Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier: QuUJzU4Pfk58Bw+pNAMyUR53E5Wh4ciPGjTzd1L/1qA=
Subject key identifier: 1B:74:DE:A6:07:31:8D:DC:EB:C4:4E:8F:80:29:E8:55:F6:0D:D7:A2
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial: 019CA9EABB51006260951E481E9074BC12B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number: 0CD4
Signing time: Sun 01 Mar 2026 15:00:58 +0000
Manifest this update: Sun 01 Mar 2026 15:00:58 +0000
Manifest next update: Mon 02 Mar 2026 15:00:58 +0000
Files and hashes: 1: DGGg1cwcyckOEj5piFasZLtUpCM.roa (hash: b8NWlcDq3cqXueexrQLS4YXKUPoPYtHevhupgWyi2lA=)
2: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: HynuI6wmSU554Wo5qoWOaW8k9Eq0MZYkIflqkIOYwtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:bb:51:00:62:60:95:1e:48:1e:90:74:bc:12:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
Validity
Not Before: Mar 1 15:00:58 2026 GMT
Not After : Mar 2 15:00:58 2026 GMT
Subject: CN=1b74dea607318ddcebc44e8f8029e855f60dd7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:82:bd:76:8e:a2:3f:42:48:e9:8b:9c:8d:d4:
76:21:72:1d:b0:fe:02:32:81:25:8a:58:e4:93:77:
ad:3b:ef:e1:79:63:7e:12:b7:73:56:c7:d4:55:c3:
ad:31:49:e6:60:34:ba:c1:e9:d9:6f:4d:5e:44:df:
a9:b5:d9:85:4b:ad:db:14:56:4e:b2:5a:ea:51:20:
67:73:2f:8d:1f:c0:b6:bc:87:90:b9:b4:0d:92:68:
85:62:bf:c1:91:b6:8f:69:46:db:86:a9:bb:b4:5b:
95:1a:50:46:6e:bc:14:c1:f7:b1:79:e3:fd:8d:7f:
dc:bf:cd:3a:88:e2:ee:d4:35:af:81:73:5e:55:e3:
5d:c6:74:24:21:fd:1c:56:00:0e:2a:f0:e2:e1:4c:
a7:ee:53:45:9a:3e:c3:3a:47:b6:14:7a:d2:ab:7d:
1e:a7:5b:07:1e:38:fa:1c:97:27:9d:06:a4:08:ab:
91:f2:94:b2:53:a4:29:c2:3e:02:96:f5:49:6d:79:
7b:9b:83:d5:78:c4:59:b0:67:7f:99:d5:47:6f:72:
24:44:a1:cf:d9:74:4b:b5:92:70:12:56:1a:c9:db:
bc:0d:30:bd:e4:6c:3d:ca:c1:56:4f:39:d6:cd:b9:
1a:67:a2:f7:cb:5b:80:29:86:80:be:3d:cf:c7:a6:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:74:DE:A6:07:31:8D:DC:EB:C4:4E:8F:80:29:E8:55:F6:0D:D7:A2
X509v3 Authority Key Identifier:
keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3c:4d:ec:dc:0a:5c:3b:eb:44:c5:19:b0:e8:7e:77:8c:72:
69:89:c7:32:fa:f9:d8:ca:0b:ea:3a:0c:dd:25:b9:e0:ca:29:
63:d9:40:25:26:a0:3e:83:5b:72:26:02:8b:8f:c6:d4:4a:d4:
e9:6b:d0:58:ff:16:6c:9f:d9:49:ab:a3:58:cc:f2:70:82:d0:
d6:5e:be:9c:24:87:e3:a7:2e:f6:88:49:c4:2a:70:c9:0e:d4:
d0:a5:89:45:da:88:6f:b1:2c:3e:72:d2:8f:bb:7a:c6:8d:25:
34:cd:05:8c:c5:b6:2d:d6:fb:5a:c9:b0:e8:01:42:37:e3:43:
10:8b:d3:99:92:b2:70:a7:26:04:22:2c:b1:dd:78:a3:99:90:
73:93:48:d6:8d:af:4c:cf:ba:65:f2:09:66:c0:96:c9:94:7a:
63:2a:b1:d8:0c:ca:99:73:c4:35:8c:f5:f2:4e:81:16:fe:af:
b1:55:71:1b:d1:84:d3:ef:59:4d:a4:6d:9c:c6:2e:bf:38:99:
b4:36:7d:d3:46:8e:51:31:05:ae:ce:ad:b0:51:b6:32:06:67:
c5:a7:76:e1:ad:7a:21:68:07:74:ed:bf:46:e8:01:af:8c:10:
17:95:41:c8:31:fb:36:52:ed:25:6c:86:fc:df:bc:f4:3e:fe:
34:97:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:10 2026 by rpki-client