Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
File: fFkLczxW4U66xp97RNS8lU6TcOM.mft (raw, json)
Hash identifier: 64uitti3vm4rzNuiGiR5CSYvR8kPuZqdha0BdDomyZY=
Subject key identifier: 04:E5:DC:EE:29:E2:52:56:D1:85:2E:D1:00:6F:D9:81:9D:96:B3:3E
Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Certificate serial: 019CAE35CA468836DA6D2070F4B2C2B16058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
Manifest number: 151D
Signing time: Mon 02 Mar 2026 11:01:26 +0000
Manifest this update: Mon 02 Mar 2026 11:01:26 +0000
Manifest next update: Tue 03 Mar 2026 11:01:26 +0000
Files and hashes: 1: D4LM_-yMapw5el8niCLWD3O15zs.roa (hash: fm1csnGJtCUdbxvyMsvPSvwlp32QsYfLZeDz4aX3VyA=)
2: fFkLczxW4U66xp97RNS8lU6TcOM.crl (hash: LWAU+qfcz4fLE/HOmw35OTKkO4x3yUWKStq+p/QM+0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ca:46:88:36:da:6d:20:70:f4:b2:c2:b1:60:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Validity
Not Before: Mar 2 11:01:26 2026 GMT
Not After : Mar 3 11:01:26 2026 GMT
Subject: CN=04e5dcee29e25256d1852ed1006fd9819d96b33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:5c:79:b4:d4:5b:5f:ad:e1:56:c1:c2:34:
62:a8:9e:53:73:64:7a:ca:14:c6:fc:86:d3:42:8f:
cc:8a:6b:26:d9:c1:ce:9b:e8:41:cf:f2:11:d4:93:
c7:a9:78:3f:d1:7a:12:42:6e:8b:1c:1d:42:df:9b:
59:f6:59:13:5c:52:0e:34:f8:37:f0:2b:2e:e3:05:
8d:4d:76:44:9b:2b:88:5b:81:a8:c3:f0:18:51:f2:
0e:72:2f:87:31:aa:1d:22:6f:93:25:7e:89:56:8d:
2c:ff:89:3a:0b:28:92:75:2e:08:57:35:bc:19:71:
1d:e7:a2:87:f4:97:05:40:ea:2c:dd:53:f0:97:74:
fd:72:97:01:95:ac:d6:be:66:62:a3:6e:95:38:15:
99:04:df:51:3a:99:3b:72:4b:0b:3f:9e:ae:45:57:
c8:f1:9d:59:cc:c9:21:63:a3:f7:76:41:e2:9f:8a:
71:e6:f1:1d:9e:73:d4:17:fe:37:41:0d:6d:ea:9d:
0e:c1:91:75:3b:f5:c0:a1:8a:92:cc:eb:b4:97:57:
19:8a:c3:cb:c0:b0:dd:d4:dc:6f:19:d0:25:87:e8:
67:f9:59:a4:5a:4b:bc:5b:60:73:62:d9:0b:ab:f7:
f9:f0:df:c6:09:62:ae:5d:4a:54:5a:f6:c9:87:b3:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E5:DC:EE:29:E2:52:56:D1:85:2E:D1:00:6F:D9:81:9D:96:B3:3E
X509v3 Authority Key Identifier:
keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e3:34:8f:7d:c4:d1:de:d3:92:ed:18:8b:d5:6c:90:b5:39:
d2:13:06:2c:5e:c1:cb:7d:84:f4:a9:53:43:94:87:a3:6a:5d:
19:43:18:f4:c7:b6:39:3b:81:3f:98:00:56:8c:19:cd:4f:45:
76:f2:f1:46:61:a3:6a:25:5d:3c:ff:fb:76:4c:3e:73:41:f9:
7d:1d:c1:0d:dd:40:84:0b:94:bf:df:32:fa:3d:cc:3c:95:83:
b8:25:2a:51:68:00:aa:76:c5:b5:d2:65:e9:b2:ee:39:aa:6a:
fb:fa:bf:15:97:c9:bc:06:ba:d3:0f:c8:9b:1e:4e:73:bf:91:
e3:83:ae:bf:9a:f7:24:e1:b9:39:47:5c:1d:8e:ea:92:3d:5e:
26:39:ef:99:7f:6f:52:11:9a:9b:c8:4c:55:ae:88:ea:f2:bc:
b1:c1:ae:ad:c0:2f:51:6f:19:45:71:34:a7:fd:dc:a9:c1:82:
55:7b:c7:d9:a0:8f:18:80:7b:a6:58:44:69:fb:e8:de:92:67:
f8:b1:30:77:d1:58:ca:b2:7d:47:7c:cd:c9:b5:54:01:b8:a2:
4d:a4:15:c2:7c:1e:dd:ea:66:84:81:43:a4:96:88:60:84:10:
a4:b8:65:28:c4:27:43:52:45:f8:b6:b0:24:41:46:1e:da:36:
1f:a9:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:24 2026 by rpki-client