Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File: FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier: cEJ/snX8760aKszY6mFoaCLoGuVRcRmdyo/StEEvOvM=
Subject key identifier: 3E:CE:29:5A:BA:37:B3:E4:F1:99:B2:A5:D8:93:2D:F7:C0:2F:C2:36
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial: 019F93918B12CBB582F827907BC9FED6F5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number: 03F0
Signing time: Fri 24 Jul 2026 10:00:16 +0000
Manifest this update: Fri 24 Jul 2026 10:00:16 +0000
Manifest next update: Sat 25 Jul 2026 10:00:16 +0000
Files and hashes: 1: 5GiUHvvRvMlg3hS53jo9G5Kr9tU.roa (hash: NmHcAKuahD6OKhRyNCtW1vNB5eydtw5obgklH1AcyCA=)
2: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: pMqQY+/KcOlIV++S66vSfuTiZJDOo5kIK8pRjQ7ysCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:8b:12:cb:b5:82:f8:27:90:7b:c9:fe:d6:f5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Validity
Not Before: Jul 24 10:00:16 2026 GMT
Not After : Jul 25 10:00:16 2026 GMT
Subject: CN=3ece295aba37b3e4f199b2a5d8932df7c02fc236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:1d:f2:e7:59:97:e6:89:60:e8:da:cf:4b:
c6:10:01:27:83:6d:3f:06:64:fd:9f:d9:fa:79:23:
2d:04:48:fb:d6:1a:ab:eb:e8:b2:58:72:a5:7a:54:
d0:05:0c:25:96:fd:57:ff:38:25:98:3c:39:ea:52:
1a:29:0e:23:9b:91:da:2c:fe:c7:cd:48:ba:1d:42:
7d:ae:29:e6:35:6f:29:22:f8:c0:3f:0d:cd:0e:e7:
4b:96:cf:51:c6:41:0b:b6:6f:b5:32:3b:1b:67:d6:
86:bf:2f:48:96:67:45:bd:6d:3f:c6:9a:87:1a:84:
b4:e1:4b:59:42:d8:bc:50:1c:bf:1a:da:2c:00:61:
b3:0b:ce:d3:9a:9f:f9:e9:2d:a4:9e:58:c9:eb:4f:
8f:e8:eb:9f:86:da:c7:fa:31:2c:ce:a1:be:54:3c:
e6:bd:8a:d6:ca:1b:5e:5f:3d:c6:31:99:3f:8e:b9:
79:84:eb:89:98:55:a8:57:a6:dd:07:02:31:eb:d0:
78:a9:c0:e2:c9:fa:59:11:06:3d:a4:e5:91:25:90:
0a:3c:55:bd:6b:db:83:63:54:81:12:de:c1:7b:30:
17:21:8e:24:ec:00:bf:b4:86:1b:38:31:a7:36:d0:
f5:42:65:c9:aa:0b:ff:d5:c0:fd:e9:51:5d:6f:4b:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CE:29:5A:BA:37:B3:E4:F1:99:B2:A5:D8:93:2D:F7:C0:2F:C2:36
X509v3 Authority Key Identifier:
keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8d:0d:22:63:b9:37:18:b4:3a:5b:7a:99:40:23:b0:17:a8:
5e:7b:22:4a:c9:dd:ea:38:0a:4d:5a:bc:09:28:62:53:84:2c:
07:73:76:51:e1:e1:15:79:48:0b:a6:28:50:b6:0c:1d:07:53:
22:46:65:db:28:fc:32:bb:9d:41:35:00:54:1b:a4:dc:0a:68:
9b:ec:b9:f4:1c:1d:89:55:b5:39:ef:38:54:f2:1b:80:da:80:
1f:d4:3c:cc:42:63:f3:f7:e0:6e:de:97:15:c5:fa:21:cd:a3:
9e:04:0f:e0:b8:10:76:38:90:05:bc:41:62:72:41:ff:1c:09:
be:cd:3b:32:0f:1f:86:6d:16:30:94:e0:24:ed:2d:f5:79:0f:
07:5d:31:a1:58:2e:19:98:c0:e6:54:ab:dd:ea:bc:c6:1b:da:
eb:55:cf:ec:2e:71:b7:1c:e5:73:5b:46:b1:c7:ed:e7:10:aa:
75:fc:9f:68:ae:9f:cc:c1:72:bd:01:81:5d:a1:a6:8f:31:c2:
5a:15:f8:46:85:ec:0c:66:ad:8f:b0:41:bb:f8:33:25:5a:51:
be:f0:7e:ac:d7:9d:38:60:2a:72:11:81:78:15:de:60:53:fe:
2c:86:2e:f4:4f:e8:73:32:a1:67:90:1d:e7:51:0b:3b:e1:8e:
49:34:fc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:45 2026 by rpki-client