Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier: nlG/TBouhzXJ3ZHaxcp19vcfJvwLpKOQunGUybDq0xQ=
Subject key identifier: 5B:3B:A5:4A:49:35:0F:8D:9E:73:C0:E2:F9:A4:2E:A7:A9:76:EB:92
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 019CADFE1BA57D875C4BB843D4DAD909F072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 10:00:37 +0000
Manifest this update: Mon 02 Mar 2026 10:00:37 +0000
Manifest next update: Tue 03 Mar 2026 10:00:37 +0000
Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: I/qxGnluEQK7jKBBd1yqfd3H974JCDfp4irkKk72ySM=)
2: K_kctLzaNMQhFHN8joV117TaoeQ.roa (hash: vYf0k8T0+nNX++AoHAW2e73Jb3z/XutqucqoGOIMVv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:1b:a5:7d:87:5c:4b:b8:43:d4:da:d9:09:f0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Mar 2 10:00:37 2026 GMT
Not After : Mar 3 10:00:37 2026 GMT
Subject: CN=5b3ba54a49350f8d9e73c0e2f9a42ea7a976eb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:40:2a:8a:b4:71:dd:00:75:aa:73:d9:71:
bc:e7:b8:03:42:ad:0d:a6:cb:83:b4:8d:c4:2b:bc:
78:f7:dd:81:17:24:7e:82:45:40:e7:cc:34:84:0b:
64:3c:7a:41:43:0a:70:69:32:1c:50:96:9e:be:d6:
ac:25:8f:79:98:e8:e4:76:cb:8d:37:e8:22:6d:82:
26:50:0b:c7:e8:8b:d6:6f:03:60:99:d6:f6:c1:0e:
82:93:df:76:98:89:77:87:e3:8d:7f:88:99:f3:80:
d6:7e:fb:1e:2a:79:53:84:a5:06:e9:f6:12:c9:9e:
9b:c1:2a:71:2a:be:d8:5e:b5:d3:02:f0:37:86:9f:
17:e4:be:e7:13:e2:3d:da:a1:fe:ff:09:42:a3:8a:
c6:c6:8d:d1:4d:c4:f6:28:1e:73:29:8e:89:62:49:
ab:36:3a:e2:67:e3:29:6a:14:7e:17:4a:7b:58:75:
6a:a5:32:d3:f9:1a:69:2f:64:77:78:ae:9c:9e:c7:
02:0e:1f:3c:04:da:8b:32:95:f5:0e:27:ac:b7:b1:
6e:6b:ba:ec:54:fe:63:95:a7:4b:36:c0:f8:32:8e:
82:6c:f1:4d:be:d8:7a:70:fb:63:06:6c:c8:56:6f:
e3:52:9b:52:cb:fb:1d:8f:97:68:87:0f:0a:63:83:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:A5:4A:49:35:0F:8D:9E:73:C0:E2:F9:A4:2E:A7:A9:76:EB:92
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d3:78:0c:50:f0:09:f0:da:ee:2b:c9:d6:d1:d8:d9:5b:27:
1d:0a:61:e4:5e:18:6c:3b:1d:c8:a0:01:6e:3d:77:5d:55:83:
64:98:dc:68:b6:9c:c3:17:7e:42:7b:57:95:50:72:b6:87:ce:
1c:c9:5b:e4:c6:7d:98:a6:34:97:27:de:ed:28:bc:d7:af:b3:
1e:91:fb:6d:fc:d3:f4:de:a2:68:1e:ab:e5:f1:20:f4:85:2d:
cd:57:56:a9:03:93:d3:41:42:5a:be:eb:5c:99:24:a7:1b:24:
0b:53:28:3c:ba:f4:ef:76:e5:81:d7:ab:6e:41:16:4d:28:5a:
a0:4c:a9:44:68:49:d3:83:39:6a:de:eb:2a:c0:83:81:b6:37:
12:ad:61:41:9c:3d:6f:6c:ad:77:30:af:0c:0a:30:4d:de:4a:
e2:bd:8e:23:bd:3a:65:f2:17:5e:92:9f:44:ea:dc:3a:21:20:
77:a0:cb:0d:13:ef:17:76:70:01:22:31:b1:68:ff:3d:9a:f8:
33:ea:92:e3:98:ac:e1:92:02:58:32:d9:96:74:32:ce:bd:dc:
a0:3b:62:9c:3a:0c:25:71:12:7a:8b:6d:2f:3b:9f:ea:55:e8:
f9:e0:f7:ef:2f:ce:1c:2e:f6:af:dd:a0:63:82:73:a2:ca:fd:
b2:1c:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:23 2026 by rpki-client