Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: bB+1696rn+aZtv1eRFzUmpthkDrQSgMImk0v7VyCvxc=
Subject key identifier: 53:84:AF:E4:1F:81:E5:CF:A1:01:C8:8F:B8:34:9E:70:D3:03:B7:A5
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 019CAA2196C80FACD1F14A7D65B5033881A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 171C
Signing time: Sun 01 Mar 2026 16:00:53 +0000
Manifest this update: Sun 01 Mar 2026 16:00:53 +0000
Manifest next update: Mon 02 Mar 2026 16:00:53 +0000
Files and hashes: 1: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: w3EcEOFZY2pelkK08N4im6mfvpdTVTNMzEQnaSjsKw0=)
2: xd3jG3HbjtG0MuzuTRaYxtTyNcw.roa (hash: zkFlgvRz6cw1Fnc2wE2R8kAE+e+wpIfkz9Qvftstx7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:96:c8:0f:ac:d1:f1:4a:7d:65:b5:03:38:81:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Mar 1 16:00:53 2026 GMT
Not After : Mar 2 16:00:53 2026 GMT
Subject: CN=5384afe41f81e5cfa101c88fb8349e70d303b7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:0b:e9:e7:7b:b8:05:f0:46:a2:a0:01:1a:
9e:ae:25:21:09:b0:36:98:39:87:c1:16:c4:aa:13:
a7:43:c0:df:61:c5:30:0f:b6:4a:95:f5:6d:26:a1:
c9:57:af:df:a9:5f:bd:a4:ce:ae:c2:ee:dd:69:d5:
1c:72:2f:56:cc:74:9a:0f:f7:d9:78:27:87:1c:41:
7b:69:c2:a8:c9:7e:d4:a2:8a:a2:42:a2:ea:d7:99:
51:ab:54:8b:1d:33:56:fa:9b:ec:45:22:ee:71:06:
20:ae:28:3f:94:61:52:1a:80:6b:40:06:fb:b7:e5:
e5:5d:6e:26:cb:1f:50:ec:99:2d:2e:88:0a:68:34:
42:1f:2f:62:e8:1e:b9:67:34:cc:ee:ff:7f:19:1b:
ec:4d:e9:1e:47:c2:4d:d3:a4:ec:fc:74:a6:2a:91:
9f:60:0e:bb:0b:ea:64:36:0e:a7:8f:5e:90:8d:cd:
53:da:6c:98:1c:fa:eb:11:f8:5a:ba:c0:88:e0:1a:
b4:82:78:48:46:7e:97:8a:cb:45:0a:0a:62:2c:2e:
7f:c1:23:55:03:62:62:a0:59:f5:99:aa:2b:72:b2:
a6:6e:5a:31:5a:87:14:d0:b9:65:2c:65:dc:d3:39:
19:b4:97:d6:7d:38:f6:ca:b0:d7:e3:43:e5:87:b9:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:84:AF:E4:1F:81:E5:CF:A1:01:C8:8F:B8:34:9E:70:D3:03:B7:A5
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2e:6b:0d:40:28:df:92:91:73:59:51:d2:c4:ef:dc:1e:97:
df:c3:6d:ce:65:31:6c:11:f3:3d:45:90:00:be:1e:b2:8a:ba:
3f:ac:54:64:76:4c:66:54:d9:2c:df:01:6b:98:c9:8e:f8:7e:
de:47:df:f3:9a:1e:f6:d5:77:32:e3:72:d0:68:42:8a:2b:21:
bf:a2:0e:27:33:a3:b7:74:d9:71:12:cd:fc:82:c7:ff:62:9a:
32:14:96:73:3e:9f:21:76:d3:0e:ff:85:25:e3:e2:dc:12:0e:
5f:d7:1e:21:a1:b5:53:65:02:a0:9a:93:7d:f2:74:08:be:ed:
22:88:51:2e:97:9d:02:b8:a5:6f:47:3a:c9:a4:a4:fe:74:14:
66:ef:bd:38:f6:9b:d5:c5:43:b1:a7:c7:4a:9a:ec:bb:56:0c:
26:e4:5a:71:2a:0b:6e:88:d5:26:53:aa:9a:6f:cd:27:55:61:
ed:af:eb:9e:4a:dc:c0:2f:f4:29:6b:1f:39:51:8f:c0:c6:34:
03:98:1f:dc:a4:2b:88:7a:b7:2f:a5:82:74:ad:4c:41:39:7f:
62:aa:47:35:51:49:1a:9f:3d:55:f0:3c:c8:fb:14:b1:0e:b9:
2b:6f:59:f4:7f:2b:4b:57:3e:58:9e:89:a5:0f:aa:b2:09:63:
43:bd:73:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIZbID6zR8Up9ZbUDOIGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDljMjRkYWUzZWVmZmNiZWZhMzdhNjg4NjY0YWM5MzMw
MGVmNTgwHhcNMjYwMzAxMTYwMDUzWhcNMjYwMzAyMTYwMDUzWjAzMTEwLwYDVQQD
Eyg1Mzg0YWZlNDFmODFlNWNmYTEwMWM4OGZiODM0OWU3MGQzMDNiN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv10L6ed7uAXwRqKgARqeriUhCbA2
mDmHwRbEqhOnQ8DfYcUwD7ZKlfVtJqHJV6/fqV+9pM6uwu7dadUcci9WzHSaD/fZ
eCeHHEF7acKoyX7UooqiQqLq15lRq1SLHTNW+pvsRSLucQYgrig/lGFSGoBrQAb7
t+XlXW4myx9Q7JktLogKaDRCHy9i6B65ZzTM7v9/GRvsTekeR8JN06Ts/HSmKpGf
YA67C+pkNg6nj16Qjc1T2myYHPrrEfhausCI4Bq0gnhIRn6XistFCgpiLC5/wSNV
A2JioFn1maorcrKmbloxWocU0LllLGXc0zkZtJfWfTj2yrDX40Plh7ku4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOEr+QfgeXPoQHIj7g0nnDTA7elMB8GA1UdIwQY
MBaAFBYJwk2uPu/8vvo3pohmSskzAO9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjIt
YmY0Yjc1ZTIwMGE3LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjItYmY0Yjc1ZTIwMGE3
LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEi5rDUAo
35KRc1lR0sTv3B6X38NtzmUxbBHzPUWQAL4esoq6P6xUZHZMZlTZLN8Ba5jJjvh+
3kff85oe9tV3MuNy0GhCiishv6IOJzOjt3TZcRLN/ILH/2KaMhSWcz6fIXbTDv+F
JePi3BIOX9ceIaG1U2UCoJqTffJ0CL7tIohRLpedArilb0c6yaSk/nQUZu+9OPab
1cVDsafHSprsu1YMJuRacSoLbojVJlOqmm/NJ1Vh7a/rnkrcwC/0KWsfOVGPwMY0
A5gf3KQriHq3L6WCdK1MQTl/YqpHNVFJGp89VfA8yPsUsQ65K29Z9H8rS1c+WJ6J
pQ+qsgljQ71zYQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:28 2026 by rpki-client