Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
File: Fas-cvc0DahW6T1i7o0CPx18juc.mft (raw, json)
Hash identifier: MElUyBpyd6wEOhR1CmNm0QDgfBrVwiDfKbXpgJknZG0=
Subject key identifier: 1A:F3:82:E1:1B:CA:87:DA:2C:58:86:B0:9F:6B:F5:99:82:EF:22:E4
Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
Certificate issuer: /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Certificate serial: 019CA9EB43B196E1900BB56DF04E6C0CBD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
Manifest number: 0D8B
Signing time: Sun 01 Mar 2026 15:01:33 +0000
Manifest this update: Sun 01 Mar 2026 15:01:33 +0000
Manifest next update: Mon 02 Mar 2026 15:01:33 +0000
Files and hashes: 1: 3qA4FQIUtzDs5t_mEHhNZORgMfU.roa (hash: GH+TqQvh17FK/3T+3gQp0M00LakHIoZrhZmY+Sn7jQw=)
2: Fas-cvc0DahW6T1i7o0CPx18juc.crl (hash: ciXGfOW9ppKUfIc3RkZpM1vue/Xy5p+O3qKaOzJSiM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:43:b1:96:e1:90:0b:b5:6d:f0:4e:6c:0c:bd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Validity
Not Before: Mar 1 15:01:33 2026 GMT
Not After : Mar 2 15:01:33 2026 GMT
Subject: CN=1af382e11bca87da2c5886b09f6bf59982ef22e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:6d:8f:05:48:5d:29:63:9f:bc:b0:c6:99:
38:15:75:5b:b9:68:f3:e0:c4:50:a2:54:de:a0:8d:
12:a2:ee:ee:20:90:51:70:80:08:52:2d:4b:65:ad:
1b:da:67:b7:83:03:e6:d3:3c:5a:31:e4:27:46:c4:
78:d1:ce:88:6d:a8:90:ed:50:ec:26:d6:07:20:a6:
af:97:f6:14:67:92:2a:58:f8:2e:c0:c7:61:6a:64:
8c:60:ae:20:b9:97:39:11:f0:e8:0a:0e:bb:9a:bc:
c4:f2:e3:80:a3:a1:32:fe:d5:08:f9:64:c0:cb:73:
68:28:23:e3:f2:df:1a:78:9c:3a:87:fd:dc:fc:ee:
ed:10:92:15:b3:e9:2a:95:39:65:21:05:48:96:d6:
dd:ff:68:b7:28:64:58:38:9a:c6:b6:59:64:a4:83:
7d:11:09:65:99:b9:11:ec:77:b6:4f:13:42:6b:03:
a9:3c:ee:65:f2:c4:eb:33:27:05:51:f5:4d:ac:31:
f9:fd:78:0b:32:c0:18:29:fb:b2:97:05:ea:e7:ce:
94:20:80:a5:c6:55:35:f1:46:49:3d:23:7e:e6:17:
8e:20:3c:25:70:1b:17:b1:f5:52:a5:9a:96:ed:dd:
0a:5b:68:2b:10:92:c0:74:d8:e5:ea:00:bc:6d:ce:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F3:82:E1:1B:CA:87:DA:2C:58:86:B0:9F:6B:F5:99:82:EF:22:E4
X509v3 Authority Key Identifier:
keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ef:48:39:bd:87:3d:ac:ba:0a:7f:c2:b0:3c:e8:81:de:36:
bd:e5:4f:1a:71:11:99:a0:c8:e1:5c:b0:81:80:ef:be:e0:8b:
d4:2f:fe:11:3d:5c:59:3f:60:47:9c:4f:d6:2d:23:fe:4c:9d:
0b:d6:8b:11:0f:36:20:0a:46:d5:4d:de:29:08:a1:b1:24:9b:
84:b7:53:3d:6c:4f:45:5e:a9:40:73:a7:ac:87:e4:0e:5e:a1:
30:a2:e5:23:ad:19:e5:fc:46:a0:0d:af:f7:d0:c0:c1:13:e1:
85:3a:8b:1d:d7:43:f9:7b:6d:cb:2f:5a:cb:5f:55:d1:cb:b3:
b2:0b:bf:d5:6e:b7:66:fa:59:c5:e5:0d:95:31:d5:2a:66:48:
18:94:af:be:98:ac:dc:48:94:f9:58:fd:2c:2e:8b:d0:a9:b1:
12:87:7e:a7:3c:31:67:30:f3:42:45:d8:b3:91:5a:41:43:0c:
d5:5a:17:ec:13:de:26:81:4a:86:8d:3b:19:79:9b:df:96:61:
fc:57:85:da:34:93:16:c6:91:65:f0:6e:4b:bf:73:25:47:d1:
20:85:9f:70:84:ae:39:39:f2:4d:0d:a2:b1:26:77:c6:19:fc:
62:e1:87:ab:c7:88:e5:e1:ed:95:35:95:6d:8f:41:b3:a2:db:
2f:0f:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:04 2026 by rpki-client