Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
File: Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft (raw, json)
Hash identifier: scrnqXCItr8PMkjg8Ps90fmV+NeersyWwq1IZ0/nt5M=
Subject key identifier: 06:7C:65:46:B2:22:B9:D2:56:1E:97:A0:D1:BF:2A:0D:AF:32:BC:8A
Authority key identifier: 16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
Certificate issuer: /CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Certificate serial: 019CAD22454EA39AE36875114C2C034E8E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
Manifest number: 0512
Signing time: Mon 02 Mar 2026 06:00:30 +0000
Manifest this update: Mon 02 Mar 2026 06:00:30 +0000
Manifest next update: Tue 03 Mar 2026 06:00:30 +0000
Files and hashes: 1: Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl (hash: rg1U1sMVPG18e287ZfJ4NLFawtIqrDbWxDDMVCubepU=)
2: dF-a6Qm3y0zfBek24vhD_AlyCXs.roa (hash: fJWqnimvvq9zx0sgjom6IkQ3MYoN1ftwOseK8q9jKgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:45:4e:a3:9a:e3:68:75:11:4c:2c:03:4e:8e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Validity
Not Before: Mar 2 06:00:30 2026 GMT
Not After : Mar 3 06:00:30 2026 GMT
Subject: CN=067c6546b222b9d2561e97a0d1bf2a0daf32bc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:c1:ba:ca:e6:92:b4:0d:8b:50:de:7d:1c:
6d:89:3f:22:d2:ea:e8:f1:a2:5b:7b:3e:38:ea:35:
76:fb:42:b6:ed:39:51:c7:2c:3b:6b:bd:27:18:b0:
a4:87:cc:e6:41:bf:2f:db:6a:d3:fb:cd:70:69:5c:
db:30:10:3a:ca:32:c2:fc:96:ea:61:07:78:d0:73:
65:9e:5b:90:31:15:16:39:70:ce:6b:54:be:9c:22:
d7:1a:cf:dc:4b:42:1f:52:d4:2e:05:bc:2f:5e:e0:
9e:3d:de:0d:fd:af:18:6c:ae:b3:e1:73:e2:7a:03:
ee:7f:f5:73:56:78:2d:51:30:c5:92:07:d5:c5:ee:
61:1d:1e:aa:72:a9:4c:55:d0:e1:15:43:24:90:32:
5c:48:45:01:4a:b2:a0:3a:9b:9c:4b:95:f6:f2:98:
9d:6d:3c:3c:70:94:5a:f9:4e:bf:07:44:f6:0a:cd:
b6:5f:0e:d8:2f:c9:fa:7c:17:86:32:eb:37:41:b3:
dc:c4:7e:c0:bf:84:f4:c7:55:11:79:02:ae:1b:6a:
70:33:9e:0c:c0:a1:6c:28:c5:f0:d7:a5:48:9c:f3:
db:17:4f:9b:25:74:98:ba:c2:d6:2c:27:10:10:45:
5f:ca:da:a4:87:56:d9:62:c7:9a:01:bb:91:0a:fb:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7C:65:46:B2:22:B9:D2:56:1E:97:A0:D1:BF:2A:0D:AF:32:BC:8A
X509v3 Authority Key Identifier:
keyid:16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:55:90:dc:8a:57:36:2c:db:9b:fe:7c:cf:95:97:3d:f8:a3:
e4:a3:be:74:2b:c8:ec:e5:e4:0f:15:7a:79:69:c0:57:de:da:
99:4f:7c:b2:83:ca:4a:fd:98:0a:97:02:a6:30:dc:73:90:36:
64:ba:26:28:83:77:88:ed:db:e1:f1:c9:e3:f8:7f:d2:15:37:
23:87:01:c5:22:2f:4f:1b:21:f3:01:e6:d8:21:b6:07:00:09:
b8:bd:49:a1:86:6e:ce:39:e9:a2:b2:9e:5e:c5:c6:2c:5b:82:
40:e1:bd:7c:1d:16:6a:bb:ea:a8:d8:b7:33:2e:70:dc:a5:8b:
ec:d9:37:31:fb:0f:28:22:eb:57:48:7b:ee:15:96:29:89:28:
82:e0:f5:e6:aa:6c:f7:d7:2d:21:3a:a5:2e:40:de:d5:62:bc:
54:3e:e6:97:77:ee:0e:bf:3e:99:97:06:3e:a6:29:d1:1c:61:
b6:11:eb:ff:e6:41:67:36:a3:5f:a8:fb:9b:57:2c:41:75:56:
cb:4a:b3:3e:87:08:3d:a3:20:57:cb:2e:96:92:9c:d0:49:16:
b4:9f:d6:06:d6:ac:46:32:87:79:4d:31:e3:92:a4:33:0e:9b:
95:cf:ae:36:17:87:d1:5a:d7:24:5f:31:40:89:2c:36:72:98:
b1:8c:84:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIkVOo5rjaHURTCwDTo4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2M2FiYzRmMzE2NWM2ZmExZWVjZmRkMDA0ZjQ1ZTUyZTAw
YTUwMGUwHhcNMjYwMzAyMDYwMDMwWhcNMjYwMzAzMDYwMDMwWjAzMTEwLwYDVQQD
EygwNjdjNjU0NmIyMjJiOWQyNTYxZTk3YTBkMWJmMmEwZGFmMzJiYzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YXBusrmkrQNi1DefRxtiT8i0uro
8aJbez446jV2+0K27TlRxyw7a70nGLCkh8zmQb8v22rT+81waVzbMBA6yjLC/Jbq
YQd40HNlnluQMRUWOXDOa1S+nCLXGs/cS0IfUtQuBbwvXuCePd4N/a8YbK6z4XPi
egPuf/VzVngtUTDFkgfVxe5hHR6qcqlMVdDhFUMkkDJcSEUBSrKgOpucS5X28pid
bTw8cJRa+U6/B0T2Cs22Xw7YL8n6fBeGMus3QbPcxH7Av4T0x1UReQKuG2pwM54M
wKFsKMXw16VInPPbF0+bJXSYusLWLCcQEEVfytqkh1bZYseaAbuRCvtOGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ8ZUayIrnSVh6XoNG/Kg2vMryKMB8GA1UdIwQY
MBaAFBY6vE8xZcb6Huz90AT0XlLgClAOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpxOFR6Rmx4dm9lN1AzUUJQUmVVdUFLVUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOGY0MWMtZWM4Mi00OTY4LWI1NjYt
MjcxMmY3MWJjNjc0LzEvRmpxOFR6Rmx4dm9lN1AzUUJQUmVVdUFLVUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yOGY0MWMtZWM4Mi00OTY4LWI1NjYtMjcxMmY3MWJjNjc0
LzEvRmpxOFR6Rmx4dm9lN1AzUUJQUmVVdUFLVUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1WQ3IpX
Nizbm/58z5WXPfij5KO+dCvI7OXkDxV6eWnAV97amU98soPKSv2YCpcCpjDcc5A2
ZLomKIN3iO3b4fHJ4/h/0hU3I4cBxSIvTxsh8wHm2CG2BwAJuL1JoYZuzjnporKe
XsXGLFuCQOG9fB0WarvqqNi3My5w3KWL7Nk3MfsPKCLrV0h77hWWKYkoguD15qps
99ctITqlLkDe1WK8VD7ml3fuDr8+mZcGPqYp0RxhthHr/+ZBZzajX6j7m1csQXVW
y0qzPocIPaMgV8sulpKc0EkWtJ/WBtasRjKHeU0x45KkMw6blc+uNheH0VrXJF8x
QIksNnKYsYyEBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:57 2026 by rpki-client