Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: x/cZWk6oz48om4WCPbsu6v9TforyuJ6JnDOX425xzeI=
Subject key identifier: E6:97:5E:9B:58:0F:C0:A9:A0:5B:28:A3:9C:D6:7B:C9:37:A2:5B:87
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 019D284DFAC5FA632326DAE639C0ECB72207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 151B
Signing time: Thu 26 Mar 2026 04:01:31 +0000
Manifest this update: Thu 26 Mar 2026 04:01:31 +0000
Manifest next update: Fri 27 Mar 2026 04:01:31 +0000
Files and hashes: 1: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: X3R0x/bzMIlpxfJhHhHZXqvYfdMtnpZofx0+UADFgJg=)
2: KPei4pGh6l2ch2CO4YkeyV22yvw.roa (hash: k1IWbcYO0kXCRKUgrnwnc4nPu4ClnarK73JxRUTod6I=)
3: kaDMDof3JnegZ76WynjnrQpCAYo.roa (hash: FDrbnAWfbNlBDk06C3Ts0xLMWNBRoitqJnesKeSlD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:fa:c5:fa:63:23:26:da:e6:39:c0:ec:b7:22:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Mar 26 04:01:31 2026 GMT
Not After : Mar 27 04:01:31 2026 GMT
Subject: CN=e6975e9b580fc0a9a05b28a39cd67bc937a25b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:f5:89:52:c8:52:57:18:e6:85:de:37:4b:
e5:ac:5b:3d:ac:46:d8:22:a0:46:02:a9:0a:34:fb:
cf:50:88:e1:6e:38:e0:16:50:01:cc:ab:fd:c5:ba:
0f:d7:a1:ea:48:67:24:16:59:01:b1:50:00:f7:99:
68:72:c0:41:94:4b:ea:97:6b:d5:7e:34:9f:e5:ad:
0d:20:d3:7f:fe:7b:88:27:ed:df:27:c8:b7:f3:bb:
28:f7:7a:59:73:6b:bb:39:31:bd:47:e9:8d:a0:f0:
a5:f5:46:e0:53:14:7d:d9:16:66:45:40:4e:de:a1:
2e:f1:97:2a:76:93:a5:78:fc:f6:0a:d6:82:76:7b:
c6:89:33:9a:f6:42:7d:09:82:cd:14:28:7b:0e:c4:
b7:14:96:04:50:5c:83:02:7e:2c:bd:f7:62:e9:04:
3f:d9:0b:83:73:be:a9:fe:9c:f4:2a:4d:3f:d3:db:
38:12:79:21:d6:43:7b:e4:f5:4b:21:33:89:b4:fc:
fe:2d:f6:68:7e:97:d5:6c:d9:46:56:37:50:01:50:
15:50:f9:f6:fa:41:65:94:e5:31:7d:66:61:72:14:
e9:6c:34:be:af:cc:24:35:cb:64:d4:df:df:57:07:
55:91:e1:90:1c:c2:bb:67:5e:8b:ad:58:db:12:9a:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:97:5E:9B:58:0F:C0:A9:A0:5B:28:A3:9C:D6:7B:C9:37:A2:5B:87
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:33:89:05:de:8c:6a:22:f9:05:8e:5f:8c:7a:25:b8:83:88:
f3:ec:f4:26:ce:22:66:e4:f7:32:ef:c1:0c:44:ca:23:5a:90:
db:35:f6:6d:ba:87:07:c3:d2:2c:cd:96:56:f4:9f:25:5f:d5:
34:cb:75:1f:a0:a1:d1:17:49:40:80:e1:e4:62:54:d3:a5:26:
22:c9:66:2b:3a:6a:e3:2d:07:35:f1:d0:60:b2:3f:1f:b6:26:
47:5b:f6:77:f2:cc:80:dc:34:1e:52:d4:42:d6:a2:45:33:92:
e3:c6:54:6e:33:07:de:ff:c4:81:ae:d4:61:cb:c9:8b:cd:58:
30:51:81:fe:98:6a:40:87:f6:b4:2a:24:ce:37:4a:0a:20:ae:
0b:f7:31:de:e9:b0:13:85:50:7f:06:70:da:c8:ea:4b:0d:9d:
20:89:26:d0:5d:3f:6b:4b:6b:4a:cd:39:e3:49:f0:4f:6b:62:
da:9f:71:c4:36:13:13:f6:ce:89:78:51:a9:c2:6c:1c:b8:1d:
d2:eb:23:4f:ef:13:0c:73:2e:81:76:99:0b:24:e9:35:5a:4b:
e5:05:5e:e1:da:f2:1b:31:fd:43:86:c3:0d:ba:7f:3d:d2:12:
67:fa:fc:5d:dc:5d:d6:bf:8d:fc:40:bb:db:fb:ad:59:75:8e:
94:47:3d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:28 2026 by rpki-client