Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File: xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier: QHBdLKT3/h1GJjfLLzMv1GcI39X9N9SdJw4hPFCTFIU=
Subject key identifier: 57:DB:52:7F:AC:79:89:68:A6:A8:93:9D:45:DC:AB:FF:22:21:EF:F3
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial: 019CBC27E428099E0C626EDEEA0A631998BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number: 0414
Signing time: Thu 05 Mar 2026 04:00:56 +0000
Manifest this update: Thu 05 Mar 2026 04:00:56 +0000
Manifest next update: Fri 06 Mar 2026 04:00:56 +0000
Files and hashes: 1: MBR4X9txb_DAPbAumwTsJqubBTw.roa (hash: 3GXUKqS4uNcGQw91JnWr+7X42phsItesfGJzuOIsuBE=)
2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: dWh2omep9WlXMRnZhhVHV0OX+pVeLblDXKtEoGXm43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bc:27:e4:28:09:9e:0c:62:6e:de:ea:0a:63:19:98:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
Validity
Not Before: Mar 5 04:00:56 2026 GMT
Not After : Mar 6 04:00:56 2026 GMT
Subject: CN=57db527fac798968a6a8939d45dcabff2221eff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:ee:97:51:30:0a:60:e0:a3:50:e1:ab:3d:
08:af:ce:35:3c:f1:b0:c4:1d:09:51:df:2e:d2:34:
e9:04:b6:ee:6c:58:1b:9b:e5:0b:d9:2e:3b:fe:2e:
1a:62:db:e4:81:f8:0d:b3:74:eb:88:04:ca:a5:8a:
3b:01:e6:43:0a:d0:4b:83:5e:3f:21:4c:a0:42:e6:
f1:9f:4b:bc:03:98:b2:e0:de:2f:78:2d:13:ae:63:
64:c3:1d:f8:7b:8c:99:92:1b:01:18:a2:57:91:3a:
7b:69:18:03:e4:e4:22:64:bf:09:8a:23:a4:e4:f5:
b4:f2:71:c3:42:b0:a7:5e:f7:c7:33:18:72:f4:1b:
95:66:1d:c6:91:b4:90:57:b2:cc:67:a7:0f:83:1e:
d0:e8:65:8f:43:7f:a7:63:b5:12:b3:60:91:98:b3:
9a:0a:23:72:42:ff:f9:21:c3:2b:51:16:d5:6b:b3:
37:8d:bc:c1:d3:9f:98:94:2b:52:61:bd:ce:92:23:
af:99:92:00:58:04:fd:a5:19:4c:86:42:7c:58:3a:
e8:6a:e3:8a:09:a9:c8:45:6a:e6:ca:e5:ba:d6:b0:
a0:fb:9c:28:2b:07:a1:a2:34:f4:83:62:7f:68:1d:
f5:f8:74:98:93:ee:31:39:76:6c:14:e0:7b:4b:03:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DB:52:7F:AC:79:89:68:A6:A8:93:9D:45:DC:AB:FF:22:21:EF:F3
X509v3 Authority Key Identifier:
keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ab:0b:98:e4:93:db:cc:8f:19:53:f1:7c:2c:2c:09:53:7d:
f8:44:24:fa:30:68:cc:eb:c5:12:81:04:17:dd:05:00:ac:10:
ca:00:fc:31:3c:73:da:20:b3:a4:fe:48:48:53:4d:55:ef:f4:
ce:ff:98:e0:17:fd:31:3b:be:26:dd:80:46:ee:13:06:7a:04:
1e:93:97:07:0e:43:8c:be:a2:d9:74:83:d7:50:74:ca:bc:57:
9f:16:3e:48:ab:91:64:0c:e0:11:c0:bc:40:9a:1a:4f:cc:d3:
2a:cd:51:f2:95:fc:99:d0:80:e7:07:f2:6e:b7:7d:ad:7d:f4:
4e:e3:c7:20:54:5c:f5:86:4c:6f:ff:e4:ce:ee:93:99:5f:47:
a7:9e:0f:79:8e:80:3f:07:1f:6f:a7:b0:b4:45:74:70:d2:31:
23:3d:22:a5:a5:b3:4b:82:eb:53:93:98:3b:f1:6e:1c:5e:f6:
f3:d6:22:f0:1a:7c:8f:c1:d3:24:3c:87:93:a3:07:5d:9e:4b:
66:37:1d:87:b1:d7:27:0b:95:a4:76:b2:3a:be:a7:16:dc:c3:
6a:80:92:e4:6e:34:81:64:7f:7b:14:86:f0:9a:03:7d:fd:d4:
3b:2f:5c:60:f2:90:b7:12:44:e0:30:9e:26:28:49:03:f2:f1:
72:5b:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 10:49:38 2026 by rpki-client