Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
File: FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json)
Hash identifier: /EJPVD2rUYcUy6uQ2smCdVTr64zIoUrES+cWNVg4aVo=
Subject key identifier: 06:55:EC:EA:50:D8:3D:F0:9B:34:39:B9:F6:3E:0A:F6:47:26:B0:F3
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Certificate issuer: /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial: 019CAAC62C05E23BE56558A31C9AED6CF387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:00:39 +0000
Manifest this update: Sun 01 Mar 2026 19:00:39 +0000
Manifest next update: Mon 02 Mar 2026 19:00:39 +0000
Files and hashes: 1: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: 6JxOlQjikwxsefnXsTY+VTPuGRbiUXr7Z+De7d951qM=)
2: _zfrfxE4KY3Sz2qKZ9YX8YUP3Gc.roa (hash: WlQR46TcsvE8o+HLG0ehANtk2L9KYlzfKkIP64trfQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2c:05:e2:3b:e5:65:58:a3:1c:9a:ed:6c:f3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Validity
Not Before: Mar 1 19:00:39 2026 GMT
Not After : Mar 2 19:00:39 2026 GMT
Subject: CN=0655ecea50d83df09b3439b9f63e0af64726b0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:b6:62:46:e4:2e:19:21:aa:9f:ab:2d:d0:
da:52:92:da:15:6e:39:87:13:73:63:3c:96:61:c2:
d5:9b:f2:ca:61:18:d4:d9:49:c5:b4:e7:d7:11:a3:
11:46:df:c6:1e:db:6a:87:d5:92:92:4b:16:e0:f9:
c3:e3:f3:01:30:85:31:81:c0:75:bb:8f:d6:22:e0:
74:04:59:26:0c:69:4c:0e:b7:af:2a:20:ab:b6:f6:
8f:54:be:d5:5b:dd:e7:91:6a:d7:a8:e3:a1:02:e3:
82:ff:ff:b4:70:51:f5:0e:8e:b8:0d:0e:49:c6:97:
a1:2e:ac:ff:a4:03:21:6b:b3:cd:80:e3:68:d1:79:
6a:13:40:2e:a5:21:6d:82:08:83:7f:86:43:8e:b1:
2e:ed:5a:b1:8d:92:88:0a:0e:3c:b1:a4:fd:ea:54:
ee:20:2a:c5:8f:e6:4f:ca:20:e3:17:5f:dc:97:9f:
ea:a9:02:fb:7f:51:54:ee:a8:8e:69:15:72:1b:2f:
90:9c:6a:cf:ec:e6:bd:12:65:b4:5c:3a:36:d3:82:
3e:81:9b:0a:74:0f:3d:dd:74:ef:a1:f3:c1:74:c0:
a9:3e:b1:9c:e9:30:9d:ba:d5:b3:a3:09:04:e2:00:
1f:28:98:af:07:da:e0:0f:93:c1:87:1b:8c:68:da:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:55:EC:EA:50:D8:3D:F0:9B:34:39:B9:F6:3E:0A:F6:47:26:B0:F3
X509v3 Authority Key Identifier:
keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:e0:a0:2d:95:04:05:a5:cf:c3:14:a4:57:3d:1e:0e:97:6d:
fc:4e:4e:2b:4e:65:c1:5d:79:29:70:c3:cf:04:67:44:3f:cb:
1e:10:0e:1c:07:50:40:a1:f7:35:45:1a:93:92:09:b8:e7:e5:
27:18:b7:6e:7c:6b:68:40:20:cc:49:34:e9:c9:d0:2d:d5:b4:
27:9c:fa:66:96:7d:9b:21:6c:ab:8f:5f:b1:72:69:48:26:19:
3a:39:36:93:33:7e:89:a3:2b:98:37:91:78:93:45:92:c9:9a:
70:fe:b6:d0:6f:e5:58:38:00:9c:d5:0a:09:c0:25:1c:3b:ed:
b1:a6:8e:5f:2a:59:e6:40:d9:8f:f0:a4:c9:c3:f0:22:99:91:
20:5a:57:ae:45:82:d8:d8:b4:26:b6:0a:e6:51:6f:3a:22:5e:
cc:71:94:2c:40:3b:64:e5:d9:17:f5:30:70:a5:33:67:f3:2c:
2b:31:a6:3f:90:ae:62:56:2d:e8:50:52:92:16:b3:bc:ad:8c:
4c:6d:da:13:4a:44:d2:51:c0:67:4e:bd:ce:1b:1f:96:01:37:
01:14:67:15:58:06:61:e7:89:ea:89:56:86:1e:0f:78:49:25:
a3:14:0d:cc:8a:1b:cd:97:73:48:96:1f:1f:3d:44:dd:6c:95:
52:a0:5a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:33 2026 by rpki-client