Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier: hyUQheSg5EVLaifv1smcsyB3ExREgySPEqKFScZReWY=
Subject key identifier: FC:69:E1:7E:9D:D6:6A:BE:FD:37:04:0B:DC:59:92:49:1B:AB:1E:5E
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 019CAB6B26DA32A588D9B3EC7685EA76B68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number: 1859
Signing time: Sun 01 Mar 2026 22:00:52 +0000
Manifest this update: Sun 01 Mar 2026 22:00:52 +0000
Manifest next update: Mon 02 Mar 2026 22:00:52 +0000
Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: +Ggxk7aV1uWEglgdABbfrpRbL8i6ZP/t4xI1N3NCHoM=)
2: iSbmw6iYTCL_uj0nNJzi3x_l3fc.roa (hash: a4Xp6WN8Wr5MTPzks0nbHO1+pUhmrhJ7zphulReBkhI=)
3: szRXwnpRyzklmfhXc-z7cr_xBWA.roa (hash: 6Q00UZKxfktIvpdDNdNKqT6xKPj3vxzFyFYU67dsIlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:26:da:32:a5:88:d9:b3:ec:76:85:ea:76:b6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Mar 1 22:00:52 2026 GMT
Not After : Mar 2 22:00:52 2026 GMT
Subject: CN=fc69e17e9dd66abefd37040bdc5992491bab1e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:55:f3:cf:b2:05:fc:72:31:b4:f1:98:c9:
6d:22:63:51:6c:c3:6a:42:ae:d2:12:a6:d4:51:53:
17:6c:f5:a3:cb:bc:e3:13:5b:6c:5f:13:52:5d:de:
bd:7f:85:8f:2f:a9:84:d2:7d:f3:19:a2:1a:06:5e:
72:8b:4b:27:57:90:06:a6:24:79:61:19:0e:bf:ac:
29:38:45:a8:38:81:74:ed:5b:07:5d:95:f8:43:77:
aa:12:75:0c:01:9d:7e:91:1b:62:d4:db:60:3d:ff:
bd:57:b7:19:72:9e:95:2d:16:d7:cb:92:ca:5b:a8:
01:5c:49:84:c7:a1:52:3d:86:1c:1c:96:21:4a:81:
7b:d1:1e:80:a2:40:ef:7c:94:9d:dd:9b:77:e4:40:
26:ff:20:40:0f:35:db:c4:fc:2e:2b:01:cc:9c:b9:
67:9a:2e:5b:bc:c4:f6:e6:55:26:fd:51:f3:a7:0f:
08:0f:d4:cb:62:9f:57:5c:2c:cc:a4:29:8e:fc:7c:
9e:bd:74:63:9f:fa:4d:28:4d:52:ea:ed:e5:93:1a:
3e:0b:48:34:d1:7f:bd:c1:04:a6:2b:0c:41:72:9b:
bb:e7:bc:e6:95:46:32:3b:c4:07:36:cb:14:13:a4:
4a:9a:cb:34:bc:5a:dc:27:53:66:c9:52:12:ad:07:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:E1:7E:9D:D6:6A:BE:FD:37:04:0B:DC:59:92:49:1B:AB:1E:5E
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:64:20:05:97:ec:b7:88:7f:93:49:9f:33:6f:4d:c9:14:38:
ae:27:db:7e:5c:04:6d:d4:2b:56:43:f6:06:fb:06:e7:d2:26:
03:ee:b0:dd:77:e6:ae:86:b6:ef:bb:0d:a1:64:43:31:f0:32:
3e:42:c0:3a:c1:18:a0:23:c8:1b:44:0f:3e:54:fd:ae:6a:0f:
1b:03:f2:1f:1e:8b:1e:20:8f:0c:b8:8e:80:13:9c:5b:07:89:
07:d7:12:4c:81:47:9d:a2:4a:d8:7f:22:32:ed:b8:fe:fe:c8:
07:2e:7f:0b:52:34:16:3a:c5:bf:5e:93:f4:e0:de:11:91:ba:
81:b3:37:bf:e5:d0:50:3e:37:8b:21:5e:05:4c:71:e4:6d:9d:
1b:89:35:e1:f3:a7:8a:42:21:8f:72:9f:31:39:e2:9f:39:b5:
d6:0b:06:21:3b:0c:84:a2:a7:3d:11:88:4e:a8:9e:3c:b6:35:
d6:ab:86:1f:78:9d:3e:00:af:07:4d:83:15:f8:78:32:fd:f9:
38:cc:2e:d4:2a:f7:de:09:f4:bb:41:dc:af:68:20:17:c5:f9:
87:1e:59:30:02:50:7d:54:6f:de:01:40:f2:73:86:04:99:e7:
de:da:b8:cf:81:40:9e:47:f0:58:4d:d3:f3:5a:95:ba:9c:cf:
cb:1d:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:06 2026 by rpki-client