Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier: AxpijKEOjEAxHGAEjGVbLRFtPIdRN9ZUjao8rydEk1s=
Subject key identifier: A3:1C:BF:03:9F:A8:57:95:3D:BF:35:50:CC:5E:0B:26:13:10:58:0B
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 019CAA58C3CD2BBB2F4400F91C59F1EA5569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number: 08A2
Signing time: Sun 01 Mar 2026 17:01:09 +0000
Manifest this update: Sun 01 Mar 2026 17:01:09 +0000
Manifest next update: Mon 02 Mar 2026 17:01:09 +0000
Files and hashes: 1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: RWy+y+ay88Ep1/8BPNjzg2ns+qzypBe5TzawhqLmJZc=)
2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=)
3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=)
4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=)
5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=)
6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=)
7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c3:cd:2b:bb:2f:44:00:f9:1c:59:f1:ea:55:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Mar 1 17:01:09 2026 GMT
Not After : Mar 2 17:01:09 2026 GMT
Subject: CN=a31cbf039fa857953dbf3550cc5e0b261310580b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:c2:2e:69:32:de:a2:13:56:47:67:43:08:
c5:97:03:6b:b8:f5:4a:c6:e9:b0:59:ee:d8:97:25:
e4:30:37:44:76:fc:e4:97:65:4f:47:5e:53:67:f0:
20:19:92:6d:15:0a:d1:4a:c4:88:0b:80:17:a9:23:
45:90:0b:69:74:ce:6e:99:08:a5:fc:1a:5a:ab:30:
f2:97:65:9b:2e:1f:64:9b:38:a8:78:06:37:bb:ea:
e1:5d:ed:2f:13:ef:96:d5:3b:d7:b5:4e:a0:3b:21:
20:26:fc:4c:b0:d9:8d:cd:35:98:71:98:41:e2:c9:
e0:50:1f:bb:7a:ca:01:17:ff:40:ee:86:60:ae:ef:
a2:e1:66:5a:03:6b:eb:e4:54:49:6a:0e:73:f5:e1:
ca:3c:d6:d9:cd:33:c4:76:77:e9:54:5b:0c:7b:36:
cc:c7:ee:6e:9f:31:eb:aa:43:9f:a6:65:36:99:92:
2d:e5:63:92:08:f1:b7:49:22:2c:d6:64:7f:20:69:
ce:3f:fb:40:33:85:3b:8c:5c:06:d9:f6:4f:77:ac:
0e:3f:12:e3:f5:3b:b1:93:66:07:d4:fe:1a:e7:3c:
56:4e:c8:ce:cf:2b:2b:ab:ff:3a:77:7d:30:98:26:
1c:26:b9:ec:80:82:c9:7a:3f:99:85:dd:60:c3:c9:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1C:BF:03:9F:A8:57:95:3D:BF:35:50:CC:5E:0B:26:13:10:58:0B
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:78:1f:34:bb:03:ba:8f:c5:79:dd:b8:73:67:f2:54:97:af:
dd:c9:d5:ad:f7:70:3c:8b:c7:af:78:23:8c:fb:89:33:3b:6e:
f4:ca:b7:b6:c6:84:2e:0e:79:42:c6:0c:02:20:82:79:0c:43:
06:72:d0:3a:1e:53:e0:cc:8b:97:65:c1:bc:39:da:7f:70:62:
cc:6b:f1:3b:03:0f:f5:0e:33:6d:1f:08:c6:5e:d6:12:6e:98:
b2:69:23:f0:08:9e:5d:a6:44:f7:67:74:fe:dc:90:1d:1b:d6:
45:f7:43:eb:4c:a7:47:41:b9:47:16:13:de:11:75:57:24:48:
94:7c:57:6e:94:ad:81:04:56:ca:1b:dc:cd:dc:50:8d:2e:86:
c0:8a:23:e0:21:9d:3e:f1:47:f4:49:1c:62:55:34:7a:8d:57:
63:c3:42:6a:59:61:ca:9a:d9:be:06:5c:5b:88:06:30:4b:e3:
42:76:4a:2d:9e:fa:73:4b:37:58:3d:3a:32:6f:02:59:d0:09:
09:73:48:0b:23:36:fd:ea:7e:43:3b:12:d6:c0:ca:f6:22:f9:
64:60:ae:ae:cf:a5:f4:0e:aa:64:08:5e:0d:31:e9:10:d7:81:
ab:3a:de:b0:e2:65:57:2a:d1:16:71:6f:8a:f3:0b:6a:d1:1f:
97:44:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:05 2026 by rpki-client