Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
File: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json)
Hash identifier: CRcQmAAsDqSP3NH6gKebVHvw6nluXGvglh+TC6SUzkQ=
Subject key identifier: 86:4F:97:18:EE:7F:30:70:1C:30:10:86:FD:BE:A8:C3:DB:F0:A1:49
Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
Certificate issuer: /CN=171839a0b6476dfbf8335101613ce1a7721ef385
Certificate serial: 019D28F29BBF04DE5F9BB724BEFC46AC8742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
Manifest number: 1816
Signing time: Thu 26 Mar 2026 07:01:21 +0000
Manifest this update: Thu 26 Mar 2026 07:01:21 +0000
Manifest next update: Fri 27 Mar 2026 07:01:21 +0000
Files and hashes: 1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: LNMzcN6jF16C0aB9eoi3fZ9r6fE0Majk+f1jwqki/Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:9b:bf:04:de:5f:9b:b7:24:be:fc:46:ac:87:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385
Validity
Not Before: Mar 26 07:01:21 2026 GMT
Not After : Mar 27 07:01:21 2026 GMT
Subject: CN=864f9718ee7f30701c301086fdbea8c3dbf0a149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:4a:5b:b6:66:c7:73:c2:62:77:00:ed:7a:
06:c4:c0:8a:c1:d4:f8:86:dc:bd:43:f3:c7:5b:76:
94:a0:a2:c7:aa:2a:c6:7e:29:81:f1:0a:6f:c6:54:
58:a3:da:db:80:6d:33:4a:ed:86:3a:f1:a3:fe:c9:
ed:c6:4c:02:29:30:2d:ed:3c:8b:a6:37:94:3d:e2:
3a:84:1f:38:8f:0e:1b:91:cc:a5:12:3f:00:6b:b6:
09:0b:37:d7:c0:6d:08:0a:2b:44:4f:17:f3:9f:b6:
9e:7d:ea:5f:fa:b2:3c:25:88:67:ad:e8:74:34:56:
52:dc:35:22:91:88:33:0a:89:df:99:6b:f2:52:30:
99:21:07:03:30:39:22:b3:fc:82:61:f5:98:fe:5a:
de:2d:73:1a:9b:da:4a:fe:e7:10:82:ce:d2:d1:94:
f3:3a:fb:c9:60:8a:d9:87:1b:50:54:d1:7a:f6:a7:
5b:cb:c7:c4:1c:60:c6:3b:1f:b1:ee:12:c1:d7:cf:
f0:ab:b0:1f:4d:bf:5f:ec:c8:aa:cc:3f:37:15:1f:
f6:dc:9b:04:87:d4:f4:fa:16:e8:c5:60:21:74:d6:
65:94:29:b8:34:28:2d:ac:3a:bf:8a:61:9c:d1:d8:
bf:0e:e2:66:a5:0c:19:ae:d6:06:1b:5d:1d:a9:5a:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4F:97:18:EE:7F:30:70:1C:30:10:86:FD:BE:A8:C3:DB:F0:A1:49
X509v3 Authority Key Identifier:
keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:38:7b:5b:b5:07:20:cf:6f:87:c7:0c:88:9f:fc:3a:f2:d0:
fa:1c:a1:2a:c2:b0:d8:34:19:44:bc:ea:45:45:4d:f6:1b:c2:
d4:c4:53:e9:25:45:b6:67:ac:71:4a:e6:36:26:7e:1e:d5:78:
8f:76:3e:00:7b:b4:ec:d9:47:65:7a:33:2e:a6:cb:9e:38:ad:
c9:86:e8:23:ab:0f:65:82:2c:79:e4:f8:44:d2:ab:a8:72:52:
f5:56:3a:12:3e:d3:6c:86:71:0d:e8:af:af:7f:12:18:fd:72:
82:0c:06:3d:69:23:cf:7a:7e:68:06:1b:79:51:8f:6d:9b:f9:
3a:28:23:1c:24:3c:7a:32:3e:98:30:9f:31:db:d3:62:2b:45:
20:d8:76:4e:92:38:8a:6f:f4:67:e1:57:99:dd:12:b5:ba:c4:
e9:6f:5d:70:c4:50:5c:32:f4:ea:f7:8e:75:52:9a:c6:d2:e9:
a5:05:09:bf:23:06:b9:71:2b:ad:49:28:e2:46:91:04:b5:6f:
dc:4b:1e:af:09:bd:09:01:46:89:3b:c7:4f:1e:49:88:a5:49:
3b:10:5f:d2:d3:64:48:df:68:2d:95:3e:17:c5:cc:3e:3a:c5:
e5:a9:ec:8b:89:9a:d1:18:f7:f5:9c:dd:25:a5:ae:46:e3:0c:
04:ba:5b:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8pu/BN5fm7ckvvxGrIdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTgzOWEwYjY0NzZkZmJmODMzNTEwMTYxM2NlMWE3NzIx
ZWYzODUwHhcNMjYwMzI2MDcwMTIxWhcNMjYwMzI3MDcwMTIxWjAzMTEwLwYDVQQD
Eyg4NjRmOTcxOGVlN2YzMDcwMWMzMDEwODZmZGJlYThjM2RiZjBhMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6JKW7Zmx3PCYncA7XoGxMCKwdT4
hty9Q/PHW3aUoKLHqirGfimB8QpvxlRYo9rbgG0zSu2GOvGj/sntxkwCKTAt7TyL
pjeUPeI6hB84jw4bkcylEj8Aa7YJCzfXwG0ICitETxfzn7aefepf+rI8JYhnreh0
NFZS3DUikYgzConfmWvyUjCZIQcDMDkis/yCYfWY/lreLXMam9pK/ucQgs7S0ZTz
OvvJYIrZhxtQVNF69qdby8fEHGDGOx+x7hLB18/wq7AfTb9f7MiqzD83FR/23JsE
h9T0+hboxWAhdNZllCm4NCgtrDq/imGc0di/DuJmpQwZrtYGG10dqVrACQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZPlxjufzBwHDAQhv2+qMPb8KFJMB8GA1UdIwQY
MBaAFBcYOaC2R237+DNRAWE84adyHvOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhnNW9MWkhiZnY0TTFFQllUemhwM0llODRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yOTM1YTEtMmFlYi00Nzk4LWFhZGIt
MjUxZTJkY2IzOTlmLzEvRnhnNW9MWkhiZnY0TTFFQllUemhwM0llODRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yOTM1YTEtMmFlYi00Nzk4LWFhZGItMjUxZTJkY2IzOTlm
LzEvRnhnNW9MWkhiZnY0TTFFQllUemhwM0llODRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDh7W7UH
IM9vh8cMiJ/8OvLQ+hyhKsKw2DQZRLzqRUVN9hvC1MRT6SVFtmescUrmNiZ+HtV4
j3Y+AHu07NlHZXozLqbLnjityYboI6sPZYIseeT4RNKrqHJS9VY6Ej7TbIZxDeiv
r38SGP1yggwGPWkjz3p+aAYbeVGPbZv5OigjHCQ8ejI+mDCfMdvTYitFINh2TpI4
im/0Z+FXmd0StbrE6W9dcMRQXDL06veOdVKaxtLppQUJvyMGuXErrUko4kaRBLVv
3Eserwm9CQFGiTvHTx5JiKVJOxBf0tNkSN9oLZU+F8XMPjrF5ansi4ma0Rj39Zzd
JaWuRuMMBLpb9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:49 2026 by rpki-client