Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
File: FR5sPcXWdU_k9gqCscxVGreA34s.mft (raw, json)
Hash identifier: UgB2U7D1ayP7YvsH1+qYoUxCQVcWo+NXdj0Bg4Vq5bQ=
Subject key identifier: 58:43:DD:A6:8C:5E:EF:EA:57:18:4C:ED:AA:AB:5F:9A:E4:7D:B7:B7
Authority key identifier: 15:1E:6C:3D:C5:D6:75:4F:E4:F6:0A:82:B1:CC:55:1A:B7:80:DF:8B
Certificate issuer: /CN=151e6c3dc5d6754fe4f60a82b1cc551ab780df8b
Certificate serial: 019CAB3472D8E2AB94412B8D036028C17605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:01:07 +0000
Manifest this update: Sun 01 Mar 2026 21:01:07 +0000
Manifest next update: Mon 02 Mar 2026 21:01:07 +0000
Files and hashes: 1: EQMMkR6mZKGSiMp4lsn6ISHEMrs.roa (hash: gsILKrvDfz3c10IYwfScCX9TE1CSPS61cI9LLaOT2Wc=)
2: FR5sPcXWdU_k9gqCscxVGreA34s.crl (hash: wz+iKynLdSjmT4aVWX9zw7DLaDdxiB+mGqNjUtJz9V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:72:d8:e2:ab:94:41:2b:8d:03:60:28:c1:76:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151e6c3dc5d6754fe4f60a82b1cc551ab780df8b
Validity
Not Before: Mar 1 21:01:07 2026 GMT
Not After : Mar 2 21:01:07 2026 GMT
Subject: CN=5843dda68c5eefea57184cedaaab5f9ae47db7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:f4:0c:9e:e9:f5:66:bb:df:19:e8:d0:18:
73:da:67:6e:c6:2d:eb:e0:fd:17:5e:4d:e8:5a:bc:
59:2c:38:af:42:69:5b:30:4c:8b:22:d3:ea:9d:40:
03:34:dd:75:31:1d:ef:6c:e6:38:d3:57:b8:cc:85:
45:b1:42:dd:b5:af:d2:05:a8:e7:51:ae:70:a6:86:
e9:1a:b7:36:84:c4:c5:81:7f:ac:67:b8:50:dd:16:
ee:57:e3:54:03:af:70:c1:1c:82:3d:b4:56:f3:2e:
42:16:61:3c:16:38:7e:b5:05:aa:03:67:5b:64:0f:
4b:66:58:87:f4:35:cc:cd:2c:4d:5e:77:5c:e5:a6:
bd:a3:bf:e9:5d:28:60:31:bc:20:bf:d4:2d:87:d3:
85:ea:ca:ff:ca:c5:10:62:0a:fa:d2:71:6e:95:20:
99:ef:4d:d2:86:65:2b:fd:7e:df:ae:c5:63:15:2c:
df:bd:43:bf:8a:c5:c0:a6:d6:56:35:15:08:e1:5f:
e1:e7:29:91:33:79:c0:02:14:34:da:a4:4b:79:7f:
4d:fe:da:dd:21:b9:c4:ae:8f:e2:30:6c:01:1f:ba:
62:49:bf:d1:89:42:4a:9b:de:06:47:d6:51:2a:bb:
c8:01:b2:93:3c:74:4c:36:7f:59:9b:c8:57:81:a8:
12:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:DD:A6:8C:5E:EF:EA:57:18:4C:ED:AA:AB:5F:9A:E4:7D:B7:B7
X509v3 Authority Key Identifier:
keyid:15:1E:6C:3D:C5:D6:75:4F:E4:F6:0A:82:B1:CC:55:1A:B7:80:DF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b7:22:87:33:f2:5f:bc:65:36:cf:44:54:ce:cd:9a:7d:f0:
60:35:ed:8a:88:70:3f:ec:18:46:34:b9:27:84:16:47:ce:ba:
21:b9:7f:95:eb:9c:7f:57:46:be:a6:2c:98:8f:1d:9a:35:82:
3a:c7:40:01:5e:58:8a:23:95:d5:a1:1b:35:8f:ff:a5:ec:12:
eb:6b:c4:6a:34:4b:49:2d:2e:62:16:11:7e:75:bf:d6:80:d9:
bd:df:94:0f:5f:03:94:28:45:79:e1:66:1c:58:b9:ba:c9:44:
0b:de:22:fc:fd:81:2b:d9:9f:32:77:0b:28:e1:42:3b:28:07:
62:43:3f:b7:e7:5f:17:b6:bc:12:bc:61:68:0f:39:45:e6:6b:
41:c9:cc:fc:16:4c:7b:ff:3a:e2:12:6b:f6:4a:85:01:9d:0d:
dd:e6:c8:a9:80:ef:2c:69:f9:02:47:6c:92:44:d9:71:a0:04:
b1:08:69:d4:43:54:ca:fa:3a:ec:dc:29:9e:e8:8d:f8:be:cc:
a3:89:f8:a1:b7:16:11:a8:8e:60:0f:a9:d0:3f:66:2e:d8:b9:
5b:dd:78:c7:74:9a:37:b2:d2:56:18:96:43:22:a0:d4:14:8c:
46:2b:a2:f1:d6:3d:a6:76:2c:a3:60:79:70:15:f4:92:56:50:
71:de:61:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:35 2026 by rpki-client