Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File: FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier: +KsLxpX1vJccD7FB9ifHT2/kMCw7XbCSZC11zlQC9IU=
Subject key identifier: 01:85:FF:0B:09:19:71:E3:C2:43:9D:C9:12:51:A5:F2:19:DB:26:A1
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial: 019CAC101257D766339855E6ADFB8FCEE2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number: 0B52
Signing time: Mon 02 Mar 2026 01:01:00 +0000
Manifest this update: Mon 02 Mar 2026 01:01:00 +0000
Manifest next update: Tue 03 Mar 2026 01:01:00 +0000
Files and hashes: 1: 20k_piblwEYsVd_YiDJCaz9Ey54.roa (hash: 4RIWua1sQFhhYH4ddyZN8LNm60NZVa4EtH71m0R8zfU=)
2: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: QBiXmm0RrDwSzFYxheRUe0TTGAm/z46GE51zIlYThVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:12:57:d7:66:33:98:55:e6:ad:fb:8f:ce:e2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Validity
Not Before: Mar 2 01:01:00 2026 GMT
Not After : Mar 3 01:01:00 2026 GMT
Subject: CN=0185ff0b091971e3c2439dc91251a5f219db26a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:e8:11:f2:4f:42:15:1d:00:b7:f0:b2:7b:
34:3a:17:fb:3e:34:a9:a8:40:69:6c:2a:62:11:ed:
58:9e:65:82:f0:c6:4a:78:07:c1:46:01:11:20:9d:
5b:48:65:13:78:8c:7f:4a:25:53:7a:61:14:ab:d8:
eb:0b:52:d7:20:ea:7c:7d:5a:3c:15:de:f5:d2:30:
03:b6:19:fb:c3:70:d0:16:c6:bd:31:33:80:14:ad:
3a:b4:8f:7e:14:73:10:e9:98:b8:97:bd:08:ab:df:
61:99:4f:1d:79:6b:cc:62:30:6f:2b:1b:1f:d0:fb:
38:5b:ba:37:c9:e7:f4:7a:a5:9a:29:c6:6e:ed:4c:
aa:86:75:24:7d:8c:67:fa:46:4c:1d:27:76:00:d5:
9f:aa:67:1b:87:d8:b6:4c:59:8a:7f:65:ac:4c:d2:
29:ab:e8:fb:45:c5:6f:06:f1:47:6a:93:e2:e8:f7:
f9:9a:e8:70:e7:89:42:42:ea:e6:5d:48:af:2d:47:
fc:26:cc:4c:0a:68:01:99:e1:05:ec:58:c4:e7:7e:
1a:65:d2:b1:45:e0:c8:13:a2:d5:ce:ce:2e:79:29:
92:69:9f:fd:bb:57:5b:a6:77:6b:f1:d0:7a:55:3a:
13:2e:2a:a8:48:0a:50:30:60:89:7e:3f:08:12:33:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:85:FF:0B:09:19:71:E3:C2:43:9D:C9:12:51:A5:F2:19:DB:26:A1
X509v3 Authority Key Identifier:
keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5c:76:19:af:01:7d:3a:dd:dc:4c:0b:3a:95:d3:71:13:8a:
7e:2a:c6:67:30:66:bd:9c:a6:8b:22:40:1b:56:3b:83:f2:f2:
d7:4e:0d:ce:93:dc:82:3f:df:a0:8b:dc:1d:7b:e6:2a:c7:ae:
40:49:bd:ea:80:df:f2:17:ca:d0:eb:3a:06:fb:74:11:63:a2:
a2:9d:3d:d0:07:b0:f1:e8:a2:e4:ae:d5:ea:84:8f:c1:6d:1a:
6f:cc:42:ec:54:03:e2:ef:08:86:7c:aa:94:c0:b3:d2:0e:df:
cb:9b:f1:41:a4:a5:87:0f:1a:80:e3:26:98:86:0c:34:01:8e:
d5:ac:76:e3:18:42:ab:21:e9:72:53:8f:50:ab:9b:2a:66:f4:
58:02:54:a5:b4:0a:c5:51:a5:ff:db:d7:ec:8a:92:fe:fb:a0:
d2:71:48:c6:d9:ee:9a:67:37:18:46:a7:48:60:32:24:ed:6e:
0d:a6:e8:c4:6a:ea:6d:4e:63:b7:2d:3d:3b:66:14:5e:e5:a6:
cc:c7:0b:d3:73:b0:ca:c1:d6:7c:57:a5:64:2c:18:7c:b4:8b:
33:27:73:c5:de:46:1d:2e:15:78:d1:0b:77:fb:a0:22:97:5a:
7d:6a:72:56:1f:80:08:cd:b9:31:ce:14:11:86:b1:56:29:ec:
0e:81:85:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:44 2026 by rpki-client