Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier: 4fFfcFB8eSVSrfEGW2+tPc0XtAgw9uKHCOwfiOnp/p0=
Subject key identifier: 69:B9:B6:05:10:32:8B:2C:7E:B4:4D:D5:99:93:A7:8E:59:1B:55:8F
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 019CAA587765A97B96130E7F4FA40284AB89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:00:50 +0000
Manifest this update: Sun 01 Mar 2026 17:00:50 +0000
Manifest next update: Mon 02 Mar 2026 17:00:50 +0000
Files and hashes: 1: 2Yztgl1JDQiHLbJTugznfEzk5Qc.roa (hash: jSITK3S0lez0+624vvcXLxi93dFSIlVEaD28cVt/Qe0=)
2: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: 8GgfBJvdrga7+UKzUd3PvybRI6cYGk7Yv/th66Tnri0=)
3: c0s191T9M-PjiRKEaUw3Sv51WuI.roa (hash: HMekVBw+h+CR9Vb7bu+DywUuyLHvbFqFC7IFjxkwPss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:77:65:a9:7b:96:13:0e:7f:4f:a4:02:84:ab:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: Mar 1 17:00:50 2026 GMT
Not After : Mar 2 17:00:50 2026 GMT
Subject: CN=69b9b60510328b2c7eb44dd59993a78e591b558f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:60:1c:6a:99:c2:27:e9:55:a4:3f:c1:6b:
c6:ea:e5:da:55:8c:a5:88:0b:b6:d0:79:9a:92:02:
f7:82:6f:17:1f:3c:e0:53:09:a5:89:13:11:39:8e:
e9:50:cc:5f:d3:09:b0:92:0e:e1:5e:6b:4a:b3:2c:
04:31:f5:b6:8c:fa:66:d2:c2:d0:ad:db:ba:4b:d0:
8b:db:54:b6:79:41:4a:3b:68:1e:2e:18:4a:c0:aa:
58:ea:bf:ef:8c:f4:f3:54:93:ef:67:57:42:13:cd:
ec:77:52:6f:68:25:76:4a:42:32:77:f6:0f:17:1c:
01:fd:5a:5d:a9:54:69:b1:ef:1e:d0:13:98:a6:12:
4f:81:dd:09:40:3e:77:7d:79:a9:19:3a:29:bb:a7:
9d:82:90:a9:30:f8:cb:b1:8c:2c:78:f7:1b:ad:ee:
a5:68:20:3e:52:2f:a2:9a:28:12:1c:45:81:30:e1:
cd:ad:5d:9d:2b:a1:8a:22:b3:d1:3d:8b:e4:b5:ec:
b4:b8:65:da:70:2c:84:27:18:e3:b1:cd:68:df:37:
e2:7e:9c:91:b2:37:f5:d5:84:0b:78:a3:a0:d1:d2:
81:ec:7c:f4:03:51:bf:4e:a4:06:70:5b:73:38:78:
c0:19:5f:c0:a3:f6:a0:18:6d:07:fd:b2:c9:20:a1:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B9:B6:05:10:32:8B:2C:7E:B4:4D:D5:99:93:A7:8E:59:1B:55:8F
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ac:9f:56:e0:17:d5:4b:68:cb:cf:ef:f3:4e:f4:86:ef:b2:
43:0d:d3:8a:94:1b:66:02:a8:7a:63:cb:d2:5a:93:4b:4b:98:
4d:93:b2:12:b8:62:fa:04:9b:9e:90:b8:1b:2d:16:60:04:17:
76:a3:34:c5:09:3d:0c:c5:6f:67:6f:b3:78:e1:07:49:fd:f8:
de:ae:b2:b0:71:05:b0:f7:04:be:a2:b7:87:af:da:8a:e0:2a:
56:43:f1:93:48:61:2d:15:b4:53:ad:71:df:21:66:79:8d:ef:
48:79:12:ee:c6:ed:6f:62:d9:3b:f4:8e:be:06:33:4f:22:6f:
71:64:26:3f:ba:87:b9:02:81:c8:d8:ad:7e:17:8f:c5:81:34:
02:32:61:0e:4a:c4:8e:1f:fd:9d:2a:f6:5a:be:68:c0:a8:0d:
31:5a:2d:25:ac:7a:33:e5:66:3c:71:61:2e:e6:5b:c3:a6:45:
75:31:5d:d6:c8:a9:83:45:26:f1:25:f8:68:2f:38:53:02:73:
9d:49:63:24:de:ca:00:af:9b:3f:83:29:ba:fb:2a:53:95:1c:
8d:85:bb:48:e9:f9:f9:35:a8:34:bb:5a:67:b3:86:83:00:89:
72:c0:90:b6:bb:02:b6:4e:6c:de:91:4e:1c:0b:3f:74:4d:3e:
7d:bf:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:12 2026 by rpki-client