Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: t2DKd9ViHpGSwFluCSCLcEp8Yi6XsXLZ4abzYwl5SBk=
Subject key identifier: 10:44:68:EB:33:AA:53:50:EB:B1:95:1D:65:E4:B8:71:BF:14:F1:45
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 019CAC46FC6C2492DDE238A0B987824D50DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 0787
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: vJJCiAVfKNlslPTsvzfULiRAwjiCaGZXDhBqgIIFoAI=)
2: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (hash: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fc:6c:24:92:dd:e2:38:a0:b9:87:82:4d:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=104468eb33aa5350ebb1951d65e4b871bf14f145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:4a:61:cb:4c:3f:a4:d9:2d:fb:99:61:e5:
52:91:08:dc:aa:3f:17:8c:99:05:6a:2b:5d:5a:b7:
c4:12:4a:14:33:e8:a3:49:62:d7:4d:24:6c:01:49:
8a:d9:e6:18:7b:b0:45:ef:74:3c:ff:05:da:0e:6f:
f9:8a:84:ef:f1:10:05:33:0e:b5:38:2e:e2:8d:d0:
e8:95:c6:cf:47:f5:93:06:c4:91:01:de:bc:4e:f9:
61:cd:e0:e0:51:7d:30:28:bd:c7:7a:22:a4:2c:bc:
17:11:34:24:d4:76:42:38:81:57:1a:31:1a:49:2c:
28:4e:d2:d6:73:df:d0:f7:25:0b:71:00:79:96:33:
ff:2c:03:9e:33:06:6e:86:fd:89:cb:77:f1:bd:41:
15:f0:59:52:bc:a6:c5:1b:cd:45:95:9e:d1:10:27:
48:fc:9c:4d:04:cc:3d:76:b6:05:5d:3f:07:ed:85:
ca:d1:c9:e7:3f:0b:29:a7:d9:1a:f9:df:0a:44:f8:
bd:10:1f:d1:3c:21:ac:b0:4b:6e:3d:97:e0:7e:79:
d6:ad:ae:28:34:90:a3:ec:53:d8:92:20:dc:07:9c:
75:e6:50:d2:0a:03:38:c5:7b:31:4b:78:cb:7a:fa:
ca:30:20:11:af:38:e0:b1:a2:69:7f:f7:6b:64:86:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:44:68:EB:33:AA:53:50:EB:B1:95:1D:65:E4:B8:71:BF:14:F1:45
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:f8:8f:ec:e2:05:bd:37:2e:3c:64:15:2f:67:0e:09:a8:
48:ee:52:e7:0c:25:3b:ff:f6:84:30:84:26:d5:f7:67:21:eb:
f9:b4:b3:58:cf:06:ca:d1:d3:2b:4b:ec:15:e8:7b:0b:df:76:
f3:38:27:a7:9f:c9:c2:e1:6d:c5:f2:ac:09:07:54:74:ae:b3:
61:bd:0f:69:2a:50:5b:31:9a:a1:d5:2c:e1:6a:53:b2:d3:fa:
53:eb:85:50:75:09:31:36:ee:5e:07:c6:e1:01:43:c0:b7:b0:
eb:bf:c5:29:63:62:ae:0d:a9:f2:d5:7f:72:df:6d:24:21:cd:
ea:a4:b1:5a:0e:87:68:2a:2a:59:ff:cf:e7:f9:c6:32:32:e7:
00:9c:e9:2a:21:d3:e3:8b:81:4d:cb:28:17:fa:8e:74:05:7d:
fd:2d:f0:6a:53:e2:74:33:d4:46:92:67:ac:7c:1a:48:b0:fd:
16:a4:a0:3f:dc:51:d4:3c:67:ba:fa:4d:5c:d6:d7:61:c3:da:
48:b9:33:62:e2:ec:f7:68:5e:35:c6:33:64:8f:d6:89:0a:42:
b5:bf:49:a2:b7:f1:39:f1:0c:a5:de:20:61:ff:55:b8:26:da:
d1:94:39:ee:21:97:ad:31:17:5a:c6:6a:12:79:67:fd:e0:c2:
b1:d6:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:41 2026 by rpki-client