Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File: FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier: mGqch0dNofkNsfAA08ophIJztA/vB0fYcAfduwjJk1s=
Subject key identifier: 8C:AE:82:42:71:7E:93:93:DB:16:D2:28:D5:BE:4E:BE:B8:88:2E:2B
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial: 019CABA1FCAD3F107B95DA265F6BFE044A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number: 0AEA
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: 1uN-f7Pe3Yoax_Gy67R47bHTZtU.roa (hash: MsQhz6+if76h/AmIW7u+uBAwg92G7zeCMFsByKAoJ9g=)
2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: PH3H2cXc3j43uRMnaPaDfInd5BqPAqtL9vKfv0Vs6lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fc:ad:3f:10:7b:95:da:26:5f:6b:fe:04:4a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=8cae8242717e9393db16d228d5be4ebeb8882e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:66:68:7c:49:49:d2:93:d9:91:bb:cf:07:26:
d7:db:24:3c:c5:2f:71:ac:41:3f:e5:bb:f4:f3:da:
ce:47:b1:6f:14:8a:b8:90:20:fb:6f:a6:fa:fc:c3:
71:67:f0:f3:40:ce:b4:db:f7:0e:57:e2:44:78:49:
e4:8d:e9:92:9f:b3:0e:0b:0f:5c:dc:ae:70:97:58:
36:54:11:80:c5:95:dc:79:6e:af:fc:5c:8d:3b:f0:
1a:06:fb:04:71:c5:d9:e6:a2:f0:a8:9f:a5:ca:74:
19:4e:b6:5d:80:64:8b:c8:2e:70:e5:15:66:1c:22:
4f:fc:d5:0d:2a:d2:97:1a:95:0b:34:c4:39:70:75:
a8:2d:a2:11:24:54:b2:e3:a3:43:10:0b:54:7f:dc:
53:f4:ff:f9:af:50:05:c7:60:cf:6c:4c:d8:33:2d:
81:96:f7:89:58:1b:49:93:f4:31:c2:d0:e8:76:b8:
0e:f9:19:58:6d:21:44:f7:a9:3a:dc:80:e3:55:c3:
93:3a:50:d0:1b:80:b9:01:d3:1e:48:da:45:18:7b:
95:6a:99:83:ea:66:ae:09:01:44:4d:f1:a3:fd:88:
c2:e6:44:d4:6d:13:05:e8:ec:14:29:b2:d6:23:7e:
7d:e8:9b:54:e2:00:5a:67:90:9e:7b:e5:b3:4d:f8:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:82:42:71:7E:93:93:DB:16:D2:28:D5:BE:4E:BE:B8:88:2E:2B
X509v3 Authority Key Identifier:
keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4b:e1:84:9d:5b:5b:37:ca:a2:23:bc:60:ab:19:c9:dc:13:
11:36:59:b8:a5:12:1f:e3:e4:48:44:c5:5f:5a:7d:d5:de:20:
ed:34:f8:4b:fd:a3:ce:5b:4d:51:ed:89:53:76:cd:d5:ce:d9:
f3:53:c3:af:c0:c0:47:e6:c4:67:70:ff:26:c8:7e:8f:d2:2c:
e6:93:65:79:ea:2f:1c:c9:32:ea:67:fb:29:32:83:70:67:e9:
b1:46:63:d0:24:17:59:95:8a:a3:55:94:37:57:48:f0:c8:be:
14:f1:34:88:2f:15:01:99:5a:e6:82:7c:93:1a:72:65:26:c1:
93:cd:f5:38:c3:0a:43:02:15:88:53:fd:c2:74:63:0a:6a:a2:
7b:d5:d5:ef:bf:57:9c:a8:eb:06:e0:69:86:80:c4:ad:2f:c5:
c6:7e:33:5c:9b:05:ba:28:08:7b:b8:e1:0d:f6:ba:00:9e:4c:
b3:6a:3c:06:8a:8f:f0:0e:00:90:bd:54:d6:ef:fc:6d:bb:78:
60:a2:35:b8:e5:48:74:c1:98:ca:03:ed:ba:9b:35:10:54:e5:
0b:0a:79:26:91:58:2b:6f:6a:f8:07:16:20:1d:48:c7:d5:bb:
d7:18:df:57:39:0a:24:83:89:de:81:e2:32:51:0d:af:87:c6:
98:68:e1:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrofytPxB7ldomX2v+BEoDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzNmMjk5ZWE5YTJkYjgyYjAwNDM1ZDRiM2QxNjBlYzQz
YzQyZDYwHhcNMjYwMzAxMjMwMDQ1WhcNMjYwMzAyMjMwMDQ1WjAzMTEwLwYDVQQD
Eyg4Y2FlODI0MjcxN2U5MzkzZGIxNmQyMjhkNWJlNGViZWI4ODgyZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2ZofElJ0pPZkbvPBybX2yQ8xS9x
rEE/5bv089rOR7FvFIq4kCD7b6b6/MNxZ/DzQM602/cOV+JEeEnkjemSn7MOCw9c
3K5wl1g2VBGAxZXceW6v/FyNO/AaBvsEccXZ5qLwqJ+lynQZTrZdgGSLyC5w5RVm
HCJP/NUNKtKXGpULNMQ5cHWoLaIRJFSy46NDEAtUf9xT9P/5r1AFx2DPbEzYMy2B
lveJWBtJk/QxwtDodrgO+RlYbSFE96k63IDjVcOTOlDQG4C5AdMeSNpFGHuVapmD
6mauCQFETfGj/YjC5kTUbRMF6OwUKbLWI3596JtU4gBaZ5Cee+WzTfh8uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyugkJxfpOT2xbSKNW+Tr64iC4rMB8GA1UdIwQY
MBaAFBYz8pnqmi24KwBDXUs9Fg7EPELWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEt
NzlhODI5MWIxNTdmLzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEtNzlhODI5MWIxNTdm
LzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUvhhJ1b
WzfKoiO8YKsZydwTETZZuKUSH+PkSETFX1p91d4g7TT4S/2jzltNUe2JU3bN1c7Z
81PDr8DAR+bEZ3D/Jsh+j9Is5pNleeovHMky6mf7KTKDcGfpsUZj0CQXWZWKo1WU
N1dI8Mi+FPE0iC8VAZla5oJ8kxpyZSbBk831OMMKQwIViFP9wnRjCmqie9XV779X
nKjrBuBphoDErS/Fxn4zXJsFuigIe7jhDfa6AJ5Ms2o8BoqP8A4AkL1U1u/8bbt4
YKI1uOVIdMGYygPtups1EFTlCwp5JpFYK29q+AcWIB1Ix9W71xjfVzkKJIOJ3oHi
MlENr4fGmGjhDQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:46 2026 by rpki-client