Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
File: FseIv2PBqcecEUVP45bScWqh03g.mft (raw, json)
Hash identifier: VJyObnO0Jfw5CtK6vYJir7mtwdZu20kl+H8KrFV5qUg=
Subject key identifier: 5C:D9:52:AE:2D:65:55:58:5E:D8:8A:16:43:2F:11:68:58:E6:1F:67
Authority key identifier: 16:C7:88:BF:63:C1:A9:C7:9C:11:45:4F:E3:96:D2:71:6A:A1:D3:78
Certificate issuer: /CN=16c788bf63c1a9c79c11454fe396d2716aa1d378
Certificate serial: 01A0C40E0CEE4FCEB6B0544B2DB3AA66E435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
Manifest number: 0215
Signing time: Mon 21 Sep 2026 13:00:50 +0000
Manifest this update: Mon 21 Sep 2026 13:00:50 +0000
Manifest next update: Tue 22 Sep 2026 13:00:50 +0000
Files and hashes: 1: FseIv2PBqcecEUVP45bScWqh03g.crl (hash: Mc3YlFEdfEw3IW+N176pCxSkyNssjNyarfixkGzN8LI=)
2: nDmReaPTunv3rpuf20ug4JkPOgU.asa (hash: /CHUZ8GEsPydRB6nZOopJhNQ8frWrOhKD8Z1ZQifie8=)
3: r0ErFB9jCD4xbUhMnw9fU4li-3o.roa (hash: g57/KRcIS2omYrdJOqYvOIP4Higa58DGPvJrJE8+WvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:0c:ee:4f:ce:b6:b0:54:4b:2d:b3:aa:66:e4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c788bf63c1a9c79c11454fe396d2716aa1d378
Validity
Not Before: Sep 21 13:00:50 2026 GMT
Not After : Sep 22 13:00:50 2026 GMT
Subject: CN=5cd952ae2d6555585ed88a16432f116858e61f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:86:80:8a:16:d8:c2:02:99:44:1d:e9:65:
82:c1:6e:36:26:21:06:b8:03:4d:ff:65:b3:9c:cf:
20:e5:49:5c:65:12:2d:2e:6b:a8:37:0d:a2:c9:d4:
2f:5a:54:9c:8b:4e:ae:f8:e2:51:ea:15:0b:2b:96:
68:34:90:08:a1:fb:c6:62:ea:46:c7:44:c7:62:31:
9e:0a:ec:25:c2:08:4e:49:d2:9f:de:9b:b6:1d:ce:
c9:75:2d:c1:cb:19:e2:fb:6d:23:c0:f1:45:89:a0:
c6:92:c0:03:7f:0f:0e:de:08:60:62:3f:8e:b3:4d:
aa:d7:3f:ff:8a:1b:12:9e:a9:7c:48:0d:4c:d4:6a:
18:bd:ac:14:97:95:de:01:aa:df:4a:e0:6d:ea:b2:
28:b5:2d:25:00:5d:9e:c1:2e:d2:4e:ed:66:55:55:
f5:23:4e:ab:c1:4c:f6:3d:ba:7d:6c:c9:45:2f:8b:
8d:7d:ae:ac:de:42:e6:81:bd:ad:9b:11:7d:18:09:
ca:2b:d7:ca:e7:12:92:c7:49:66:99:ea:02:2b:92:
8b:f9:75:84:07:b5:f0:5b:8b:58:0f:fe:2e:b0:28:
19:b7:fa:81:df:84:bd:55:36:90:c8:06:53:24:a7:
25:01:d8:a7:a7:16:1b:d9:9c:cd:5d:25:4b:12:31:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:52:AE:2D:65:55:58:5E:D8:8A:16:43:2F:11:68:58:E6:1F:67
X509v3 Authority Key Identifier:
keyid:16:C7:88:BF:63:C1:A9:C7:9C:11:45:4F:E3:96:D2:71:6A:A1:D3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:74:ef:e4:70:03:c6:a2:5b:e0:a8:ab:ac:5f:30:34:30:2a:
05:6e:fe:26:ad:13:5d:1a:93:f6:88:d9:be:03:27:a9:88:4f:
fb:43:03:cc:f0:8d:c7:b3:2f:34:a2:74:b4:f4:fc:76:81:bc:
c2:10:e6:2e:03:e4:77:26:30:03:87:2b:bc:3c:0b:f2:a0:c2:
d5:52:41:0f:e3:bf:d7:dc:cf:b8:3b:42:db:21:49:2a:50:c8:
22:f3:ad:5c:ed:23:37:03:2f:f4:4e:b8:6f:b3:d7:72:40:3b:
92:60:d4:0c:2f:c4:4d:15:9e:92:f0:ce:f5:fe:90:46:13:42:
7a:85:07:81:0f:86:c6:91:ad:99:c0:3b:99:67:94:51:1c:ac:
c3:48:21:a5:3e:f4:f8:30:95:da:74:a6:1d:e9:e2:8b:90:28:
e4:2c:aa:4d:aa:f5:5b:f6:bd:50:9a:93:d7:2d:5b:cb:1e:99:
4f:4c:82:50:39:b8:1e:34:88:3c:2d:36:d4:fc:24:4d:aa:e9:
fb:37:52:63:b9:02:38:ee:37:e3:1f:3a:5c:3f:b6:86:0c:56:
b7:a4:07:fe:22:7a:d8:24:e8:da:8b:62:e9:27:c0:00:b5:29:
d8:b1:39:1b:66:a7:be:3a:c5:51:b2:36:6c:35:fb:26:42:eb:
52:d6:89:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:42 2026 by rpki-client