Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: MCX1WDcG+MHzVc0sGoBzTEew+FhJ/4zKhejq7VaZe9Q=
Subject key identifier: 94:24:D8:27:6A:18:D7:A2:B5:CD:1B:9F:88:DD:53:73:FD:3E:38:B4
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 019CAA58C4B2D93B466116031C41C5110D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:10 +0000
Manifest this update: Sun 01 Mar 2026 17:01:10 +0000
Manifest next update: Mon 02 Mar 2026 17:01:10 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: vbI0rDJT36uGcwWXcMbmeEvkvgzaayN9jhBWNbIFdos=)
2: lJvVKRd6xYXkH3w4sqIr9ELeD6o.roa (hash: misofyoI9rt+yQi6weZU/F8kwAPhAeP1MXdYFSxncAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c4:b2:d9:3b:46:61:16:03:1c:41:c5:11:0d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Mar 1 17:01:10 2026 GMT
Not After : Mar 2 17:01:10 2026 GMT
Subject: CN=9424d8276a18d7a2b5cd1b9f88dd5373fd3e38b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:58:72:43:c6:53:d5:b9:da:50:af:05:76:
3b:1a:9c:39:e9:9b:ac:9e:91:39:f5:ad:73:72:d8:
3a:a4:27:77:80:65:b0:f7:5b:77:84:ac:5b:f9:c3:
97:b8:7d:fe:5d:23:43:94:bd:0a:41:ad:95:2d:91:
9c:d0:78:d3:60:28:de:e2:ea:dc:70:10:3f:c9:68:
87:ad:e4:09:f5:ca:30:bb:0e:2a:6a:0f:74:26:ab:
66:10:92:4a:b6:1e:29:68:68:c4:98:02:ae:e6:57:
7e:42:b4:37:6c:d1:fe:2a:92:c7:45:19:12:0e:83:
97:c6:14:38:43:28:e0:68:0d:e4:d8:0e:57:bb:99:
a7:b1:86:c3:be:db:99:c7:54:c4:62:ba:13:6d:a3:
89:c7:5d:90:44:cf:57:07:2a:1b:da:02:69:ee:69:
ef:d5:5a:09:94:f1:e4:26:44:84:32:82:5c:4e:8e:
32:42:32:e9:be:3b:1e:0e:65:ba:5f:f8:13:e7:18:
a6:f1:21:3e:42:c0:97:6f:c9:95:93:f1:5a:b3:7f:
88:2d:50:77:52:e2:76:60:d0:30:ac:fe:6c:dd:de:
38:21:dd:f6:0c:e1:8f:8d:23:5a:7a:db:52:0f:78:
8e:23:b8:45:e9:3a:a6:53:17:94:27:51:fa:d4:e6:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:24:D8:27:6A:18:D7:A2:B5:CD:1B:9F:88:DD:53:73:FD:3E:38:B4
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:53:7d:4c:53:53:ac:4a:c3:d2:8d:fc:5c:c4:6b:fe:e1:bb:
09:73:d9:4c:0a:c0:42:e6:a7:c1:c7:c8:bc:87:11:1a:f7:39:
0f:1d:10:f0:68:52:52:5f:72:8d:fd:23:b2:63:5b:bb:12:ed:
ef:bc:2a:ec:06:3f:d8:24:95:55:55:69:a8:0c:23:cf:a1:e7:
fe:eb:ab:7a:12:8b:98:28:0f:07:24:7a:2e:52:21:40:36:f0:
61:15:08:80:f0:61:49:5a:f0:54:e2:32:c1:00:a2:1a:f8:b5:
aa:e2:ec:db:18:d8:05:25:85:73:e2:49:a9:0c:9d:e2:b5:54:
d6:54:4c:11:0e:ca:b8:56:bd:e4:76:cc:19:ee:86:37:ec:e1:
a5:cb:27:be:92:65:77:de:3b:e9:16:e5:cb:3b:27:72:4c:b2:
4d:48:bc:18:24:ce:5e:ef:b3:9d:ef:77:6f:d9:bc:be:34:3f:
ed:fd:b3:b0:d0:ab:8b:d6:0c:a2:ad:25:f0:ab:eb:b7:aa:56:
71:01:89:cc:81:47:cd:c8:65:09:e9:47:31:c7:5b:2c:29:5d:
5f:a2:5f:6c:f8:34:ec:80:48:81:da:f9:fc:ab:4c:24:47:14:
51:47:9d:54:e0:0b:2c:ba:4b:66:cf:53:e6:7a:c3:02:6a:6a:
ab:0c:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:04 2026 by rpki-client