Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier: Gu6+m36n3hrDTpq+j9+V9T0abwuzuFGgwpwh57MVv9U=
Subject key identifier: E6:9F:9E:21:47:16:5C:2B:48:A9:CC:63:51:A9:5C:E1:33:25:0E:CF
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 019CAC1016D125D271AFB48D9A480AA7977A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number: 15C9
Signing time: Mon 02 Mar 2026 01:01:01 +0000
Manifest this update: Mon 02 Mar 2026 01:01:01 +0000
Manifest next update: Tue 03 Mar 2026 01:01:01 +0000
Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: 3FWsDhKinFYssGFh2BzqGdmnPcEGNWAWelV/9rbKd3s=)
2: jfn31bWoPt5u8J8dk_jaDuYtKVY.roa (hash: KodCP7xC+csniIon7z4178+lNkYaP00De8YC+4THaAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:16:d1:25:d2:71:af:b4:8d:9a:48:0a:a7:97:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Mar 2 01:01:01 2026 GMT
Not After : Mar 3 01:01:01 2026 GMT
Subject: CN=e69f9e2147165c2b48a9cc6351a95ce133250ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:e1:fb:e6:ba:ce:09:05:d1:93:d2:18:1d:
e3:7f:a4:0d:d2:84:18:a2:6e:cd:ba:ce:11:a0:d6:
db:29:83:31:96:9e:20:fd:6e:c3:5d:ed:45:2f:3f:
13:ba:8a:07:ff:65:90:07:fd:85:39:55:f3:50:3d:
5b:85:c7:c7:98:eb:42:67:f5:8d:82:b1:3f:3e:5e:
4b:7d:33:d7:ab:7d:fc:c7:72:b3:97:83:6f:71:af:
5f:21:d9:aa:31:1e:12:26:e2:36:f5:fb:ad:65:14:
b8:33:25:76:47:df:2d:15:85:f1:46:0e:e5:2e:da:
c6:f1:a5:3b:aa:7c:51:7f:57:9d:51:ca:56:4d:74:
a6:5a:ae:d9:be:82:9a:c4:72:9b:16:33:82:93:3d:
a8:40:f0:93:d2:6f:98:97:41:48:54:75:5a:d8:f7:
76:8d:9d:31:4f:48:07:57:f7:ea:16:bd:7a:bd:d4:
a8:1b:47:8a:bd:e6:76:8a:e2:c1:3f:26:3e:01:b3:
3b:ab:6f:6d:75:ad:57:79:eb:7a:6e:27:5f:3c:d5:
15:5f:da:c6:ec:6e:1a:7c:d3:c3:93:ba:91:e1:14:
65:8c:37:ef:58:3b:14:55:57:8d:b0:da:33:11:e4:
7f:86:16:90:d2:af:83:7a:9a:eb:2c:83:25:35:24:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9F:9E:21:47:16:5C:2B:48:A9:CC:63:51:A9:5C:E1:33:25:0E:CF
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:af:d3:a1:cb:62:ea:2b:32:95:d6:9d:74:f8:13:5d:9e:bf:
5b:aa:c0:c3:f5:33:32:15:27:a4:5b:c3:83:fe:e8:72:b4:0d:
11:17:5a:2f:e3:c6:16:0d:1c:29:26:9b:14:4e:f9:49:fa:59:
e5:23:67:6e:2c:98:22:58:a3:f0:bc:c5:03:a8:78:bd:73:72:
b7:6b:81:45:fd:cd:0b:64:d9:d4:80:df:79:1f:89:0b:68:94:
fe:35:bc:c3:19:8f:35:8f:98:ac:ac:c0:1d:82:63:44:72:06:
1d:41:3e:36:1a:e9:51:96:2a:24:83:c9:da:90:55:0a:a1:d0:
23:aa:71:65:f7:93:dc:c0:aa:3a:8b:be:9a:35:59:43:2d:c0:
5a:7a:f2:2d:08:90:cb:ee:2f:11:e2:23:cf:5f:26:0d:9e:66:
0e:e2:46:77:e4:f1:3b:70:54:dc:cc:1a:ae:3f:73:26:05:88:
fd:d2:11:6f:b6:d4:c1:0e:42:91:c9:af:6f:3f:ff:4a:49:51:
3d:0d:c6:b2:68:66:ea:92:73:b7:7f:03:21:34:55:14:03:5d:
3f:a5:46:5b:50:fa:8e:0d:9b:44:d3:56:b6:da:78:85:f4:7b:
d0:49:bc:94:e9:c4:f2:c3:97:46:81:0a:92:97:eb:c1:3c:c2:
91:65:87:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:39 2026 by rpki-client