Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File: FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier: 5w/UORQbvG5tfwXlst09Qrv6XVbVQ3UJLAIIvsv9Kns=
Subject key identifier: 44:2A:D6:B1:14:B3:8A:82:F1:22:8B:0E:0F:BB:FD:35:BF:C1:06:A6
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial: 019CAB6B56CB93B6ADE8951BD5D9A1C9D203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number: 11C4
Signing time: Sun 01 Mar 2026 22:01:04 +0000
Manifest this update: Sun 01 Mar 2026 22:01:04 +0000
Manifest next update: Mon 02 Mar 2026 22:01:04 +0000
Files and hashes: 1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: X79SMSFaq+G7pjaZHGOMhG6Iq4KSFk62EssSgZdtTeU=)
2: ZHym1jgmQNO1769mOXVyUNOVMEc.roa (hash: 6HGTh8JhgEJnDcdwwWSa7+oUj2V8bxazwsUi6gBiFdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:56:cb:93:b6:ad:e8:95:1b:d5:d9:a1:c9:d2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Validity
Not Before: Mar 1 22:01:04 2026 GMT
Not After : Mar 2 22:01:04 2026 GMT
Subject: CN=442ad6b114b38a82f1228b0e0fbbfd35bfc106a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:df:df:46:79:ce:bd:24:c1:2c:3a:d4:db:
66:f8:47:b6:8c:21:ad:cf:96:78:3c:45:5e:39:65:
fd:fb:87:f7:30:cf:ad:64:65:8a:c7:85:df:ea:d2:
48:86:65:9f:c0:5e:9c:7d:19:e2:4a:c7:d4:58:8b:
70:c8:e2:75:52:a2:77:ae:b0:11:f2:19:b4:4d:c8:
c8:0f:0d:5b:a7:09:53:46:2f:01:96:eb:db:18:25:
da:8d:35:e5:a4:86:b1:10:e7:82:cf:c2:23:5b:45:
35:11:2f:96:23:45:33:28:ac:1c:59:12:3e:1f:2f:
a6:9c:b5:8b:b2:1d:4a:25:e4:df:ee:f8:c1:15:fe:
1e:65:25:1a:b4:74:f6:80:24:17:d1:96:a2:17:59:
d3:88:71:3e:52:10:b3:7c:38:c6:c8:02:18:17:ec:
5a:04:51:b3:f0:61:6f:75:54:2e:ba:5b:92:e9:f0:
d7:23:a7:5a:68:2f:06:08:97:98:b5:2e:e4:e5:91:
0b:37:53:ca:2e:fa:a9:0d:ed:34:1f:1a:31:06:de:
04:44:d3:f1:01:e4:97:78:af:d3:4f:3b:c5:28:3f:
d7:2e:78:1d:9c:ae:18:8e:a1:68:c8:38:c4:5f:2d:
79:2b:bb:e2:b4:f5:57:b0:5e:32:6b:6f:95:ae:13:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2A:D6:B1:14:B3:8A:82:F1:22:8B:0E:0F:BB:FD:35:BF:C1:06:A6
X509v3 Authority Key Identifier:
keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fd:13:e1:51:b2:9d:8c:e0:eb:2b:cb:90:53:48:4f:fb:d1:
56:2a:8b:7b:f2:5e:10:bd:cc:2b:b9:97:88:20:c7:ed:bc:41:
c3:b3:10:d4:14:bf:a5:3c:31:70:87:ba:c8:53:7c:72:39:d4:
51:a2:cd:2e:eb:d2:cc:1b:bb:e8:3f:24:4b:00:ea:9d:9c:22:
5c:d1:71:91:46:e1:7b:97:43:22:41:b6:3d:01:80:72:90:65:
72:24:01:01:1a:d6:86:b3:fa:34:fe:52:e1:f4:74:14:96:3a:
1f:b5:1b:ca:20:a5:3b:b0:95:62:21:ca:8f:ce:dd:a1:4b:43:
86:d5:6d:79:91:8e:9f:c2:83:48:d1:4c:b9:03:ba:e0:95:08:
08:90:d0:07:de:56:62:76:fe:a3:da:ee:d6:24:5b:0b:77:45:
65:d5:1f:c3:bf:a4:a8:9f:5b:94:82:02:13:55:43:d0:e8:7f:
05:99:5f:ae:31:42:ad:23:a8:a8:02:83:15:37:c0:59:49:fb:
36:0f:88:13:42:fc:94:c4:59:f3:32:80:0d:cd:4a:ad:e4:12:
13:7d:fc:8d:78:7d:67:15:23:68:b7:53:78:e0:87:b0:8d:73:
70:f3:35:2e:f0:a6:5e:cb:8a:24:02:c4:14:a4:c3:e5:cc:a0:
cb:f1:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:50 2026 by rpki-client