Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: FiBNlASU7zl6V9HyQEqwWKkqnUqLO683JQe4R1BidZc=
Subject key identifier: CE:8B:9F:2B:30:35:06:11:21:8C:D1:27:28:4C:A5:2D:EE:9B:08:E5
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 019CAA58D543B48AC27E3120A1530BC3D668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 155A
Signing time: Sun 01 Mar 2026 17:01:14 +0000
Manifest this update: Sun 01 Mar 2026 17:01:14 +0000
Manifest next update: Mon 02 Mar 2026 17:01:14 +0000
Files and hashes: 1: 4KVFT5rfCFpQJiwyphxd1Ug6J-g.roa (hash: H9IZSHKQQb+XSiam4n6FXPX7X+NUo4iyE9Bfz0ZsuCI=)
2: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: yWzSb3tMBCoF8IPLsKgbdEcd7kQzjerzgzzdmyreiR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:d5:43:b4:8a:c2:7e:31:20:a1:53:0b:c3:d6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Mar 1 17:01:14 2026 GMT
Not After : Mar 2 17:01:14 2026 GMT
Subject: CN=ce8b9f2b30350611218cd127284ca52dee9b08e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:b0:a3:2f:18:90:db:d5:f8:61:47:32:c2:
ce:77:b9:7b:60:62:b2:a8:e3:e4:1d:da:91:c9:f3:
14:36:4b:f5:36:2c:12:9d:99:69:64:73:d9:f1:ce:
f0:43:35:63:08:32:a2:ef:0b:35:e5:ff:19:ff:fd:
d7:57:c8:d1:e6:12:b3:c7:ca:e8:c5:16:4f:02:a1:
41:a0:b2:6f:9f:65:c9:20:22:97:11:88:6a:aa:d0:
37:b9:a8:9a:e7:2f:f8:68:6d:19:84:83:4f:f1:56:
40:a5:66:3c:f5:87:be:3f:b1:45:ba:6a:51:eb:91:
0d:4c:65:f0:f7:b6:fd:91:86:77:2c:b7:52:0c:01:
e0:45:6c:b3:02:91:c0:dc:99:c7:fe:3b:7b:25:5c:
d1:eb:de:b5:21:12:c8:0e:ff:74:97:fd:08:65:6e:
ae:41:7f:6b:2d:01:5d:2b:b5:df:8f:75:d0:d8:2e:
7c:5e:9b:59:62:7f:3f:5e:7a:3b:76:c2:83:8d:e4:
f1:c6:fd:71:33:85:3f:53:eb:b1:f4:6e:ba:99:a6:
e0:03:56:1e:50:7c:01:48:63:71:54:48:59:23:af:
76:e8:2b:87:09:5d:e1:30:08:1a:54:93:c5:a7:87:
e1:a3:26:fe:e5:2f:34:06:0a:a8:1d:02:32:d7:3c:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:9F:2B:30:35:06:11:21:8C:D1:27:28:4C:A5:2D:EE:9B:08:E5
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:58:c7:8b:0d:20:34:5b:6c:dd:da:51:2b:f8:7c:e2:2e:ae:
b2:5d:c7:e7:28:d8:52:c1:cd:36:15:73:0c:27:76:cb:d3:8a:
85:46:69:4b:9f:23:e9:41:a6:9a:de:7b:dd:be:3b:34:db:70:
97:20:72:7f:0c:8a:1c:61:bd:b2:50:c4:c4:d5:e4:4f:32:5f:
23:4c:96:3e:a2:70:12:d4:a3:2a:8c:bb:39:d5:7b:d1:a5:3b:
26:25:f7:07:71:e9:63:6b:a5:85:89:c8:bc:99:69:61:75:14:
89:4b:14:fb:10:24:e0:e7:e7:44:0a:0c:ef:85:62:bb:02:6b:
f0:d5:56:87:cc:7b:03:ac:b5:6f:aa:36:b9:23:50:8d:4b:79:
e1:51:be:96:27:e1:9e:6e:2c:32:dc:8d:d1:ce:96:78:9d:6a:
11:63:a5:2a:d9:02:74:f2:68:6c:14:e3:1d:9e:5a:21:b4:6b:
08:5b:a0:68:b0:d9:f4:b5:36:08:04:e0:a6:25:e1:f8:a2:85:
48:a5:57:fd:32:7d:71:76:9a:98:38:d7:d4:f0:94:5c:85:fe:
b6:d5:2a:f7:53:74:23:c9:61:fb:4d:99:31:03:cb:3b:93:67:
ea:da:a2:d1:90:d3:8e:96:c3:94:3e:2a:23:53:0f:d3:7c:5f:
11:20:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:01 2026 by rpki-client