Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
File: FpNzegFGnJUBHWlzklZZFgRdOiA.mft (raw, json)
Hash identifier: OQfG97s8PC0owp1DtUhmHEJkG13Rs4acmqf2r911eH4=
Subject key identifier: 3A:A4:B3:32:0E:45:20:3D:10:45:86:F7:8A:C7:A5:F1:98:B1:88:94
Authority key identifier: 16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
Certificate issuer: /CN=1693737a01469c95011d697392565916045d3a20
Certificate serial: 019CAED9D7B1777D7E6F6050247A7EC62759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
Manifest number: 052E
Signing time: Mon 02 Mar 2026 14:00:37 +0000
Manifest this update: Mon 02 Mar 2026 14:00:37 +0000
Manifest next update: Tue 03 Mar 2026 14:00:37 +0000
Files and hashes: 1: FpNzegFGnJUBHWlzklZZFgRdOiA.crl (hash: 49BZk04sHYFF4Bq++dD6aUPEB8vhzIbhV2rR31u50tE=)
2: r49ZEDE6WWxNrXEhESIxvZobJt4.roa (hash: DK7S0gOLstB9fTfPHhimalpV0TB0R2sQM6XVh6ZJuu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:d7:b1:77:7d:7e:6f:60:50:24:7a:7e:c6:27:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1693737a01469c95011d697392565916045d3a20
Validity
Not Before: Mar 2 14:00:37 2026 GMT
Not After : Mar 3 14:00:37 2026 GMT
Subject: CN=3aa4b3320e45203d104586f78ac7a5f198b18894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:48:85:db:f3:d7:c8:bc:76:61:f5:62:ff:
65:bf:ef:9b:36:c8:25:0b:f6:fc:68:7b:cd:e2:02:
5d:43:82:52:a9:68:17:69:20:5c:63:89:70:d9:e7:
67:02:bd:d2:e7:e3:e8:bc:8c:6a:99:91:0a:03:b2:
f8:05:27:75:2e:f5:01:48:48:e3:9a:c4:10:cf:b3:
18:10:a6:d8:21:8c:20:92:a9:0b:17:4b:11:43:89:
38:80:a1:7a:79:5f:38:3e:6d:7b:e5:9b:15:9b:d2:
c8:77:5e:05:ba:7e:a2:70:ca:4f:83:e5:aa:b5:db:
d5:cd:e0:ff:cf:ed:ea:4f:11:65:02:ea:19:32:42:
90:fc:8b:7f:18:1a:c1:ff:08:4a:c0:4f:e7:8d:4d:
7b:49:d4:15:9e:46:a1:72:1a:34:81:70:c0:6e:5a:
8a:84:32:d5:1d:2a:7d:e7:05:01:b6:ef:9d:0f:6a:
df:ef:1b:44:9a:c1:63:4b:47:d7:b0:92:ae:19:e1:
0f:38:79:76:60:32:05:97:0b:80:69:13:39:99:ff:
ba:3e:76:35:be:06:86:c8:60:26:fe:26:27:2a:1c:
ab:3c:07:b1:0a:92:5e:72:6d:a6:79:d6:7e:b7:c7:
00:69:ee:14:19:24:cb:35:7d:3e:cd:8c:80:43:10:
61:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:B3:32:0E:45:20:3D:10:45:86:F7:8A:C7:A5:F1:98:B1:88:94
X509v3 Authority Key Identifier:
keyid:16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c8:b2:6b:b2:ab:b1:2d:a0:30:d7:d8:37:8b:b1:af:69:41:
70:c9:b2:44:87:05:60:2b:36:1c:21:cd:97:53:76:18:ab:70:
de:0f:f8:8f:26:cd:d0:18:69:ac:55:06:bf:c3:0a:2b:e8:a5:
c8:ed:61:b5:5b:e4:f5:79:a3:18:27:37:05:c7:dc:b5:22:11:
8a:4b:95:ec:f3:22:01:a7:b6:13:f5:0e:cb:52:2d:6d:59:1a:
ee:b6:3b:65:e3:f8:75:3c:5b:15:33:f0:8c:9d:46:92:bc:26:
17:f6:ca:e6:8c:56:38:79:5f:44:26:ff:b0:0b:1a:a6:91:3b:
3f:3b:82:47:62:e2:b5:ff:f2:91:66:b9:d8:c9:59:32:9c:ee:
95:20:ea:02:5c:0c:2f:fb:e9:9a:0f:6f:c7:ba:35:4b:1a:e1:
b9:92:b8:5a:7c:02:67:13:f4:34:5f:08:5b:ff:28:6e:3d:ed:
40:8c:af:63:11:14:3b:92:83:cc:ac:da:1f:75:ca:10:bd:bf:
20:51:a9:f1:57:5b:28:ea:dd:2e:2d:0f:2e:7c:ee:5b:ea:26:
ae:fb:9f:fe:22:07:ea:35:37:94:87:21:24:16:09:87:ab:4b:
a8:fc:6b:6d:83:7b:66:53:b8:fd:7d:df:8d:a4:0c:b0:a4:80:
97:af:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:48 2026 by rpki-client