Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: u46rETtKz1ZzjWTNOSBWJe+dev9OF/2k4ZnSxYM0+CU=
Subject key identifier: 82:36:5B:3B:25:56:28:E5:08:90:CA:20:79:4F:B1:D2:B0:46:99:3E
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 019CAAFD66C909544D9F67F437382BA77A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 20:00:59 +0000
Manifest this update: Sun 01 Mar 2026 20:00:59 +0000
Manifest next update: Mon 02 Mar 2026 20:00:59 +0000
Files and hashes: 1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: PB9gfPCkzNOeb+XtkE+QWYvX0dWTlzzwUnKl1EdSoWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:66:c9:09:54:4d:9f:67:f4:37:38:2b:a7:7a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Mar 1 20:00:59 2026 GMT
Not After : Mar 2 20:00:59 2026 GMT
Subject: CN=82365b3b255628e50890ca20794fb1d2b046993e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:76:08:0c:4e:21:d8:32:20:c1:6a:dc:ef:
8c:9c:e5:4a:b0:8b:93:e9:7a:0f:91:60:f1:97:0f:
29:69:b5:29:07:36:93:d3:c2:a0:e3:2c:21:fb:32:
51:d6:15:8d:18:77:bd:58:91:c7:d6:30:23:57:ff:
96:c3:86:61:7c:8f:06:ce:b2:24:2f:f0:ae:4d:1b:
7d:5e:da:ae:e4:61:d0:9a:10:ed:78:15:4e:97:e8:
32:da:27:44:6a:24:68:74:4f:fb:13:d3:9a:75:1f:
94:5f:17:52:d8:3e:be:d7:a2:0f:04:d1:36:c6:49:
c4:50:c1:92:d4:71:46:4a:2b:b6:b4:4a:58:28:50:
3a:45:33:4e:a3:37:93:28:66:b2:47:98:a7:35:98:
af:60:83:9f:79:aa:11:fd:28:a7:72:6d:16:40:e0:
1c:2f:39:64:d3:8b:e5:8c:35:00:6b:7a:60:a2:e1:
20:a1:a3:98:a7:c8:43:97:85:9c:ab:6b:6a:fe:96:
d2:56:fd:09:86:75:14:ed:42:0a:7c:86:ff:fa:e8:
23:a9:fd:61:9b:25:0c:c6:12:3c:c5:ac:84:00:04:
98:3e:ba:06:85:cc:8d:c2:aa:91:7e:ac:9d:9f:c2:
17:d5:db:47:2d:92:72:99:e3:4e:7f:1d:46:6d:bc:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:36:5B:3B:25:56:28:E5:08:90:CA:20:79:4F:B1:D2:B0:46:99:3E
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6f:84:bb:8c:98:2d:e0:43:4a:23:5f:c8:c0:88:df:26:87:
69:15:77:9d:c2:8b:15:c1:a6:83:bd:40:66:28:e3:85:02:37:
6b:41:36:1c:a6:8c:7d:ae:73:d0:f5:37:0c:ce:d0:93:07:77:
5c:26:e4:69:af:d3:ac:57:3a:1d:8c:cf:f4:99:ae:fc:35:ea:
f9:5d:61:d3:ec:33:79:5e:af:30:ef:08:d7:27:9a:8b:60:b2:
63:47:89:98:1d:77:40:ee:88:5a:2c:84:f4:01:9f:d1:18:f0:
68:90:ec:c5:d1:fe:67:a2:cc:30:9c:a3:36:d0:55:7e:b2:4b:
d8:17:70:69:43:68:ce:ed:e6:e4:d5:41:a5:2e:bf:2d:e1:d1:
5b:78:39:f0:79:49:6d:39:71:79:d0:af:f7:da:a4:6f:09:b9:
c1:83:0d:5b:f2:a1:02:58:55:ea:89:b9:96:42:16:f6:61:65:
03:46:1f:9a:7e:1b:9f:29:db:7c:6a:5f:64:7f:0b:7f:ee:cd:
cb:d3:c1:0c:a0:dc:63:ff:7f:ae:94:97:fe:90:a8:d8:07:c0:
c5:5a:bb:e6:b5:62:88:92:29:d0:57:fb:03:39:44:44:9c:7f:
d9:3a:d9:ca:8e:c8:38:e4:40:66:a7:4b:8d:02:53:e3:53:e0:
6a:2b:92:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:55 2026 by rpki-client