Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier: zhMGRiDV1YTc9vml58SQ/+yTQxRTqgbqgZfMwBN8hCQ=
Subject key identifier: 37:20:AC:BC:0B:F6:38:54:32:C5:B5:D9:F3:C8:77:85:FA:B2:49:19
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 019D27040EE4BF69108F5B0538651F0F5A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number: 1899
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: Q8q/bZ0f59ammW+0MOOmrO6NcYOn0GToMVPI9PSqGIg=)
2: iSbmw6iYTCL_uj0nNJzi3x_l3fc.roa (hash: a4Xp6WN8Wr5MTPzks0nbHO1+pUhmrhJ7zphulReBkhI=)
3: szRXwnpRyzklmfhXc-z7cr_xBWA.roa (hash: 6Q00UZKxfktIvpdDNdNKqT6xKPj3vxzFyFYU67dsIlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0e:e4:bf:69:10:8f:5b:05:38:65:1f:0f:5a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=3720acbc0bf6385432c5b5d9f3c87785fab24919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:78:21:8e:f5:47:09:b1:b4:72:36:25:df:
9f:f4:1c:d9:a9:be:90:52:ce:fc:8c:c7:2d:6a:51:
b0:d3:db:1b:dd:86:68:1e:f5:c8:15:7a:45:7d:92:
3f:0f:1c:15:3b:5f:4f:9f:69:1c:ff:c2:70:98:1f:
6c:8e:15:da:57:b3:93:09:43:e8:0e:32:87:77:71:
17:af:cd:23:8b:56:b1:42:eb:73:fe:cd:83:a1:b7:
0a:0f:dd:56:08:9c:17:0c:5b:64:6d:16:65:0a:0e:
f1:fa:22:b7:bc:35:5e:d8:9b:ef:f5:0c:f9:40:03:
46:8f:70:90:1f:2f:11:a4:ff:86:56:64:57:ec:c6:
68:a3:a5:23:33:3e:09:ba:ef:c7:f6:da:63:5a:b7:
6e:c7:92:9d:dc:cf:b0:76:4e:23:10:c8:96:dc:58:
4b:86:34:18:d5:08:87:a2:f3:22:f6:3f:93:7a:c5:
64:7e:b0:7f:26:95:ee:1a:1c:a8:84:9c:e3:6d:9f:
3e:93:14:d5:60:b6:2a:7c:70:e9:ab:e0:32:9a:a5:
66:b8:76:c8:e7:a9:71:df:af:fd:3f:5e:02:63:22:
13:3c:27:79:b4:ba:6b:77:0f:2b:a9:aa:c3:7d:cd:
1c:1a:d6:4e:96:f5:48:7a:4b:c1:68:83:64:2c:b6:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:20:AC:BC:0B:F6:38:54:32:C5:B5:D9:F3:C8:77:85:FA:B2:49:19
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c3:84:ec:0c:c6:e0:4e:a2:fa:f0:c3:f9:83:dd:be:77:1a:
06:38:71:0e:7b:95:79:e4:2f:63:dd:aa:22:05:c6:a1:44:a5:
77:a0:31:93:eb:23:d2:e5:53:7b:d8:70:f9:6d:bb:6c:f9:2f:
94:eb:df:b9:3c:62:cb:ea:63:f9:62:2a:6a:15:b0:76:e2:7b:
41:f8:be:73:38:6a:3c:fe:c6:35:00:6b:24:58:db:87:68:fc:
5c:f4:00:79:44:32:bc:c3:26:e9:ca:e7:45:89:3d:5a:e9:a7:
b9:75:f8:b8:2c:dc:dd:02:47:f0:3d:28:7e:ad:87:a3:be:c5:
ab:23:af:e6:6a:f7:d5:03:ea:ff:a1:20:33:8b:28:f2:dd:d7:
ad:b0:f0:c6:50:3c:9d:cd:40:d5:cc:da:cf:d7:26:28:7d:d8:
9a:07:70:fe:41:da:74:b2:00:e2:71:99:e5:9d:48:7b:a3:65:
42:f7:ea:74:11:a8:e4:f4:5e:87:cd:d5:2d:c2:dc:58:ba:c4:
88:3e:52:4d:10:d4:b8:ee:42:7b:8a:16:7e:73:78:0c:04:66:
9c:b6:d9:e1:87:be:f8:8e:b4:3e:de:5c:9d:ce:ca:da:fa:5a:
b4:4f:47:07:4b:d8:7b:1f:a7:70:3c:ea:04:c8:8c:9b:8a:86:
b1:af:4d:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBA7kv2kQj1sFOGUfD1qSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OWQxZjY3YTQxY2EyZTQwNTAxN2NiZTQ4YmFmZmYxNzMz
ZTM4NjkwHhcNMjYwMzI1MjIwMTEwWhcNMjYwMzI2MjIwMTEwWjAzMTEwLwYDVQQD
EygzNzIwYWNiYzBiZjYzODU0MzJjNWI1ZDlmM2M4Nzc4NWZhYjI0OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzd4IY71RwmxtHI2Jd+f9BzZqb6Q
Us78jMctalGw09sb3YZoHvXIFXpFfZI/DxwVO19Pn2kc/8JwmB9sjhXaV7OTCUPo
DjKHd3EXr80ji1axQutz/s2DobcKD91WCJwXDFtkbRZlCg7x+iK3vDVe2Jvv9Qz5
QANGj3CQHy8RpP+GVmRX7MZoo6UjMz4Juu/H9tpjWrdux5Kd3M+wdk4jEMiW3FhL
hjQY1QiHovMi9j+TesVkfrB/JpXuGhyohJzjbZ8+kxTVYLYqfHDpq+AymqVmuHbI
56lx36/9P14CYyITPCd5tLprdw8rqarDfc0cGtZOlvVIekvBaINkLLZoawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcgrLwL9jhUMsW12fPId4X6skkZMB8GA1UdIwQY
MBaAFBSdH2ekHKLkBQF8vki6//FzPjhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDkt
NTQ4NTY4MmEwNWY1LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDktNTQ4NTY4MmEwNWY1
LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsOE7AzG
4E6i+vDD+YPdvncaBjhxDnuVeeQvY92qIgXGoUSld6Axk+sj0uVTe9hw+W27bPkv
lOvfuTxiy+pj+WIqahWwduJ7Qfi+czhqPP7GNQBrJFjbh2j8XPQAeUQyvMMm6crn
RYk9WumnuXX4uCzc3QJH8D0ofq2Ho77FqyOv5mr31QPq/6EgM4so8t3XrbDwxlA8
nc1A1czaz9cmKH3Ymgdw/kHadLIA4nGZ5Z1Ie6NlQvfqdBGo5PReh83VLcLcWLrE
iD5STRDUuO5Ce4oWfnN4DARmnLbZ4Ye++I60Pt5cnc7K2vpatE9HB0vYex+ncDzq
BMiMm4qGsa9NPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:29 2026 by rpki-client