Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
File: _FlUn23SuDFEuIDCPwb7o7JdOYY.mft (raw, json)
Hash identifier: Bv4d/jmDgdC5BxOBi5DeJ347CjPdwfxdgjsM348RqdA=
Subject key identifier: 50:32:2F:B8:2F:8C:00:89:32:01:FB:CD:A8:92:B4:DF:BE:94:CA:CC
Authority key identifier: FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
Certificate issuer: /CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Certificate serial: 019CACB4EBAD5F866B8DAAAC9BA43F7E7C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
Manifest number: 1241
Signing time: Mon 02 Mar 2026 04:01:03 +0000
Manifest this update: Mon 02 Mar 2026 04:01:03 +0000
Manifest next update: Tue 03 Mar 2026 04:01:03 +0000
Files and hashes: 1: _FlUn23SuDFEuIDCPwb7o7JdOYY.crl (hash: xzBvM4EkwGC8A+rIl+MY0cU11elueQVBk5kAZaAxYfw=)
2: o_T_HTHs0KSiz-VeTzvUEtH700c.roa (hash: j5lWUOt2iKu1wnonlrAU9TS/DtJ/+Bc/VySYwnhPo7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:eb:ad:5f:86:6b:8d:aa:ac:9b:a4:3f:7e:7c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Validity
Not Before: Mar 2 04:01:03 2026 GMT
Not After : Mar 3 04:01:03 2026 GMT
Subject: CN=50322fb82f8c00893201fbcda892b4dfbe94cacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:05:15:fe:a8:e4:c3:21:db:6d:05:f3:77:
d3:46:cd:99:32:43:1a:2b:55:cc:50:36:f6:55:40:
b2:33:9c:61:a5:0d:1d:cd:76:79:52:07:b8:ce:89:
34:a7:02:7d:a3:b7:50:11:f9:31:0b:34:46:b3:31:
74:61:4a:4d:fa:68:7b:b6:03:ed:be:3b:a8:71:03:
e9:9e:68:1e:6a:59:ea:f2:1f:1f:d4:dc:8f:a1:71:
c5:fc:33:20:44:bd:c5:ae:95:d7:c8:63:9d:49:28:
12:e3:4f:5c:01:e9:d0:01:5e:d3:4e:94:4e:34:88:
7d:79:90:f7:67:70:82:4e:96:65:7d:f7:d7:ab:84:
de:62:72:0f:a6:41:e5:85:5b:44:ef:fd:27:1f:00:
b8:bb:86:50:c0:3c:cf:87:2b:8f:ce:e0:c3:00:c0:
50:a4:02:80:11:3f:79:09:01:ac:b2:c0:f5:f2:74:
5f:d7:62:29:74:1f:83:eb:e0:f9:24:d1:ab:31:2e:
26:95:1e:d7:6a:aa:11:96:bc:e4:36:c3:d6:7f:63:
4b:5b:49:7b:0d:2c:df:bd:67:1e:3e:b7:5c:ec:92:
8a:a8:c0:9a:89:34:ba:a2:85:6d:c2:49:08:a7:4f:
5d:aa:22:62:7b:a3:76:58:9c:4f:6e:3e:91:2c:c5:
75:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:32:2F:B8:2F:8C:00:89:32:01:FB:CD:A8:92:B4:DF:BE:94:CA:CC
X509v3 Authority Key Identifier:
keyid:FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ba:94:1a:4b:d4:f5:2d:c9:c8:2a:4a:e7:db:c5:95:64:52:
1d:78:08:fe:89:c9:4f:a9:53:77:b8:0f:d1:78:92:29:65:57:
47:5f:89:eb:ca:d5:36:c1:92:3b:6f:4c:4b:b5:47:10:1f:b7:
7a:26:5b:50:2b:f9:de:99:93:5a:fe:e2:45:b0:67:4e:de:da:
5c:d9:bf:83:89:33:3c:5f:18:88:dd:74:93:d4:ee:ce:f4:f7:
10:6a:6d:70:76:26:20:12:b0:f5:ff:af:50:a6:7c:97:d3:52:
3b:02:98:e8:86:0f:4a:db:22:57:df:7b:57:6f:ad:7a:11:0f:
11:2f:34:72:59:5b:a2:6b:05:1b:a7:d7:d0:ac:c4:be:1e:34:
f3:09:5c:69:a2:fa:1a:3e:8b:45:0b:dd:a2:5a:94:a9:3d:81:
9b:a7:0f:5f:b2:ac:f1:a3:69:2d:d0:66:7e:2b:52:ab:eb:e9:
e2:e0:38:56:1d:8a:65:bc:eb:5d:92:96:d9:5e:1b:63:6e:92:
81:01:61:5a:64:cf:0e:1d:fe:32:53:44:51:b7:9d:31:8c:2e:
78:50:fe:3f:01:13:23:88:d0:4f:22:3c:98:27:83:4b:ef:de:
c6:39:3c:bb:61:1c:31:78:e3:be:3c:9e:4d:13:43:c4:56:58:
e1:05:92:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:57:21 2026 by rpki-client