Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
File: FAa0-f1RaOt3gegksUU-mfXmVTw.mft (raw, json)
Hash identifier: ejwVU6O1U68sxTvwI4RC5vIazZ20kZwU2/jGcLmwtF8=
Subject key identifier: 37:B7:D3:D8:9C:66:7C:17:BD:89:5F:21:15:89:10:2D:A1:E1:55:8D
Authority key identifier: 14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
Certificate issuer: /CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Certificate serial: 019CAFB5F8CE9EE07D31325E9BD686EE6389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 18:01:04 +0000
Manifest this update: Mon 02 Mar 2026 18:01:04 +0000
Manifest next update: Tue 03 Mar 2026 18:01:04 +0000
Files and hashes: 1: FAa0-f1RaOt3gegksUU-mfXmVTw.crl (hash: Qr3JxjdTY+Jm0qpuP0H1Mid0Mu7CqHX+ejEZCnkBZUo=)
2: R8GC6AMTH-Hxqzb_tHLOqN1Dy-4.roa (hash: sjpipeUhURBvNL7hQYR9otIU9f5zXHfGn1dPphfh+uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:f8:ce:9e:e0:7d:31:32:5e:9b:d6:86:ee:63:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Validity
Not Before: Mar 2 18:01:04 2026 GMT
Not After : Mar 3 18:01:04 2026 GMT
Subject: CN=37b7d3d89c667c17bd895f211589102da1e1558d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4c:03:fe:b6:5b:80:50:a0:ba:09:8f:db:a4:
79:79:2d:85:9c:82:22:be:67:31:f0:bb:9c:df:68:
d4:95:c5:2d:10:59:cf:77:ab:0e:c5:0a:79:f4:74:
00:f3:c8:9c:27:eb:d7:47:2f:a3:19:27:51:bc:c7:
1b:5b:75:ba:26:5f:6e:94:a1:f8:f4:ee:be:8a:a0:
c0:97:93:27:51:f2:32:d7:65:fa:c5:1e:0b:47:ef:
19:7a:ee:65:33:40:ff:2b:9b:d4:95:07:c7:4a:37:
fb:cf:b7:01:8f:85:28:cb:bf:23:3c:b2:55:59:b2:
d0:57:3b:06:5d:49:ae:4a:33:88:ed:ce:ce:ed:7e:
e3:42:cb:19:ca:70:c9:e8:ec:84:e2:08:52:bc:94:
51:fe:f1:19:ac:29:9e:17:a2:d9:5b:10:bd:f4:5b:
b3:b6:8e:29:74:1a:fe:53:eb:60:08:a6:68:c0:b9:
66:f1:b5:c3:4e:36:f4:c5:01:ea:81:6d:82:15:46:
c9:1c:d2:8c:3e:9c:a6:22:a2:58:27:b2:c8:fc:6b:
f8:43:9b:62:c1:2f:e8:b6:c4:f0:15:45:19:44:42:
8f:a6:93:cc:fc:56:62:50:35:e2:ce:7b:3d:90:ba:
98:c1:0b:49:f6:60:04:d1:52:ba:dc:e3:d2:71:b9:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B7:D3:D8:9C:66:7C:17:BD:89:5F:21:15:89:10:2D:A1:E1:55:8D
X509v3 Authority Key Identifier:
keyid:14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:2c:6a:8d:88:e7:37:fd:c3:35:85:93:6f:1b:e2:af:ce:23:
c3:33:b1:f9:a0:55:9a:4c:f2:40:60:32:f7:3a:03:80:76:49:
40:2c:ad:ff:d3:91:b4:fe:43:b5:40:f9:a1:e7:d1:8e:ee:6a:
f1:28:b5:c5:5c:98:38:e5:65:5b:d7:c1:00:f5:30:2a:7a:31:
d1:1d:bf:37:90:a3:46:5e:c1:68:f3:eb:80:17:c8:74:9c:d5:
28:ba:a4:1f:2e:9f:a0:cf:3e:98:bc:ba:db:83:e6:c7:8e:e0:
7d:9b:bf:e0:a1:ed:df:e5:24:b7:8b:3f:98:5b:d0:d9:53:b6:
04:1d:6f:6c:f5:b5:27:e7:3d:21:e6:7a:17:08:10:b8:d3:82:
b4:23:67:93:f9:f1:d8:27:8c:45:64:26:61:57:92:dc:25:58:
8d:cf:1b:1c:5d:73:79:88:fd:8c:22:05:c3:88:2c:a9:73:46:
b3:c8:40:00:a1:73:7e:36:30:68:26:13:29:cc:00:6c:e7:27:
3c:a3:e3:96:21:52:66:2c:90:02:18:5e:2e:47:3c:d5:ac:bf:
3b:53:1b:25:f1:a8:aa:90:88:ec:41:59:95:97:b8:e2:3c:b5:
50:4f:0c:74:42:bb:e2:3b:dd:ce:c4:50:2f:1f:eb:7e:4a:7d:
4a:0a:4c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:43:20 2026 by rpki-client