Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
File: FcGBcG9hxLc3zX63j3Iw40zfwUw.mft (raw, json)
Hash identifier: SU3M3/y8xngQRY/YsZdgkafrBTKmIW1bQyBcds8Tn+Y=
Subject key identifier: 2B:93:55:1B:06:A6:B5:C0:22:DD:A6:6E:AA:FD:5E:EB:05:2D:AC:5C
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 019D9A074FA5A96FFD591FD62630AEB84F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
Manifest number: 02F0
Signing time: Fri 17 Apr 2026 06:01:03 +0000
Manifest this update: Fri 17 Apr 2026 06:01:03 +0000
Manifest next update: Sat 18 Apr 2026 06:01:03 +0000
Files and hashes: 1: 9gJCDoefYLTOALLR7m3uY4ZFTrs.roa (hash: rDMT0XfW0LmY8GbUzIJRZiwWfpYyUk7Ld0WUStlDnJo=)
2: FcGBcG9hxLc3zX63j3Iw40zfwUw.crl (hash: 8oqtFXnbQe1Vs9320boK4cuyit1m+hmweU7GnZRxdz0=)
3: JudSUCOqbrtWbahpUSi_qKz1NTU.roa (hash: bQyJrY/9C3LHftNvfMRZW3PNS7iigGqzrsnlBjeZ04o=)
4: ZqWsPERsYnrsqCSaYTYQS_tw1uY.roa (hash: ey3Sif7k3v1Kz3BRtrxCLM84dh6fPOogRHH2kMK+y6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:4f:a5:a9:6f:fd:59:1f:d6:26:30:ae:b8:4f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Apr 17 06:01:03 2026 GMT
Not After : Apr 18 06:01:03 2026 GMT
Subject: CN=2b93551b06a6b5c022dda66eaafd5eeb052dac5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:41:ac:fd:d2:04:5d:4b:da:8d:8a:dc:40:
5d:c1:02:eb:93:7a:5e:85:a4:84:cf:e4:a3:02:b9:
88:cb:a1:5a:96:3c:ab:11:f0:aa:79:5e:fb:7c:99:
76:b2:7f:ae:d6:c0:51:0e:f7:0a:66:bc:a9:58:db:
49:33:b1:3a:b9:0d:03:a1:85:85:e7:92:05:28:46:
8a:60:4d:23:e9:31:d8:7c:45:8e:a6:a7:9d:b6:5f:
8c:fd:50:01:23:5f:99:fe:db:71:3a:6f:01:0a:c1:
24:e7:c0:b7:3e:78:c0:a1:cf:b1:cd:61:45:8f:27:
7e:64:d1:87:23:f7:9c:aa:d7:72:6c:fc:bc:3f:09:
51:35:fa:00:31:b2:31:d4:68:12:6b:01:6c:de:07:
ed:28:8e:de:16:35:92:d7:db:26:51:ed:f6:1c:ef:
b3:25:b6:e1:83:3f:6d:bf:09:92:69:3b:01:11:8c:
ba:f9:df:5e:1a:3a:71:91:e7:00:86:e6:37:2f:b6:
9f:98:3b:4b:a1:15:93:99:7f:d2:f4:d6:01:71:59:
f9:5b:0d:29:a7:b1:c9:ce:a8:b8:00:bf:ad:b3:4c:
1a:b2:5b:d5:b2:91:db:41:45:a0:a4:55:a4:9a:d6:
57:65:94:a5:03:fc:aa:92:38:dd:84:68:04:e5:92:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:93:55:1B:06:A6:B5:C0:22:DD:A6:6E:AA:FD:5E:EB:05:2D:AC:5C
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ea:c4:7d:27:1d:7b:53:68:ed:3d:ba:4f:71:c4:a0:8d:f9:
72:a0:01:f8:4e:13:e1:01:85:63:79:dd:9b:e9:ff:a7:f3:65:
aa:50:21:ea:d1:64:f1:0e:88:fb:9e:88:58:c7:cc:94:82:c1:
65:ff:96:44:da:5c:f1:70:ca:b1:2e:38:d5:f3:d4:d5:0e:3d:
7a:be:ce:1a:e0:be:68:dd:c5:7b:27:9d:78:98:84:1a:16:43:
80:ca:09:eb:0b:af:61:81:54:8d:03:54:b0:d6:25:fd:ae:04:
1d:9a:d9:f0:4b:e0:3b:16:d7:08:85:21:60:35:34:cd:d1:3f:
62:89:f4:de:ff:e5:e4:f5:3e:75:e1:c7:c7:42:2e:ba:27:15:
c8:14:8d:4c:b5:eb:28:f3:90:8e:41:a9:1f:19:26:e6:b6:f2:
f3:c2:19:5c:62:4b:a7:fb:58:42:68:2f:05:fb:55:0d:c4:aa:
69:0d:f9:76:1c:d6:00:17:83:89:2c:3d:05:80:df:19:7d:43:
f5:19:29:2f:fe:9b:b7:1b:cb:81:05:2d:53:50:ad:29:c4:d9:
50:f2:cf:75:f9:a7:e0:07:ea:ee:97:9a:38:c7:27:88:b0:78:
70:03:ba:07:c6:1a:e1:66:6d:90:83:a4:89:57:b8:e6:be:64:
85:cc:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:09 2026 by rpki-client