Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: EHidRbVcrfmbBM8vV/11s+4CtgnIkDoZ3Tfz1So0J0A=
Subject key identifier: 33:3D:D1:98:55:D5:00:FB:04:54:BC:96:5A:04:D8:CC:A3:AA:88:D9
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 019CA9EAEA1C6F896D3F6044ECD20F31F344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 1544
Signing time: Sun 01 Mar 2026 15:01:10 +0000
Manifest this update: Sun 01 Mar 2026 15:01:10 +0000
Manifest next update: Mon 02 Mar 2026 15:01:10 +0000
Files and hashes: 1: 7fDVFx_W8cXxkevRfIg2i3GdYio.roa (hash: Fsf0L/tikLEgDCmVChLeIt5Pn4gsSm28h3gpWcwkAMM=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: pwvUmZPgSiN+sH7FF0eFQ+RcXLMqtB6G/OVfFJHpEmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:ea:1c:6f:89:6d:3f:60:44:ec:d2:0f:31:f3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: Mar 1 15:01:10 2026 GMT
Not After : Mar 2 15:01:10 2026 GMT
Subject: CN=333dd19855d500fb0454bc965a04d8cca3aa88d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:26:a2:7e:57:0b:22:c4:36:34:7f:ee:9a:
20:46:61:50:d2:17:f7:1a:23:ea:3d:7a:cb:65:59:
d6:85:4d:be:8a:65:0b:44:66:20:8c:98:e0:e1:29:
6a:1a:c5:e3:13:bd:4c:61:21:d7:a3:1d:03:70:6c:
3d:d2:96:c4:15:b4:30:23:64:92:b2:65:52:bb:6f:
fb:e0:f2:22:bf:bd:da:aa:15:66:46:4d:6d:bd:f6:
12:85:c2:00:f0:a4:bc:b4:39:02:09:c2:17:5c:ed:
3a:3a:fc:ef:54:21:3e:95:86:0e:10:72:bf:db:0c:
e1:6a:70:ff:a0:5c:94:84:55:71:4a:10:71:6f:6f:
fb:b0:0c:37:9c:18:4c:0c:21:17:a3:6f:54:28:b1:
b4:5b:d9:0a:3c:e4:d3:8e:6c:ee:8a:d1:39:45:c2:
d2:ac:f5:df:3d:86:f1:d0:c2:0f:e2:7b:59:d3:e5:
6a:7d:38:1d:b4:dc:72:f6:a0:b8:ab:04:96:6a:f4:
4d:9a:db:1a:2b:e7:2c:bc:7f:6a:e0:e7:db:2c:cf:
f1:22:9f:1c:66:8e:8b:11:dc:05:7b:73:6e:7e:1d:
be:c2:f9:bb:72:4b:2e:e0:6d:d4:fb:66:98:4b:06:
c9:11:9d:1c:e4:80:67:35:64:4a:7c:a9:2c:48:7d:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3D:D1:98:55:D5:00:FB:04:54:BC:96:5A:04:D8:CC:A3:AA:88:D9
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:16:79:9b:8f:f5:4e:b0:9b:8c:96:d7:ad:c7:d0:3d:b4:eb:
92:5a:7c:a9:ea:d6:b1:ce:0c:89:e9:68:e2:85:02:6e:0a:47:
4c:30:c8:f7:96:95:1c:b3:59:e2:9d:1c:67:c6:76:4d:25:07:
bd:fc:e7:9f:79:6b:92:51:02:55:eb:97:e4:2a:ad:56:0f:e7:
18:99:20:11:83:88:ed:04:fa:bf:68:ac:92:ab:ae:7f:71:65:
d2:e8:9c:49:0b:cd:78:2c:06:08:fc:f0:7e:a8:8b:2d:f8:ad:
be:e8:3c:01:6a:2c:db:4b:2f:53:0e:a2:f0:1d:5f:05:c3:3d:
88:f0:80:5a:8e:81:d1:60:6a:fb:76:69:76:b8:60:ce:c4:80:
13:74:b5:08:51:99:72:6e:75:e0:35:77:6e:aa:c5:20:19:b9:
f1:64:1d:50:b2:12:4b:d7:eb:c2:58:1c:10:34:32:f4:cf:dd:
ca:33:5a:a4:78:b0:17:ce:6b:4e:65:40:e5:13:1f:6a:83:d2:
06:13:0e:47:88:43:85:f3:85:e8:1b:b8:89:27:4c:72:56:eb:
66:98:e5:12:49:ac:75:c8:5a:88:51:1a:89:66:77:31:df:80:
b1:a0:3a:ef:23:66:33:ca:e2:64:dc:35:34:83:fc:3a:73:94:
2b:dd:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:10 2026 by rpki-client