Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: 5BX5VeSergQ2EugAOdjQRIteBNDtiKubPb3kT2TBAtQ=
Subject key identifier: 06:1B:6B:71:40:21:17:18:65:AD:75:5E:2E:BB:57:AF:E7:AF:A2:41
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 019D2929383F242875E9BF2E462C84B099D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 181C
Signing time: Thu 26 Mar 2026 08:01:00 +0000
Manifest this update: Thu 26 Mar 2026 08:01:00 +0000
Manifest next update: Fri 27 Mar 2026 08:01:00 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: o4JcpoephBbIsGLNiVa1u80QglTmyLloHvsrfPxZl1c=)
2: GmYrfW3k8osvPQTynxaphEXGOF0.roa (hash: KL4WvC6vPGKTcuwvQwS3AK/arMjab0ANyIFkXhXDgSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:38:3f:24:28:75:e9:bf:2e:46:2c:84:b0:99:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Mar 26 08:01:00 2026 GMT
Not After : Mar 27 08:01:00 2026 GMT
Subject: CN=061b6b714021171865ad755e2ebb57afe7afa241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:54:52:e3:40:50:09:f8:ce:68:6f:15:1c:
b0:d4:a3:e3:c1:c7:78:50:a3:0f:7e:18:f2:e1:4d:
0b:b5:07:1f:55:85:98:1f:20:be:92:97:77:46:3c:
46:62:51:33:e9:c1:80:cf:15:ad:96:c4:c5:2d:d3:
78:af:f7:9e:81:8d:80:4e:59:6e:e1:c3:76:f1:1e:
d2:12:30:fc:aa:55:38:47:35:d4:3f:51:e8:f9:c5:
2e:d7:ac:8c:0d:1d:7d:5c:db:b2:08:bf:7b:45:07:
69:15:4b:f3:34:a9:df:59:9d:17:45:9d:be:53:86:
3a:f6:d8:79:76:8a:f5:5f:ec:ba:9a:d8:f4:9d:b0:
72:cd:4e:6f:25:92:1f:e8:4c:e3:bb:63:1b:d6:4e:
e6:d2:ea:24:35:15:71:2f:4a:30:0b:24:c4:09:80:
c9:c7:e7:a7:5d:56:66:8d:c5:c4:d8:7e:ad:a0:df:
2d:d9:2d:1a:f7:5a:56:4d:e2:1c:14:a4:94:a4:50:
96:74:1d:e2:a8:4e:24:c8:25:58:14:43:9f:a6:f1:
c4:ed:f9:a1:a5:ce:e0:65:b1:0a:84:c1:80:cf:d0:
98:a6:d2:84:7c:77:be:73:96:15:ba:46:80:24:6e:
d8:f7:e6:6f:5e:73:49:67:03:db:58:ee:95:f3:4b:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1B:6B:71:40:21:17:18:65:AD:75:5E:2E:BB:57:AF:E7:AF:A2:41
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a8:0a:83:37:f0:0c:eb:ef:21:14:b1:6b:6f:c6:32:bc:4b:
4d:dc:df:88:63:b9:08:53:9f:87:ca:cb:ba:64:73:54:96:a6:
8d:cb:5a:89:7d:e5:3f:e9:e5:0d:97:8a:e9:3b:f0:b4:6a:cd:
64:0d:ca:b9:8c:a7:b5:e7:50:d3:19:97:69:47:ee:1e:d5:e6:
62:05:3b:e9:52:17:f4:6d:12:80:01:63:65:2f:49:1f:74:05:
02:31:08:1d:4b:82:a8:ea:bf:84:1b:6f:f0:47:ac:d4:00:fe:
2a:af:b6:9c:e7:5d:33:a6:59:c9:e4:4e:49:58:86:ae:17:e0:
ec:3c:45:9b:dd:e7:cb:93:d1:61:7a:55:81:a2:a2:cb:00:7b:
f6:a8:f4:f7:26:77:17:17:f0:d1:9f:99:87:92:ae:19:99:54:
e0:93:8c:11:d9:c2:c2:a3:fb:63:ab:a5:1a:35:1f:77:f7:f4:
f9:a3:7b:38:00:ef:d0:cf:41:e6:f2:25:a9:f2:66:f7:74:32:
75:f8:f8:ca:68:97:e4:f9:97:ff:ca:b4:7d:ce:09:56:f9:5a:
8e:b9:92:39:da:80:7d:53:b4:4b:0e:05:32:e4:fe:6b:70:8f:
e0:6c:b4:26:40:7a:83:88:43:43:a0:2a:29:f8:92:e7:fe:ec:
9c:09:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:40 2026 by rpki-client