Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
File: FgRPZYu8kicHhfe7ByrJNolfSTM.mft (raw, json)
Hash identifier: rLL1Em3yoHvzeJ+h3SFR2leV7xQCYmXi0TjD5Sy54Uc=
Subject key identifier: 5C:AB:81:2E:01:D7:7B:E2:44:93:03:92:29:A9:06:20:B3:F0:EE:B7
Authority key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
Certificate issuer: /CN=16044f658bbc92270785f7bb072ac936895f4933
Certificate serial: 01A0CA4795C155E850AE13358A65A85FC51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
Manifest number: 02FD
Signing time: Tue 22 Sep 2026 18:01:23 +0000
Manifest this update: Tue 22 Sep 2026 18:01:23 +0000
Manifest next update: Wed 23 Sep 2026 18:01:23 +0000
Files and hashes: 1: FgRPZYu8kicHhfe7ByrJNolfSTM.crl (hash: 30eifyxMcYKICHkVo1HctaHK5sCfUs4u0Hpd8z927hM=)
2: WatKg_0MoVqhZNrvrktjemd-kkU.roa (hash: HB6mZ1x55io1eH3g2s4HymshoqNX8HC4t8plzzNViRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:95:c1:55:e8:50:ae:13:35:8a:65:a8:5f:c5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16044f658bbc92270785f7bb072ac936895f4933
Validity
Not Before: Sep 22 18:01:23 2026 GMT
Not After : Sep 23 18:01:23 2026 GMT
Subject: CN=5cab812e01d77be24493039229a90620b3f0eeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:ad:84:c8:3d:7b:73:dd:a0:e8:e6:be:e2:
2e:1b:38:6e:32:28:7f:e9:e5:04:96:9f:0c:33:49:
14:68:18:fb:5d:50:66:90:48:6c:61:79:8c:8e:44:
61:17:b0:35:a2:6e:c9:a6:21:cd:ed:52:89:1b:39:
5f:c9:eb:70:80:65:12:26:38:09:47:4c:52:0a:71:
82:c5:d7:10:98:52:b0:b1:bf:fc:85:ba:99:5d:9e:
6f:cf:18:34:c3:fd:3b:da:c2:8b:1f:87:3a:a3:4c:
20:42:ec:dc:92:6d:9d:c8:c0:8b:50:66:1b:ea:2c:
1d:d9:b6:66:12:86:d3:f6:c2:46:1a:c2:22:41:4d:
47:b0:32:15:e2:11:16:d7:96:70:19:1a:1b:14:03:
81:55:1f:77:c0:14:9f:84:36:da:25:e1:c9:de:1c:
c0:db:88:19:8f:58:91:42:6a:22:6c:60:3e:fc:e9:
6f:6b:c6:6c:99:7d:76:5a:50:b0:cb:b6:7a:b9:97:
4d:d3:42:a1:ef:90:7f:ae:06:5f:bb:41:f9:ac:c5:
a1:5c:6a:c3:42:d9:d7:f2:4b:d7:35:3a:47:d1:c0:
5c:6d:82:08:a7:e7:24:89:96:05:86:59:20:d0:d3:
89:24:15:db:4c:5d:5e:b3:dc:e3:a9:51:58:54:55:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AB:81:2E:01:D7:7B:E2:44:93:03:92:29:A9:06:20:B3:F0:EE:B7
X509v3 Authority Key Identifier:
keyid:16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:71:42:ed:f5:99:f0:cb:76:88:f8:8b:4f:27:b5:67:f5:9d:
9f:04:13:1d:49:b6:05:3a:65:36:cc:72:8e:cb:c9:35:e7:3f:
95:f2:eb:ab:38:eb:64:a6:98:80:11:39:eb:8d:66:db:27:01:
2c:fd:92:3a:42:91:fe:b8:cf:fb:ff:57:26:6d:92:5b:f2:b6:
81:92:a0:57:03:74:c7:87:dd:ea:64:5f:66:53:4c:d0:6d:d4:
70:2a:92:60:1b:7e:7e:88:54:98:85:89:c1:10:cc:d3:24:19:
53:d5:71:b0:5b:a8:81:55:21:9d:fc:9f:5f:d3:7f:79:5a:a6:
a5:36:8a:ae:1b:22:72:08:98:c7:bd:8b:f4:a4:d7:2e:02:de:
28:2b:29:fe:33:bb:fa:b2:d1:ef:20:29:a4:6f:d2:2a:94:9a:
a9:9f:d1:6b:3e:bf:6d:b9:48:e9:d1:a8:7a:c3:81:31:7d:0a:
ea:31:35:dc:ec:8a:83:c4:8a:d3:41:b7:4f:a3:1c:a3:6b:82:
ec:2d:51:84:81:5e:62:9f:37:04:3b:54:8c:ef:7e:5f:d3:22:
61:c0:ac:01:0c:eb:79:2e:a0:d3:fc:70:e5:36:17:44:f8:1c:
a7:0a:11:a4:41:3a:e2:59:0c:6c:13:5b:c4:ab:26:1e:37:29:
e3:a5:78:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:44:22 2026 by rpki-client