Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier: ZwmF8gndYQd1kXKm7TDfMZXkeRT56RG3b+63eQ7Rw2g=
Subject key identifier: B2:58:E8:E0:B8:37:71:12:EF:4D:B3:0C:9B:17:8D:8C:C9:CC:58:88
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 019CAD22431D8776833AF50B7E145E6B7574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 06:00:29 +0000
Manifest this update: Mon 02 Mar 2026 06:00:29 +0000
Manifest next update: Tue 03 Mar 2026 06:00:29 +0000
Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: BS6QAMvz4lMzG7lLFVrf8fYoJFhthzFNqQkFIzVJUEg=)
2: MSXpcFJVWmFpep-wCgsZin8BaSk.roa (hash: ohEFObEZLYffE/U4SG8i1ZIGAH9G0J/KB4GeYQmg95o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:43:1d:87:76:83:3a:f5:0b:7e:14:5e:6b:75:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: Mar 2 06:00:29 2026 GMT
Not After : Mar 3 06:00:29 2026 GMT
Subject: CN=b258e8e0b8377112ef4db30c9b178d8cc9cc5888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:41:b2:22:4a:56:4f:ad:7a:16:f5:f9:d7:
f0:6c:56:67:da:b3:49:9d:39:ea:b1:47:39:1a:7e:
45:4e:86:35:22:6b:45:49:cd:8c:68:1e:28:63:e0:
ab:4e:4d:27:c4:e3:8d:4a:0a:2a:ab:ba:05:10:d2:
32:cf:b0:83:e1:8d:30:95:e3:99:97:71:e5:fd:01:
29:04:5a:b9:4a:5f:09:ec:c8:7a:4c:e8:f8:3b:70:
4c:95:92:3d:e5:37:96:50:7b:9a:25:12:20:51:40:
ac:4f:e5:86:79:91:d0:bb:f2:e7:c6:64:23:db:4e:
bf:4a:e8:48:77:fb:6e:e4:bf:02:92:df:7f:dd:3d:
ff:6d:08:8f:fe:a8:f5:42:52:ba:b8:bc:40:03:4b:
fd:4c:cf:ec:26:ef:85:34:e6:b0:73:33:2d:95:06:
c9:14:4e:44:3e:a2:07:1b:93:b9:fe:81:bd:d3:83:
39:32:8c:57:0a:3e:68:0f:d3:b3:35:b4:96:8c:62:
b6:87:06:c9:d4:1d:95:5b:3d:b2:f5:a1:0a:58:eb:
f0:eb:58:ce:8c:90:46:06:96:f9:79:5b:e5:2f:ad:
27:30:3c:4e:fb:a2:0f:fe:a4:bc:0b:8c:78:c3:22:
56:70:cb:b5:8a:c7:dd:2a:00:5b:93:e8:35:b0:7e:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:58:E8:E0:B8:37:71:12:EF:4D:B3:0C:9B:17:8D:8C:C9:CC:58:88
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:12:11:2b:b7:b7:8b:e0:3a:e2:68:89:94:f5:7b:d6:4a:1b:
fb:14:79:52:19:4d:34:b9:54:80:3b:04:a5:9b:6b:5e:2f:3e:
dd:d4:11:fc:12:7c:2d:23:5a:ef:38:ee:4f:40:a8:91:e0:16:
05:90:ef:08:36:f3:3a:0c:d7:08:73:68:55:79:bf:b2:90:20:
04:8e:87:90:a9:ff:e4:5d:b5:b8:e4:2f:1a:ec:9f:fb:52:54:
6b:57:7c:fb:a8:90:30:21:35:d4:84:09:63:48:21:37:7a:2f:
43:fb:73:53:ba:b1:78:79:ef:40:36:9a:c9:b8:0d:74:34:6e:
60:c6:49:c0:f4:9b:54:16:fe:a6:9e:3c:98:58:eb:ab:2e:b2:
7e:c2:0a:4e:0e:23:da:39:55:b9:7f:35:7d:6a:10:b1:0e:19:
74:37:b2:9a:43:9a:8e:cc:30:32:8e:ee:42:74:0c:7c:3b:d8:
68:ed:48:45:4c:8a:94:93:d6:0d:e8:c3:db:44:30:59:05:09:
59:42:5b:13:b8:fd:21:a6:84:4f:76:f8:c8:91:8f:1e:6a:6c:
77:4e:f7:d7:9d:f8:d6:20:87:61:8b:80:7a:74:c4:71:0d:95:
e9:2f:53:06:fb:3b:0d:9e:ed:6c:08:e0:af:ec:e3:18:30:5d:
f6:7f:a8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:09 2026 by rpki-client