Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
File: FlHT3cat1IO3YawEdiaVM_5-pxc.mft (raw, json)
Hash identifier: 8C0xKiqUev6VClVpM1l81WlViZZaRZtAmVY6cEVpQ+o=
Subject key identifier: D9:3A:28:AE:20:38:79:24:AE:A1:41:2E:CE:1F:7C:6F:01:C9:E9:C8
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 019CABD8FA76A7AF9FE806B6D7DD34173A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:00:49 +0000
Manifest this update: Mon 02 Mar 2026 00:00:49 +0000
Manifest next update: Tue 03 Mar 2026 00:00:49 +0000
Files and hashes: 1: 1f_aG-ctoD3E7upCiJrl7HGPpko.roa (hash: t33Wovg3LWM5UJmGDCcfRoHBuBqPD2D3QhvlJCm3TB0=)
2: FlHT3cat1IO3YawEdiaVM_5-pxc.crl (hash: 6Isl0KMF41KbkVnHNg16fLAHPZH1fn2qxECdiFyDscs=)
3: NBgt-w0ecCwSNfHgFan2VnU8Bb8.roa (hash: MuDw28QHd2YmWk1AzWbjYRfycusdazTzk9Qj4qg6w3A=)
4: mqCiksvtv7NEcDhF_Ulx4UnWl9s.roa (hash: EqUlRGoT47VGpqC0rJ9BPLdc8PyfYMLLVcRJlo1cGOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fa:76:a7:af:9f:e8:06:b6:d7:dd:34:17:3a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Mar 2 00:00:49 2026 GMT
Not After : Mar 3 00:00:49 2026 GMT
Subject: CN=d93a28ae20387924aea1412ece1f7c6f01c9e9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:c1:cc:ed:7f:43:86:df:80:bb:11:f4:b6:
c6:11:58:b9:24:5d:ef:18:22:ad:47:c0:25:67:bc:
3b:be:22:b9:52:20:b4:21:cb:d2:48:7b:6a:6a:67:
90:f5:d0:4d:11:8b:ea:74:11:77:ae:4a:65:a2:29:
8c:89:4a:4f:65:3a:a4:6f:ab:61:d3:61:39:d6:ef:
ba:f4:24:de:53:c7:59:3b:7e:1b:ad:3d:dc:df:f7:
e0:ea:98:59:dc:7b:99:5f:84:e2:31:e2:e5:be:4a:
27:4e:99:1d:10:fd:ef:a6:ef:ce:a9:29:ce:1e:d7:
3a:0c:80:05:71:ff:dd:66:26:8a:0a:63:ad:4d:9e:
48:f6:b4:70:58:e7:c9:93:8d:3b:58:82:fc:72:e9:
af:33:65:a0:9c:81:80:76:1b:e8:a5:eb:10:db:0b:
7a:a6:91:65:66:bf:e2:d9:89:fd:61:17:4a:75:41:
4a:21:1e:20:f9:6f:73:4a:44:88:7d:88:23:08:1f:
e1:3b:3d:33:a4:85:4c:54:b2:9a:db:7b:46:f6:8b:
14:9c:b0:22:0c:35:f0:db:e4:8f:64:9c:33:4e:56:
dd:ea:fb:d7:74:fd:d5:6d:ed:de:94:25:a5:48:4c:
76:97:78:f1:c4:1b:bb:ed:e1:2d:a1:d8:5e:a0:b8:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3A:28:AE:20:38:79:24:AE:A1:41:2E:CE:1F:7C:6F:01:C9:E9:C8
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8e:2f:ad:61:54:5c:41:74:fa:94:49:b2:65:34:2c:2c:8d:
c1:4b:88:94:d5:58:db:bd:e1:5f:84:e6:d7:52:d6:bc:86:b8:
68:33:0e:e2:56:c5:39:32:69:7d:7a:43:7c:90:a8:9f:dd:1f:
02:38:c2:45:e3:19:db:ad:d1:26:34:11:ea:36:9d:4f:fe:6e:
45:a5:3d:d8:00:e2:b9:87:a5:d0:07:57:6c:2f:e4:ee:ed:8c:
fd:ff:9f:5b:5b:4c:12:7c:f6:df:b6:d9:e7:d9:5b:a1:7b:bb:
e4:e9:05:3e:d8:47:9a:04:c1:44:23:be:b7:ff:f2:e6:c4:36:
48:14:e0:1e:ed:6b:20:a7:86:cc:f5:de:58:52:94:4c:5f:e0:
0f:9a:90:a7:99:b1:61:9e:89:b1:43:87:6f:69:45:10:b4:78:
9c:6a:83:1c:bc:58:69:32:ac:8e:9b:2e:f7:1a:7f:f2:93:fa:
1c:2c:79:07:c9:08:2d:86:8b:3c:88:80:d3:16:d2:70:6d:26:
83:53:64:37:56:f2:5a:cd:95:be:e2:8f:2e:f8:5a:98:e8:43:
0e:a4:56:1b:2d:99:bf:1a:21:a3:da:ac:de:b6:d5:a4:d5:82:
0d:53:4d:26:ed:1a:69:d1:e5:dd:9a:8c:46:e4:69:6d:6a:77:
ca:66:0f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:00 2026 by rpki-client