Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: y/7tdWhPtBRi9fqmanl+oDamoS/snrJxpAgrhkB57BE=
Subject key identifier: B3:41:4F:15:82:81:82:D9:B2:61:21:EF:09:17:29:EB:17:17:9A:7F
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 019CAA581E3842411AFA5D2DC00453CAB9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 130A
Signing time: Sun 01 Mar 2026 17:00:27 +0000
Manifest this update: Sun 01 Mar 2026 17:00:27 +0000
Manifest next update: Mon 02 Mar 2026 17:00:27 +0000
Files and hashes: 1: 0tgi-bedT7M90yonGJNHWcEtkks.roa (hash: jx45i7P1C49PseKbfYGkTcUnQdu8nI1iX163v3oChsI=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: YlfxDoO0S36UISPTwZhxwh7RrPkeukdxD26oC4qQFj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:1e:38:42:41:1a:fa:5d:2d:c0:04:53:ca:b9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Mar 1 17:00:27 2026 GMT
Not After : Mar 2 17:00:27 2026 GMT
Subject: CN=b3414f15828182d9b26121ef091729eb17179a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:b8:6d:3c:c3:77:e6:0c:6d:48:0b:2b:5d:
4c:37:a8:fd:8c:17:8f:dc:42:6f:22:3d:28:3a:89:
07:d5:2f:56:2b:d4:b7:40:d0:3c:35:97:0e:6d:8f:
53:1a:5e:48:c1:18:52:07:54:2d:c8:81:8f:33:a8:
fd:5b:5d:3e:b1:75:52:51:cb:cc:46:e5:9d:8d:b7:
e5:ed:ca:b7:a4:3a:95:7c:ae:ef:bb:43:1d:96:cf:
10:43:d3:09:48:ba:2c:76:e7:b1:33:90:0e:33:bf:
eb:fc:e2:1c:a3:a0:7b:fa:a4:43:92:37:f8:f7:e5:
ce:fb:ab:d6:7c:e8:bf:d3:36:2e:53:45:77:58:96:
73:ef:a3:33:d3:7d:cc:a1:60:c4:78:1d:f9:42:cb:
ab:25:ac:53:fa:0f:0d:c2:35:fd:8f:06:1f:61:aa:
74:d8:71:b9:a7:4c:84:d8:51:5c:73:c3:2b:28:bb:
21:e7:e9:48:82:bb:37:e2:f8:fa:0d:7e:a5:b0:eb:
c1:7d:d9:14:01:f7:3e:8f:c3:a9:d8:f4:96:e9:1e:
49:6c:9a:29:e0:6c:a6:11:93:49:34:9a:96:bc:9c:
f1:b4:e9:19:73:79:e0:32:50:5a:e7:6d:0a:10:19:
bf:82:c5:98:af:35:98:eb:e7:8c:05:4f:92:fc:e6:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:4F:15:82:81:82:D9:B2:61:21:EF:09:17:29:EB:17:17:9A:7F
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4f:04:9a:8f:57:de:bc:6f:32:34:dd:f0:bc:50:0a:38:a9:
60:26:c6:37:73:dc:ce:51:c2:36:79:4f:85:36:c8:96:1c:71:
f9:a8:86:c1:98:c5:97:dc:2e:95:b0:d2:35:36:66:d1:8a:4e:
86:c2:be:3f:61:cb:a8:09:c2:d1:60:d8:5c:b1:dd:eb:07:aa:
34:66:19:fe:42:ed:47:db:84:ae:90:1d:85:11:c7:ff:e9:26:
ca:e2:4f:31:f4:9e:52:79:63:04:f6:d9:85:41:48:39:bc:60:
d4:37:88:a3:e3:e9:bf:68:ba:ca:b5:eb:aa:c0:e5:f2:46:e7:
87:41:b3:6a:ac:02:8f:ce:3c:7c:42:35:5c:36:d5:03:17:c6:
7c:b6:9e:9f:31:86:fd:7c:23:52:f9:dd:77:51:55:d3:e8:c5:
a7:aa:7e:f8:5e:60:a1:75:8d:47:e8:b5:25:4f:a9:57:db:6a:
51:a4:ea:e4:2e:aa:d0:30:11:3a:19:45:ce:dd:e9:2c:15:35:
11:9a:d1:e2:76:a9:24:47:c7:41:0a:79:f0:56:34:b3:01:b0:
57:ed:5a:27:14:f0:b3:22:aa:2c:8f:a2:8c:c3:58:09:49:bc:
24:63:11:2f:e9:e5:d1:2c:49:2f:7d:27:79:d0:13:fb:f2:2c:
54:f4:f3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:47 2026 by rpki-client