Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File: FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier: cJP6bw2fIAl4f2izF/oi8rbWOBErcgnorcO2OEDU1iM=
Subject key identifier: 27:63:8D:A4:7E:B1:B6:ED:31:AA:E5:B7:52:D6:AF:4B:B9:E8:B3:77
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial: 019D2703985132B6C40605305AADD95A6365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number: 1204
Signing time: Wed 25 Mar 2026 22:00:39 +0000
Manifest this update: Wed 25 Mar 2026 22:00:39 +0000
Manifest next update: Thu 26 Mar 2026 22:00:39 +0000
Files and hashes: 1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: /7E3Yxn6n72SxkPVzSGdGKn/KGhsUs+ETcQpCddwitA=)
2: ZHym1jgmQNO1769mOXVyUNOVMEc.roa (hash: 6HGTh8JhgEJnDcdwwWSa7+oUj2V8bxazwsUi6gBiFdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:98:51:32:b6:c4:06:05:30:5a:ad:d9:5a:63:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Validity
Not Before: Mar 25 22:00:39 2026 GMT
Not After : Mar 26 22:00:39 2026 GMT
Subject: CN=27638da47eb1b6ed31aae5b752d6af4bb9e8b377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:da:fe:fc:58:2b:de:89:3e:12:b7:e5:d4:
c4:77:bb:a0:aa:85:0c:cc:8d:aa:5b:e5:0b:88:00:
a9:f5:d4:92:0a:7a:b0:4e:a3:eb:c5:82:df:b0:71:
99:c1:7e:8e:90:d0:57:68:2e:50:af:a5:6c:63:96:
cc:cc:0b:c8:0f:45:85:16:ce:b0:f7:10:ce:a9:c0:
da:45:3c:67:9c:3c:a7:c0:aa:8f:dc:f8:85:f0:40:
02:ed:56:70:a7:c5:87:cf:65:8c:0f:09:f8:bd:ee:
17:34:bb:b8:cc:6a:fe:c2:ec:c6:51:87:63:dc:66:
4b:7c:af:4a:c5:ba:79:2f:e6:51:f6:78:c7:5f:e9:
c7:54:e2:20:2a:cc:fd:f6:13:4a:32:7e:1d:0d:ba:
5c:76:e3:f9:fe:82:12:0f:79:36:09:dc:f6:5f:c9:
77:77:cf:55:e0:9b:f3:35:04:ea:6d:af:44:15:4f:
52:cc:8c:26:c2:b4:bd:d5:6b:f0:41:45:cc:8e:a3:
10:01:cd:bb:78:15:11:3c:a8:d5:37:b6:99:f2:a2:
c9:a5:e3:0a:57:9d:cf:aa:30:05:6f:f4:09:65:ce:
70:82:1e:fe:7b:dd:28:1e:05:77:8c:49:68:53:9f:
b9:0d:66:4e:57:ff:0d:a7:06:74:8c:c1:08:dd:12:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:63:8D:A4:7E:B1:B6:ED:31:AA:E5:B7:52:D6:AF:4B:B9:E8:B3:77
X509v3 Authority Key Identifier:
keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2f:8d:14:92:92:ac:36:43:5c:34:b6:22:3c:24:d0:b3:f1:
fc:dc:2a:93:2f:32:d2:84:c3:58:d7:7a:bc:b0:64:e9:35:e6:
97:5e:01:22:68:bb:19:25:aa:d4:d5:b0:05:86:64:56:0b:8c:
38:4f:76:ce:2a:50:56:e5:16:ff:d6:a7:e9:f4:2c:e3:0f:00:
e3:a7:11:2b:24:35:fb:09:e3:92:3c:81:10:84:85:21:89:d6:
72:ff:80:d1:6d:d6:e2:12:6b:d8:81:e5:4a:1f:9b:77:fe:e6:
bf:6e:c1:eb:5a:3e:7b:3a:a5:78:1b:5e:31:92:f6:69:02:d3:
31:66:f1:a9:6f:05:94:fb:6e:64:2d:f4:6b:3b:18:58:94:2f:
55:b7:78:4f:c7:b8:88:89:c3:c2:76:19:52:f5:9e:5d:81:aa:
82:42:b2:f0:92:bc:4f:26:90:b2:62:90:f0:79:22:e1:c6:42:
56:a7:22:d4:c3:94:7f:00:40:db:a1:4e:37:70:bf:3a:d5:c1:
31:1e:f7:4d:40:e2:16:05:01:a0:39:67:3c:80:5a:01:ab:3e:
c3:b2:c5:11:4d:56:97:4d:96:d9:20:3f:f0:b1:61:0f:d9:83:
be:42:cc:6e:8b:6e:21:ea:14:f7:59:be:60:a1:2a:e6:88:90:
5c:52:22:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA5hRMrbEBgUwWq3ZWmNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NzBlMWJjNTg2OWM2MDJiNjQyNDQ5MDMxZDRiNzExNmM5
ZGZhMjYwHhcNMjYwMzI1MjIwMDM5WhcNMjYwMzI2MjIwMDM5WjAzMTEwLwYDVQQD
EygyNzYzOGRhNDdlYjFiNmVkMzFhYWU1Yjc1MmQ2YWY0YmI5ZThiMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJza/vxYK96JPhK35dTEd7ugqoUM
zI2qW+ULiACp9dSSCnqwTqPrxYLfsHGZwX6OkNBXaC5Qr6VsY5bMzAvID0WFFs6w
9xDOqcDaRTxnnDynwKqP3PiF8EAC7VZwp8WHz2WMDwn4ve4XNLu4zGr+wuzGUYdj
3GZLfK9Kxbp5L+ZR9njHX+nHVOIgKsz99hNKMn4dDbpcduP5/oISD3k2Cdz2X8l3
d89V4JvzNQTqba9EFU9SzIwmwrS91WvwQUXMjqMQAc27eBURPKjVN7aZ8qLJpeMK
V53PqjAFb/QJZc5wgh7+e90oHgV3jEloU5+5DWZOV/8NpwZ0jMEI3RKUfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdjjaR+sbbtMarlt1LWr0u56LN3MB8GA1UdIwQY
MBaAFBZw4bxYacYCtkJEkDHUtxFsnfomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lY2IyYWEtNWU1Yy00ZmVmLWJjOGQt
YzBlYTI4YWMzNjdhLzEvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lY2IyYWEtNWU1Yy00ZmVmLWJjOGQtYzBlYTI4YWMzNjdh
LzEvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZy+NFJKS
rDZDXDS2Ijwk0LPx/Nwqky8y0oTDWNd6vLBk6TXml14BImi7GSWq1NWwBYZkVguM
OE92zipQVuUW/9an6fQs4w8A46cRKyQ1+wnjkjyBEISFIYnWcv+A0W3W4hJr2IHl
Sh+bd/7mv27B61o+ezqleBteMZL2aQLTMWbxqW8FlPtuZC30azsYWJQvVbd4T8e4
iInDwnYZUvWeXYGqgkKy8JK8TyaQsmKQ8Hki4cZCVqci1MOUfwBA26FON3C/OtXB
MR73TUDiFgUBoDlnPIBaAas+w7LFEU1Wl02W2SA/8LFhD9mDvkLMbotuIeoU91m+
YKEq5oiQXFIipA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:27:08 2026 by rpki-client