Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: oNW+j/AOwqa/l+hP+WMF8Pf1T6rsNrxz3DxCx5c5nuk=
Subject key identifier: C8:80:EA:8A:31:CB:F7:17:39:19:98:1F:53:5E:BD:68:0D:16:B3:0E
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 019CABA1CA40D5710EEC6FE799567850664F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 17DB
Signing time: Sun 01 Mar 2026 23:00:32 +0000
Manifest this update: Sun 01 Mar 2026 23:00:32 +0000
Manifest next update: Mon 02 Mar 2026 23:00:32 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: n4LCPuy6AF+IG1hZszoYLq1v1aCRSjKGX7i7LESJ7Mw=)
2: GmYrfW3k8osvPQTynxaphEXGOF0.roa (hash: KL4WvC6vPGKTcuwvQwS3AK/arMjab0ANyIFkXhXDgSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ca:40:d5:71:0e:ec:6f:e7:99:56:78:50:66:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Mar 1 23:00:32 2026 GMT
Not After : Mar 2 23:00:32 2026 GMT
Subject: CN=c880ea8a31cbf7173919981f535ebd680d16b30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:fd:34:3e:4d:4e:36:e3:12:20:4e:c9:e0:
8c:30:87:39:56:6f:c7:d5:28:0c:0f:8c:d3:ef:51:
81:82:95:84:a9:a4:cf:03:2d:94:25:f6:36:49:c4:
00:54:88:1e:60:1c:f5:93:52:38:b8:ed:00:03:90:
e2:bb:69:a3:57:dd:7a:53:8e:7e:bc:6c:ad:51:41:
6d:ff:bf:9f:c8:a6:99:bf:57:cf:59:0c:c5:5a:3c:
3b:82:8e:91:7d:2b:39:3a:07:f6:bf:24:7e:29:c5:
ec:0b:d2:8e:f6:3b:09:b7:0a:f6:17:70:a9:9f:96:
f2:46:06:b1:51:76:31:62:e1:bb:a2:d3:0b:48:3f:
31:52:3a:82:32:cb:b9:79:eb:52:45:3e:49:ec:5a:
61:96:9b:48:bb:99:1b:97:9b:f7:93:09:7c:4e:96:
49:5e:e3:ed:bb:cd:15:fe:8e:fb:85:f8:31:fc:86:
57:b6:2a:57:80:32:21:1d:27:f7:e1:87:71:c3:c9:
83:d9:ac:83:4e:19:f6:a5:e4:13:29:9b:c9:e6:ed:
b6:94:15:5a:20:0a:44:68:be:72:b2:50:8a:82:e8:
76:97:db:01:6d:e7:73:d3:e3:74:c6:03:fe:eb:f8:
f9:5c:db:b5:60:82:59:92:55:72:ad:78:67:9c:7b:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:80:EA:8A:31:CB:F7:17:39:19:98:1F:53:5E:BD:68:0D:16:B3:0E
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8d:db:29:fe:59:60:36:f0:f8:d4:ca:0f:77:ed:1b:14:a0:
a0:cd:99:ed:69:9e:bf:bf:06:49:f3:3a:b1:a9:2c:da:f2:27:
fd:71:31:0f:86:27:cf:0a:b6:c1:f7:9f:23:bf:ca:41:fc:00:
81:9d:90:41:8e:70:d4:35:31:88:25:99:e7:66:28:17:2d:43:
ed:fb:4c:36:1e:80:82:28:d0:62:b0:14:1f:4a:59:28:ad:50:
41:1e:57:6b:09:01:77:3b:f2:74:38:2e:52:fe:21:c5:4e:d5:
e5:2f:f0:ce:3b:b6:c5:7f:a8:ac:ba:7c:82:8f:81:82:dc:20:
c6:22:e1:60:3f:5f:8b:ae:22:e1:db:52:4c:2b:9c:ea:a8:96:
f2:f0:a0:83:b3:84:71:41:bf:cb:19:0f:72:e2:14:c5:e8:a1:
a4:2d:2d:3b:9a:ad:54:81:a2:0f:af:a2:d3:cf:2f:9f:40:a2:
34:67:fb:78:84:6c:7e:31:bf:a0:ae:8d:c4:b2:fc:6c:96:bc:
07:a8:8c:4c:54:13:0b:ce:b5:dc:d1:95:aa:ea:3b:7e:5e:1d:
e9:83:3a:08:6a:c7:1e:24:9e:a3:30:09:d2:6c:99:70:60:2e:
97:5b:86:37:e6:f6:d4:c7:a7:df:71:a3:fa:7b:47:da:13:f6:
cb:37:63:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrocpA1XEO7G/nmVZ4UGZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzllNjExYjU4YjdmNzA1NWRmNmE3Zjk5NWQwMWZiOTVk
NzkwYzkwHhcNMjYwMzAxMjMwMDMyWhcNMjYwMzAyMjMwMDMyWjAzMTEwLwYDVQQD
EyhjODgwZWE4YTMxY2JmNzE3MzkxOTk4MWY1MzVlYmQ2ODBkMTZiMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6n9ND5NTjbjEiBOyeCMMIc5Vm/H
1SgMD4zT71GBgpWEqaTPAy2UJfY2ScQAVIgeYBz1k1I4uO0AA5Diu2mjV916U45+
vGytUUFt/7+fyKaZv1fPWQzFWjw7go6RfSs5Ogf2vyR+KcXsC9KO9jsJtwr2F3Cp
n5byRgaxUXYxYuG7otMLSD8xUjqCMsu5eetSRT5J7FphlptIu5kbl5v3kwl8TpZJ
XuPtu80V/o77hfgx/IZXtipXgDIhHSf34Ydxw8mD2ayDThn2peQTKZvJ5u22lBVa
IApEaL5yslCKguh2l9sBbedz0+N0xgP+6/j5XNu1YIJZklVyrXhnnHv7/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiA6ooxy/cXORmYH1NevWgNFrMOMB8GA1UdIwQY
MBaAFBY55hG1i39wVd9qf5ldAfuV15DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjct
MGNkZmExYzI5MWY2LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjctMGNkZmExYzI5MWY2
LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk43bKf5Z
YDbw+NTKD3ftGxSgoM2Z7Wmev78GSfM6saks2vIn/XExD4Ynzwq2wfefI7/KQfwA
gZ2QQY5w1DUxiCWZ52YoFy1D7ftMNh6AgijQYrAUH0pZKK1QQR5XawkBdzvydDgu
Uv4hxU7V5S/wzju2xX+orLp8go+BgtwgxiLhYD9fi64i4dtSTCuc6qiW8vCgg7OE
cUG/yxkPcuIUxeihpC0tO5qtVIGiD6+i088vn0CiNGf7eIRsfjG/oK6NxLL8bJa8
B6iMTFQTC8613NGVquo7fl4d6YM6CGrHHiSeozAJ0myZcGAul1uGN+b21Men33Gj
+ntH2hP2yzdj9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:49 2026 by rpki-client