Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File: FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier: 05x+Vcj888GZ8DNdC4Cfp8rOmG6xDpsF7bmRVZ16+Os=
Subject key identifier: 62:1E:6C:F8:86:E8:BC:7F:4A:99:7D:AE:B4:DB:9C:0D:70:94:D9:53
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial: 019CB05A8BD3DD03BF8B1ED909E327D0680A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number: 0270
Signing time: Mon 02 Mar 2026 21:00:49 +0000
Manifest this update: Mon 02 Mar 2026 21:00:49 +0000
Manifest next update: Tue 03 Mar 2026 21:00:49 +0000
Files and hashes: 1: 14moTVCPRDZ_u1h30FOe4lYZ_Uo.roa (hash: wcUkVN7ia2xJx1oMg8zn/LuYUzAy2xjBnV4ceG0F+9o=)
2: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: S7x4NItiZYHToLKvrQlmClpNl6GcRotTJmZx5Jikz9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:8b:d3:dd:03:bf:8b:1e:d9:09:e3:27:d0:68:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Validity
Not Before: Mar 2 21:00:49 2026 GMT
Not After : Mar 3 21:00:49 2026 GMT
Subject: CN=621e6cf886e8bc7f4a997daeb4db9c0d7094d953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8b:d4:23:6b:e8:8a:fb:87:1e:e4:bc:1e:67:
e5:98:15:e4:9c:d9:30:c7:b3:8d:66:1b:04:74:99:
66:33:c5:ff:4e:41:01:64:cf:5d:f6:bf:3c:0a:b2:
40:ae:24:e4:9a:8d:98:89:8b:09:f1:99:ee:34:ee:
51:35:8a:92:50:2c:35:0c:c3:7d:a6:74:25:1a:e1:
4e:b8:ee:0c:2a:6d:21:7c:6c:0d:0f:38:9c:7d:76:
a7:27:41:e7:09:40:a1:59:04:8b:eb:18:4e:91:cc:
3d:b8:03:b7:ce:f6:1c:f6:f5:d1:59:69:d5:87:bc:
e8:bc:7b:b2:0e:5f:9d:d1:b1:a1:d0:d8:9a:7b:02:
d1:19:d3:32:6f:0c:bf:ee:c3:46:f4:2a:a4:fe:8a:
1c:7b:8e:23:09:03:8b:d7:07:cc:48:ba:7a:59:30:
36:53:e5:42:5e:4c:77:5e:c8:98:a0:37:b9:24:e6:
09:fe:25:45:b8:d3:4d:8b:f1:95:cd:90:de:b6:38:
1a:06:c0:78:b4:c6:66:ed:72:98:1f:44:45:1f:7b:
d0:53:7d:23:36:23:de:70:96:b7:1d:c5:1e:ed:78:
82:92:1f:10:2b:bc:9a:9b:db:1b:5e:00:45:1f:63:
83:2a:a9:53:79:b1:bf:6a:07:17:bb:6a:7e:47:02:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1E:6C:F8:86:E8:BC:7F:4A:99:7D:AE:B4:DB:9C:0D:70:94:D9:53
X509v3 Authority Key Identifier:
keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ea:a5:6e:90:48:b1:db:90:1e:61:d1:88:83:ef:40:c4:63:
48:e9:69:9e:ac:3e:41:2a:41:06:9a:b7:19:fd:c6:92:e1:92:
41:7b:72:11:96:04:ab:9c:97:ab:ea:3c:1c:79:cd:98:e2:d3:
62:7e:64:65:cf:30:ae:1a:d9:31:f1:ec:c2:6e:9e:8b:f3:9b:
83:a0:10:b2:3d:a6:8c:b3:a0:e8:ce:19:cc:6d:04:bd:d5:98:
21:5d:e9:8d:d3:b3:bd:11:eb:57:e0:e2:2a:5b:0b:8b:03:9b:
f7:c8:94:f2:85:2f:ec:4d:98:ca:db:a0:6c:c2:8f:7d:e4:1b:
c9:fb:b7:38:63:32:c9:b8:9e:3b:51:35:08:90:6b:d9:38:78:
32:91:47:18:1a:c6:a2:fa:34:77:e2:64:71:bf:21:dc:d3:4f:
ff:11:f0:27:f1:8e:00:7f:0a:f9:46:51:b8:eb:b4:e7:c8:84:
a9:6b:0a:5a:34:79:69:44:8b:e0:fb:38:ba:bb:8c:6b:92:3f:
35:ea:b4:be:db:f2:18:d3:0c:f6:29:8a:eb:07:5c:65:ff:e0:
e0:b7:85:76:47:5d:ae:3d:b3:df:5a:5e:e9:5f:6a:0b:af:cf:
22:db:6e:86:16:7f:a8:2d:fe:5e:45:69:73:24:69:8d:b1:e3:
ae:7c:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:32 2026 by rpki-client