8E:69:CE:DB:00:03:15:43
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 019CAA58E153DDDAFCC97865661359496B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:01:17 +0000
Manifest this update: Sun 01 Mar 2026 17:01:17 +0000
Manifest next update: Mon 02 Mar 2026 17:01:17 +0000
Files and hashes: 1: 8msB_pW-2uX67lJFvxygplmiAYM.roa (hash: MdKHF0c5oREJJjw35mtLasbrxg7HAjIQzXUDf6T975M=)
2: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl (hash: Mx6fAQCjaNNzVRxMm8qIHB11HQqON0pV/Cfo40otN94=)
3: IajAPDXFrm4cByKhe7ThnZfhW3I.roa (hash: vevJj6ucu/ojjyycSHmCWDRHZV5C3N0NfeV2mJqpgMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e1:53:dd:da:fc:c9:78:65:66:13:59:49:6b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Mar 1 17:01:17 2026 GMT
Not After : Mar 2 17:01:17 2026 GMT
Subject: CN=376f83aa50197a96ccdad4928e69cedb00031543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:b7:e7:f3:2c:98:27:aa:cf:d3:aa:c2:c9:
a5:6e:0a:66:e2:b9:99:b0:9a:d4:54:bc:45:c6:f7:
50:3d:fc:cc:df:d0:f8:1e:5d:f6:73:27:ac:6f:9c:
4a:54:59:7d:70:e5:89:94:73:97:91:44:4d:4b:09:
02:c6:06:7c:66:00:eb:52:fc:ff:04:d8:db:6c:67:
48:9c:cb:83:ff:e5:de:7b:f7:99:f7:78:93:f8:d7:
cf:05:8a:01:c2:dd:b1:c6:34:aa:ca:a8:a6:2f:f5:
69:de:d7:19:c4:01:c7:70:ff:7a:52:cf:66:5f:b9:
ca:34:c4:66:e2:97:59:d1:99:d2:1c:a5:0c:d5:a9:
d5:a2:24:84:f9:17:b0:4f:9c:77:67:37:11:f4:3e:
71:72:ef:c3:91:6c:f6:2b:6c:3c:1d:50:c6:5c:da:
1a:05:11:d9:8f:1b:68:d7:b2:17:e1:88:d7:4a:dc:
53:ed:94:ab:23:46:cf:6b:e8:41:45:a5:ff:a2:a4:
98:0a:88:03:66:f4:83:f3:1b:cf:f9:31:d0:a0:ae:
cc:b9:28:6f:42:ae:6d:f3:05:d6:5e:5d:20:2a:b3:
e6:2f:cf:95:6a:5f:b4:98:51:10:26:4c:48:4c:86:
86:4e:73:ef:b1:bb:58:2c:73:bf:60:60:55:74:b1:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6F:83:AA:50:19:7A:96:CC:DA:D4:92:8E:69:CE:DB:00:03:15:43
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fb:7f:5b:35:85:40:bc:64:67:f3:d9:bd:0b:4f:f4:02:ec:
a3:b0:19:37:6e:79:c4:ee:0c:90:d2:f9:6d:89:4d:15:04:eb:
6a:03:87:6b:f3:4c:60:52:8f:6f:e1:21:e2:b6:93:ca:51:fc:
33:3d:fb:57:a3:fc:8f:ab:22:a3:97:e1:72:ec:0e:14:b6:7f:
31:b1:49:b5:93:e8:08:d2:b1:5a:11:a2:99:43:63:0d:ee:9b:
ac:69:c3:82:6a:04:8e:e3:d1:d3:dd:b8:54:62:f4:28:9c:cb:
df:16:15:c3:a0:29:9f:d5:64:90:28:58:12:7e:b1:d9:fc:92:
51:27:34:2c:88:fc:c8:08:ec:87:99:76:00:b3:55:46:b1:4a:
fd:d7:2e:76:30:59:6b:dc:28:b0:bc:ea:9b:39:d7:ae:48:e3:
49:44:97:0e:f5:0f:b8:48:4a:40:d7:f2:85:c1:be:b4:a4:d7:
e1:ea:07:e8:f1:fe:54:c1:13:98:86:b0:28:01:9c:ed:e6:bf:
70:4d:df:b8:3f:39:cd:ae:8a:06:dc:b7:77:01:06:aa:7a:28:
35:a1:d0:45:c4:75:49:cb:bd:33:ff:b7:78:13:48:5a:44:68:
ba:c1:d7:37:fc:0b:91:f0:29:48:5d:b5:64:66:91:34:a3:f5:
d3:3c:c0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:53 2026 by rpki-client