Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
File: FXaJHPKx2OxWwDvHqW3pWKDgADI.mft (raw, json)
Hash identifier: rKC4UHOnu4I2AcF9PTOmeeixMCVBhPO7PvxrwtPpJYw=
Subject key identifier: F2:A5:B1:94:DF:46:C8:C5:D7:79:6F:D2:5C:A5:CE:D0:5E:D1:40:29
Authority key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
Certificate issuer: /CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Certificate serial: 019CAD227153473A03EDCAAD584035980823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
Manifest number: 05F0
Signing time: Mon 02 Mar 2026 06:00:41 +0000
Manifest this update: Mon 02 Mar 2026 06:00:41 +0000
Manifest next update: Tue 03 Mar 2026 06:00:41 +0000
Files and hashes: 1: FXaJHPKx2OxWwDvHqW3pWKDgADI.crl (hash: I+hzWZJzi83uPVHZVUlp9TFQ7J4EIaTBFT87wOm3wWY=)
2: IeSw-4bcio5RXnwbEa4KykMgwOY.roa (hash: OoWXczxt8RFsumILUeDSej8qKitlw3VHsPcYq7wi388=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:71:53:47:3a:03:ed:ca:ad:58:40:35:98:08:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Validity
Not Before: Mar 2 06:00:41 2026 GMT
Not After : Mar 3 06:00:41 2026 GMT
Subject: CN=f2a5b194df46c8c5d7796fd25ca5ced05ed14029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:37:a1:88:be:44:cd:f8:45:41:6f:28:21:
97:73:ca:96:fd:6c:7f:4d:94:e9:c9:00:df:36:4a:
c4:c9:56:36:39:48:6f:30:54:ae:6d:24:7d:a8:23:
6d:cf:e6:e7:90:11:0f:a8:6c:24:cb:ea:2d:1c:24:
77:c9:29:05:9e:77:9b:c6:76:81:c2:95:37:bf:4b:
19:42:e3:88:98:77:06:a6:21:d0:bd:b4:56:46:a3:
86:e7:0a:36:2a:16:8d:5b:3a:25:dd:91:c4:44:02:
aa:b9:4c:f7:9b:20:c6:f0:52:c4:ad:5a:57:8b:a1:
41:3c:47:c9:9e:3c:ba:92:cf:6d:26:04:9b:d8:82:
7f:37:4a:e2:51:d0:52:07:d3:a6:52:9a:62:5e:3c:
7a:ae:f3:b8:44:cb:69:11:a8:a7:c9:d1:a5:8e:68:
1c:c7:a9:4b:95:04:b6:ad:2c:88:7a:b7:49:90:cc:
4a:32:cb:52:d0:17:74:1e:48:a9:a0:cc:53:d4:4e:
8c:e6:45:8a:78:2e:03:40:e6:81:d1:32:ac:b0:4c:
bd:a0:48:ca:44:26:ca:06:80:19:4c:12:ce:48:2b:
8d:fc:49:2d:3f:95:0d:fd:8d:03:54:52:74:19:1f:
d5:d8:8b:ff:44:9a:31:3c:5e:10:19:da:8c:3b:57:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A5:B1:94:DF:46:C8:C5:D7:79:6F:D2:5C:A5:CE:D0:5E:D1:40:29
X509v3 Authority Key Identifier:
keyid:15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fb:46:e9:c9:dd:e8:c5:be:36:f3:ca:44:8a:f2:d5:cd:c6:
74:85:d0:29:7b:27:c7:0e:46:48:37:07:2a:01:82:60:5a:70:
a1:c4:c7:7b:25:ec:48:3b:09:6b:9f:8e:b1:b1:3c:68:97:59:
3f:a1:88:20:e2:dd:c7:e9:e3:e7:55:15:07:b4:11:6f:11:3a:
cb:1b:f4:be:0f:b3:94:18:ff:00:40:e2:9e:c1:fe:9d:be:ad:
9b:d8:b3:67:12:4c:af:ee:de:01:3d:1b:30:8e:e1:c8:69:15:
a1:c2:c4:dc:ea:d4:28:73:52:33:df:b7:19:88:8d:c3:83:99:
9c:0e:4e:4c:e5:01:32:50:57:8f:ec:a8:a0:da:76:83:1e:be:
5d:b3:c0:60:50:ed:15:ba:69:06:8a:ef:5e:70:32:5d:6e:e9:
bd:85:0b:1e:6c:e2:87:77:8f:b2:b6:2a:7c:10:df:a3:06:c1:
75:c4:a4:a4:58:29:6d:98:0a:2f:aa:2d:19:b9:cc:30:94:cb:
75:c6:ec:c6:c2:94:33:3c:f1:2e:19:bf:b7:c5:4b:d4:f7:c9:
1c:89:f1:d3:f3:05:0a:1a:a7:cd:1e:09:89:c1:23:63:15:60:
d6:36:db:5a:55:df:73:9e:ba:87:cc:41:0c:92:22:6a:66:c7:
b0:42:e3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:14 2026 by rpki-client