Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
File: FgRPZYu8kicHhfe7ByrJNolfSTM.mft (raw, json)
Hash identifier: hEw78N92nTAkm9PZVyvwf7z2AmGu9i3uToaZmsBgvZY=
Subject key identifier: CE:56:A7:A6:5F:82:60:65:BE:63:6C:FC:FE:E1:41:90:D2:58:C7:41
Authority key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
Certificate issuer: /CN=16044f658bbc92270785f7bb072ac936895f4933
Certificate serial: 019CADC85755BD68679960E2106FEFD9ED0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
Manifest number: DC
Signing time: Mon 02 Mar 2026 09:01:53 +0000
Manifest this update: Mon 02 Mar 2026 09:01:53 +0000
Manifest next update: Tue 03 Mar 2026 09:01:53 +0000
Files and hashes: 1: FgRPZYu8kicHhfe7ByrJNolfSTM.crl (hash: n6cQ8DzHH40wzMRkwPZPdlQ7lJpPHst2aO55M+2OXaU=)
2: WatKg_0MoVqhZNrvrktjemd-kkU.roa (hash: HB6mZ1x55io1eH3g2s4HymshoqNX8HC4t8plzzNViRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:57:55:bd:68:67:99:60:e2:10:6f:ef:d9:ed:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16044f658bbc92270785f7bb072ac936895f4933
Validity
Not Before: Mar 2 09:01:53 2026 GMT
Not After : Mar 3 09:01:53 2026 GMT
Subject: CN=ce56a7a65f826065be636cfcfee14190d258c741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:a2:15:cf:a2:c7:75:8a:dc:bf:61:ae:1d:
96:c0:0c:3b:6c:a8:ad:04:55:86:78:e4:47:b8:41:
08:e8:5d:da:93:52:47:80:f6:17:97:5d:5d:e7:fe:
bc:ec:c7:2b:40:42:c3:83:bb:ac:46:1a:5e:b6:b5:
c8:2a:e0:95:e7:25:31:32:f6:63:44:47:c1:a2:6a:
fe:fd:66:a0:5f:21:fb:a5:30:5e:05:82:92:85:e3:
fd:58:c5:64:f5:3b:c5:98:ce:bb:98:c8:44:52:bf:
ef:45:f1:92:3e:c7:9a:62:49:41:f7:b1:eb:91:9b:
81:32:f8:fc:31:e0:5a:10:60:50:f3:ab:b8:ca:f8:
d2:fe:a7:d1:59:92:dc:bd:36:10:8d:15:24:d0:cc:
26:c0:32:d7:a6:a2:8e:0f:75:9b:78:e1:2a:ae:69:
aa:db:7a:7c:8e:fe:9e:bd:fe:99:06:37:fc:09:38:
81:9f:32:e5:48:88:2f:d9:65:b6:75:77:96:ff:86:
83:7e:10:c0:c0:3c:a3:cb:b1:97:7d:de:f0:5b:24:
b5:bb:93:87:ab:fd:a8:b8:54:5c:45:f1:93:d3:46:
e5:c3:2b:a1:0a:0b:16:c2:10:f7:d1:8e:57:b0:8b:
62:5c:5f:23:32:e9:5f:34:b9:6d:1d:a9:27:75:dc:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:A7:A6:5F:82:60:65:BE:63:6C:FC:FE:E1:41:90:D2:58:C7:41
X509v3 Authority Key Identifier:
keyid:16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:89:c0:30:41:77:a7:5a:f8:aa:95:60:1b:91:16:31:e7:69:
d6:9c:eb:9b:99:33:78:b8:d9:08:6f:dd:b9:db:26:e6:1f:bb:
d8:4a:4c:62:90:02:03:7f:15:31:e1:b4:d2:9f:b3:b7:e0:7b:
59:18:24:0e:ea:df:9a:10:f3:b8:2c:aa:a5:11:3c:62:c5:52:
db:fc:6e:27:61:77:f8:b3:46:33:27:1e:fd:38:df:d1:e7:1f:
41:3d:b5:0c:a6:5f:9e:b3:90:4b:97:aa:8a:9b:b4:da:e3:1e:
70:ee:b6:e9:35:c3:06:bd:88:2c:bc:c8:80:4f:0d:30:d6:a1:
cb:06:e0:2c:da:41:e5:d3:ce:d1:97:10:74:87:73:d3:07:df:
71:11:dc:d5:a4:19:9b:fd:75:ca:cc:03:9a:57:11:cc:8f:8f:
14:ed:be:b0:0c:ef:8f:e1:cc:0a:df:26:39:73:21:de:00:43:
1e:e1:78:9b:02:c5:01:1c:5f:8c:65:ae:f2:2e:d1:d8:69:21:
1b:4f:4d:ee:b1:1c:43:7f:79:14:1e:cc:cf:ff:c0:c2:97:0b:
b3:bf:50:9e:d1:5b:dc:ea:6c:43:5c:a8:b3:a5:c4:cb:78:06:
1e:60:1b:48:c3:cc:ed:88:77:11:42:2d:b6:4e:bc:4f:f9:a6:
ae:00:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:45 2026 by rpki-client