Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier: Ba+yvjo/8gmIs3FRqkTgUMD/MO9n2QCh7lZ14kEcrio=
Subject key identifier: 04:E0:CF:D7:24:8E:D4:43:03:87:E7:0D:5F:66:3A:EC:5F:DF:F2:5A
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial: 019CABD9E9A31C8100D6D07D1D825510BE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:50 +0000
Manifest this update: Mon 02 Mar 2026 00:01:50 +0000
Manifest next update: Tue 03 Mar 2026 00:01:50 +0000
Files and hashes: 1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: 5WcIdbn1NAXgUKsrk54y9Eov4wKf0e2R6CLCUkgJPiU=)
2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e9:a3:1c:81:00:d6:d0:7d:1d:82:55:10:be:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
Validity
Not Before: Mar 2 00:01:50 2026 GMT
Not After : Mar 3 00:01:50 2026 GMT
Subject: CN=04e0cfd7248ed4430387e70d5f663aec5fdff25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:33:b0:23:8f:72:d6:11:66:44:22:f8:58:
0f:e5:79:c9:c3:b3:6b:b4:3c:2a:fd:80:07:32:36:
72:95:c6:29:94:0c:3c:ab:01:93:32:fa:8d:f7:78:
bd:a5:d2:5b:5c:5d:ed:28:44:b3:be:07:2e:38:82:
a4:ec:f1:b5:d3:36:c0:26:ae:c0:96:84:a1:52:aa:
bc:37:b0:50:f9:27:b6:8a:16:48:2c:d0:6f:85:90:
72:5f:33:90:f5:10:09:43:9b:70:20:d4:46:f5:59:
fd:e2:43:ee:66:27:fe:54:89:ef:79:c4:a7:d7:e1:
fa:89:e1:8d:e4:75:05:d8:d6:70:98:a3:7d:cd:d9:
e0:f8:78:6f:60:fc:18:92:ee:bb:ec:40:cd:bc:a5:
43:0a:0a:ad:8c:5a:99:78:77:22:80:7b:20:3a:d0:
2d:88:99:61:11:ec:c7:de:bd:27:55:68:8d:db:07:
1d:97:b0:81:a2:61:13:6d:cc:e0:64:d2:21:bc:7c:
90:81:5d:4a:64:4e:4b:16:27:d8:38:1f:19:ea:66:
c1:e6:41:01:04:b8:07:d6:ba:18:0d:b4:27:1e:a4:
90:61:31:2e:6b:98:f8:8d:7b:0b:3f:22:5f:1c:e8:
36:e8:da:1a:f4:2f:7b:44:9c:63:f4:79:4d:6f:8a:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E0:CF:D7:24:8E:D4:43:03:87:E7:0D:5F:66:3A:EC:5F:DF:F2:5A
X509v3 Authority Key Identifier:
keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:00:2e:f6:88:3f:37:36:52:8e:67:b0:55:e5:94:b6:75:9c:
04:f8:e4:9f:07:61:48:52:41:03:b4:36:ac:58:67:8b:ae:8f:
ea:f7:4e:61:b0:d0:e5:12:5d:50:c8:bb:31:d0:f4:e2:ff:48:
0c:ea:f5:f2:52:78:e5:ea:37:41:88:b1:03:f6:b6:89:b4:ed:
0f:7e:7c:06:80:90:02:dc:16:4e:eb:fd:d8:5e:84:9a:58:0b:
48:b9:15:d9:cf:27:76:6e:7c:d6:0c:3e:55:b7:d6:cc:19:9c:
e6:0c:2c:15:86:ee:16:58:51:c8:77:82:52:96:18:8a:a5:ad:
7a:a3:48:ad:d6:00:63:e9:79:ce:9d:31:93:f4:e6:0d:de:f5:
b1:17:48:3a:39:06:53:37:d5:df:39:d3:9a:01:c1:2d:22:16:
59:59:86:62:0b:d5:df:5f:56:c1:1f:f6:32:49:c9:a3:45:99:
2e:7d:31:81:37:50:95:2c:72:6a:16:f2:ff:4c:11:70:e2:9f:
3d:54:2e:b7:d2:88:a0:a0:65:7e:68:da:48:b9:6d:65:c3:3c:
47:d1:3f:35:26:1c:b2:f9:a3:77:80:f4:c9:6f:c3:57:05:64:
56:38:d9:57:99:c6:40:9d:06:b2:1e:6a:e3:38:ab:36:05:83:
bd:a2:c7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:43 2026 by rpki-client