Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: bvMA/uFFQ8RuZYSzl38OfRTVa+zyYqHSdhIjVYmKLko=
Subject key identifier: 4D:7A:36:3E:EB:0A:91:E3:C2:42:0D:2E:CE:25:0F:8B:D2:FA:EF:02
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 019CAA591E9B965EDA44EA2F839FA7ABB4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 06D5
Signing time: Sun 01 Mar 2026 17:01:33 +0000
Manifest this update: Sun 01 Mar 2026 17:01:33 +0000
Manifest next update: Mon 02 Mar 2026 17:01:33 +0000
Files and hashes: 1: F79BFzYAIPfw1eLFSox-1us1fgY.roa (hash: s5iDlh7My+Xt6LXot7o7pK46v+NmJUoCkuMmTCQ3Xe8=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: J9wxdGvrbbvGMWH3eJcnCPGvSBmLsgut7xHMF14dSXs=)
3: Xm7CSatgWoiFWFoLjdzPyqLwt4Y.roa (hash: ljTW1e8jbhPOBJuEbeNSNc8GJIV6MJTPAjrHkhEAZP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:1e:9b:96:5e:da:44:ea:2f:83:9f:a7:ab:b4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Mar 1 17:01:33 2026 GMT
Not After : Mar 2 17:01:33 2026 GMT
Subject: CN=4d7a363eeb0a91e3c2420d2ece250f8bd2faef02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:b9:7c:a9:99:d2:00:e1:6c:1f:59:4a:b8:
e8:9d:50:cd:ae:e9:33:1e:70:ee:b8:16:79:12:f6:
08:f0:e0:bd:ff:de:05:93:a8:ff:ca:e3:15:8f:b4:
bf:37:47:4c:69:11:71:42:2f:19:ba:df:0f:93:dd:
d1:07:0b:c4:c2:c6:b3:a3:a0:da:95:a0:de:58:17:
fe:49:e4:dd:31:11:bc:fc:6e:47:0a:e8:12:5a:c8:
bc:36:18:df:a7:9a:69:36:07:72:db:ce:e6:f6:46:
40:d0:83:81:81:aa:74:b4:14:49:84:6d:a8:21:36:
89:4f:89:91:f5:f4:57:d1:8c:df:27:a1:e0:54:03:
e1:18:9d:f0:0f:70:07:1b:f2:02:aa:d5:14:1c:e8:
0e:6c:d2:a5:db:7e:20:a6:99:b4:55:2e:18:6c:f6:
41:dd:71:23:24:4d:03:6d:c5:16:0f:d1:40:59:50:
75:79:d4:cf:ab:87:47:97:e3:5a:79:be:9c:2e:6f:
22:b9:b8:3e:e3:19:d2:33:46:87:ce:37:0d:d2:c2:
5e:05:c6:75:f0:01:f2:9e:e0:3c:7c:a1:fa:1a:73:
6e:e5:48:d3:6c:7b:63:54:bd:af:de:42:51:78:94:
65:bf:af:0f:bc:13:f5:33:72:78:60:0a:4c:49:70:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7A:36:3E:EB:0A:91:E3:C2:42:0D:2E:CE:25:0F:8B:D2:FA:EF:02
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:d7:df:3e:2d:a5:9f:3d:9f:cc:d6:bc:fb:6b:cc:db:90:3f:
82:81:51:2a:98:85:8c:84:8e:a5:a6:3f:1e:7b:75:d6:d9:ac:
c6:ab:ec:cb:92:f6:e0:e6:16:cc:c8:77:e6:82:ae:7a:e1:d3:
d5:55:e7:6c:ec:73:f0:97:48:42:99:5d:c3:af:66:b6:71:44:
42:3e:1d:5c:82:1c:ed:b4:3e:00:2a:46:e2:18:e9:76:8c:6d:
98:ff:8f:e7:57:45:c5:dc:2e:7f:57:98:ea:0a:b5:42:4a:d2:
c3:77:c8:22:64:df:26:d4:91:ab:5c:4b:ad:b0:97:93:8a:2b:
02:12:b8:6d:70:b5:d1:5e:db:34:eb:e3:99:d7:c6:4e:dc:5e:
62:f0:25:3b:4c:64:d5:62:fe:3f:6a:8e:9b:15:ac:f4:cb:13:
fa:32:33:dd:cf:40:e7:2f:8d:85:7f:56:c1:60:e1:ee:11:5f:
d5:ac:18:f1:73:83:80:72:0f:c3:20:5d:ca:38:04:04:ca:40:
79:07:20:8e:02:11:76:e4:94:12:07:00:6c:26:1c:d3:c9:fa:
5b:d7:5a:7a:c0:c0:c0:9f:0e:fb:9f:34:35:fa:3b:fb:cd:bd:
b4:fa:a7:c6:e1:23:5a:91:c3:c0:72:0b:c7:49:ac:4a:23:c1:
3f:2c:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:11 2026 by rpki-client