Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: 8Ag3xRF8TOyRt7Vqp0JQIgCK2ZILo7vpbO1QPyyLHm4=
Subject key identifier: 80:F7:23:47:19:70:0E:0E:11:E7:96:1E:40:BF:8E:E8:4A:93:20:7F
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 019CABA2406DF75C62741DE07BC816C20FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 17F4
Signing time: Sun 01 Mar 2026 23:01:03 +0000
Manifest this update: Sun 01 Mar 2026 23:01:03 +0000
Manifest next update: Mon 02 Mar 2026 23:01:03 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: fgyr8bZqgthNbt5/inWrF91V2NBSyoBNNwbOKVXEcE0=)
2: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (hash: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298=)
3: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (hash: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:40:6d:f7:5c:62:74:1d:e0:7b:c8:16:c2:0f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Mar 1 23:01:03 2026 GMT
Not After : Mar 2 23:01:03 2026 GMT
Subject: CN=80f7234719700e0e11e7961e40bf8ee84a93207f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:6d:27:0f:47:29:4b:ff:a8:7b:05:95:91:
c3:0f:67:30:11:d6:4b:0f:71:71:e5:80:83:fd:39:
fb:a7:25:a6:8d:ca:fb:8c:44:86:bf:68:88:64:f9:
7d:57:aa:94:61:08:8b:02:db:55:d9:4e:b6:ee:ee:
57:9b:86:21:b6:91:9d:d7:6e:6a:b2:c2:1d:b1:cd:
ca:fe:50:a4:dc:4e:b4:b4:6c:fe:bd:c4:c4:2a:f7:
22:3f:69:fd:64:9f:d9:34:dc:01:a7:9a:79:66:d4:
32:26:15:d2:ce:d1:ec:25:1f:5e:f7:c9:6e:a4:b5:
be:eb:0b:64:51:8b:e6:f9:6a:d2:4c:c6:db:5c:ac:
04:1d:90:4e:ed:ce:ab:0f:17:3d:cb:d3:fc:3f:63:
c0:25:2f:04:61:f0:d1:c3:00:33:ef:41:19:8d:01:
9f:9c:7a:d5:4b:49:f2:a0:1f:15:c6:59:f9:9c:1a:
cc:98:1b:70:23:26:2d:91:7c:3f:dd:53:45:24:4d:
9f:14:bf:8f:b6:70:d7:ed:c3:20:78:03:59:a7:71:
4b:cb:8e:eb:f6:a3:e6:20:48:1a:c3:7e:b6:8c:7f:
e7:5a:b9:13:52:25:2d:98:f5:7b:25:94:29:d5:18:
71:46:bd:17:c5:6e:6d:87:c4:64:c3:50:5a:43:47:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F7:23:47:19:70:0E:0E:11:E7:96:1E:40:BF:8E:E8:4A:93:20:7F
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a5:d1:2d:cf:ec:e5:be:31:2c:8a:6d:0a:ca:cd:f8:27:76:
fe:7e:99:79:29:f8:8c:f6:d7:f9:d4:86:a2:58:dc:e9:b2:f4:
2e:88:bd:9a:5c:f5:d0:05:52:35:25:b2:43:96:3e:23:22:1a:
a6:49:3c:39:7c:6f:0d:ef:b2:ca:14:49:8c:9d:dd:ef:09:ba:
a3:48:56:e9:7a:cc:c3:67:b6:14:6a:e3:65:4f:23:3e:b4:09:
01:6a:d7:10:8d:72:04:86:d5:99:a1:ac:1a:b6:93:d8:e6:10:
94:fe:e1:c2:05:8d:dc:0f:30:c7:85:f0:cc:4e:34:07:e2:79:
1e:53:a7:78:4a:df:52:02:ff:f5:03:3b:5d:68:f3:4c:bf:ce:
c0:12:1e:6e:0f:50:e7:f9:aa:2b:cc:ad:16:2f:f2:c8:94:be:
9d:c3:07:01:fa:f9:f8:30:94:f6:59:cc:a4:24:51:9a:60:87:
af:6b:b9:3f:b0:43:88:39:4b:d5:15:4e:01:13:db:13:dc:30:
d9:01:d5:d9:22:65:d7:45:4a:38:e9:6e:6a:aa:28:31:bd:5e:
a5:4a:22:d9:3a:9c:06:ea:9c:45:49:ed:ad:ca:78:f1:7c:52:
2a:2b:8d:fb:e5:9a:8c:3c:fd:f7:77:ea:c6:07:0a:49:c6:17:
fc:d1:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:17 2026 by rpki-client