Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: mTDNt3NW4FjEbfgQ0XVAugIh8Am3UAhwXQW8wT0QiRM=
Subject key identifier: 15:8C:55:4E:C6:18:86:0D:A1:96:7B:4C:CC:0F:01:95:FB:CD:4E:CD
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 019CAC0FA0CE44FF72491FB1DD7E0B45CA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 1786
Signing time: Mon 02 Mar 2026 01:00:30 +0000
Manifest this update: Mon 02 Mar 2026 01:00:30 +0000
Manifest next update: Tue 03 Mar 2026 01:00:30 +0000
Files and hashes: 1: DP2ZVF5XMtIlb8PSMaOqb9pBnpY.roa (hash: jGqjs9xozz6rpTqRrKhgcskeRFoVeCtnOBzJB/wnJHI=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: eyO+lDBowFhHr5aS4Iwhz1gUAR3Fe6JRnaZf6cL7D1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a0:ce:44:ff:72:49:1f:b1:dd:7e:0b:45:ca:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Mar 2 01:00:30 2026 GMT
Not After : Mar 3 01:00:30 2026 GMT
Subject: CN=158c554ec618860da1967b4ccc0f0195fbcd4ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:60:8e:05:8a:ca:cf:29:5d:23:38:fc:55:
fc:9f:32:bc:87:34:78:9e:7b:06:75:a6:6e:fd:f5:
ed:09:30:39:4e:a7:c6:8c:74:59:a7:bc:e6:76:56:
a2:e3:78:f9:45:32:1d:c8:a0:d5:1c:9b:ee:ea:d8:
ce:66:9d:ce:58:3a:b1:c7:46:4a:94:d3:b3:6a:5c:
c1:8a:ec:9f:db:bc:13:fa:1c:b4:6a:79:a3:28:b9:
dc:64:62:94:57:5a:2a:a0:6f:46:f5:96:f2:46:3c:
25:f1:7f:ee:88:a5:5c:0d:f1:14:95:a0:fb:fd:0c:
53:96:5d:e4:0a:9b:ed:17:58:e6:b0:2c:c3:ca:05:
aa:f0:66:f5:0d:bb:77:1f:4a:71:d7:5b:18:55:2d:
c4:52:fd:b2:01:c3:d3:b4:7b:11:bf:f6:6d:33:7b:
2a:3c:47:c9:45:f4:fc:22:81:e2:e8:00:d6:9a:46:
f6:50:15:63:b6:e5:0c:89:32:1d:67:d7:47:ed:ff:
48:44:82:db:ca:fc:82:43:12:82:ca:4b:35:70:10:
68:14:d0:76:08:40:ba:0b:00:a0:fd:ed:98:b1:bd:
b9:eb:4f:6d:2b:5f:e5:0a:01:d8:dd:7b:29:13:d4:
c6:f0:48:5f:f4:51:47:e8:f8:b1:f5:b3:26:af:99:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8C:55:4E:C6:18:86:0D:A1:96:7B:4C:CC:0F:01:95:FB:CD:4E:CD
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7e:51:e4:d7:b2:a2:aa:54:ea:8e:fc:10:d0:af:d6:21:54:
d6:e4:c9:24:fd:a6:dd:a9:a6:e8:a9:89:a8:a6:e6:7c:81:61:
2e:c0:2b:00:68:9b:52:04:0b:ad:63:b6:27:67:ac:3a:f6:44:
bf:77:8d:10:0d:6d:c0:08:85:65:64:51:1f:22:ad:cd:dd:39:
26:2b:73:28:0b:d4:a1:25:7c:b6:bc:dc:76:fe:7b:7e:df:d7:
92:de:1f:af:f6:0c:ed:e6:03:b9:9f:ec:3f:0e:fc:b4:52:c0:
1c:80:4a:81:8e:ee:27:de:86:92:36:d6:5b:06:67:04:9f:71:
b7:6c:49:a4:31:ab:8d:0e:78:ee:45:4e:fa:10:54:09:46:32:
3b:48:f6:a1:59:5b:6c:38:19:10:08:1f:ea:27:77:cb:8c:f6:
0d:a5:f0:25:31:18:50:bd:a3:86:8c:ab:e6:e3:50:f9:6f:5c:
29:9c:06:2b:62:c8:9a:82:16:ab:c4:44:3c:67:0c:18:80:67:
ac:11:5e:e5:3a:a2:30:c0:31:11:93:02:0f:84:5e:67:57:98:
ec:5b:6f:bd:ea:78:65:f6:c3:38:95:3f:cb:cc:1b:70:b6:bf:
b0:91:73:32:67:e5:42:52:0d:7c:b4:74:67:77:e5:7c:aa:36:
d3:b9:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:14 2026 by rpki-client