Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
File: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json)
Hash identifier: L4sn3qoc5XhJbooku81sA7PnJJs8+wB7nfSdVHajD1A=
Subject key identifier: 17:25:D1:03:1B:E2:6C:0C:42:6D:7F:34:FB:5F:87:F7:B3:3E:6C:E0
Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
Certificate issuer: /CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Certificate serial: 019D25F1D212394DC344BA5AF44858AFD0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
Manifest number: 0CFC
Signing time: Wed 25 Mar 2026 17:01:38 +0000
Manifest this update: Wed 25 Mar 2026 17:01:38 +0000
Manifest next update: Thu 26 Mar 2026 17:01:38 +0000
Files and hashes: 1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: sdq16qMYFvn8jYuirzwGU5copqlF3qqY93784sPjbSM=)
2: jPp4Av3P5IVYrkqxOGqhOqwt480.roa (hash: cRa8LYV5Wo5t1Qa11CdMWIS8CjSo634/LpDIUbcvW3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:d2:12:39:4d:c3:44:ba:5a:f4:48:58:af:d0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Validity
Not Before: Mar 25 17:01:38 2026 GMT
Not After : Mar 26 17:01:38 2026 GMT
Subject: CN=1725d1031be26c0c426d7f34fb5f87f7b33e6ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:d8:3a:db:34:30:7b:83:c3:44:83:d1:6f:
24:3d:29:ef:60:d9:90:f1:d5:09:bc:3b:0b:a3:3d:
e7:d4:9e:11:5a:9f:95:4b:95:db:47:0c:18:ab:de:
8e:13:80:ee:05:09:d4:4d:84:1a:78:9e:37:b0:7c:
18:17:fa:27:05:49:54:9d:67:05:4b:a5:de:a2:e7:
56:0d:c3:be:de:33:9a:49:92:ff:f3:73:58:d2:c0:
06:58:0f:c5:06:0a:32:41:67:65:8e:fb:37:7c:73:
fa:62:81:38:43:01:5b:75:4b:a1:38:23:6d:fa:da:
bb:eb:6d:07:22:31:ff:0e:66:ff:a5:f6:3d:11:d0:
d9:ef:17:68:8b:0d:ca:16:03:4b:b4:22:06:ac:bb:
99:15:65:1d:f1:eb:32:6e:ba:d9:7f:56:ce:23:1f:
b6:f5:a2:79:54:ee:75:2f:b7:c5:4a:ac:3b:60:0a:
56:93:ed:85:6b:93:ef:58:76:1c:25:d2:ed:0c:08:
c6:67:55:89:f7:65:bb:1a:1d:2b:2c:90:9b:53:da:
49:f9:61:8d:07:d9:80:7b:08:ab:47:3e:e3:d3:ac:
c5:be:78:eb:ae:00:9f:34:d0:64:8d:ee:24:cf:3a:
27:3d:0a:b0:dc:ce:c5:e2:56:01:9e:e5:71:3a:0f:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:25:D1:03:1B:E2:6C:0C:42:6D:7F:34:FB:5F:87:F7:B3:3E:6C:E0
X509v3 Authority Key Identifier:
keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8e:e5:7a:1c:57:af:f3:9e:56:23:9c:6c:4b:38:94:a5:ce:
76:eb:9c:84:bc:ee:6f:a5:10:1f:2c:aa:76:e5:f8:3a:2c:5a:
11:af:a5:e9:1a:d1:27:a6:d9:15:52:cf:b8:8e:4a:3a:fd:f0:
82:81:b4:60:a2:b0:9c:55:99:7d:1f:0e:4f:24:49:cf:ef:16:
c9:f9:d6:0d:28:27:3d:61:0d:1b:45:d1:82:4b:e8:fd:13:77:
8c:1e:0b:56:31:fb:43:e0:e5:91:da:85:a3:c1:d4:83:7c:fd:
11:7c:91:02:2f:f6:8c:7a:cd:ef:52:e6:41:b3:5a:50:7a:81:
7c:5a:14:29:39:e0:fb:c4:f7:e7:2b:ff:78:c0:b3:31:29:1e:
c9:a8:ea:d4:75:18:d3:a8:e0:2b:09:19:d8:80:a5:49:5b:55:
e3:c2:1f:aa:0c:d5:b1:1d:a3:57:5c:1e:f6:7d:20:6b:76:15:
be:b9:73:59:06:9a:54:db:3a:2e:9a:dd:40:06:01:31:1f:cc:
e3:1e:e0:b0:6f:70:38:5f:ca:f7:1d:de:1f:7e:8b:50:e7:a6:
f7:03:e4:4e:d0:44:0c:e5:df:66:68:b3:1b:5e:7a:28:19:d9:
ed:a0:8d:e9:dc:c2:71:fd:d3:bf:eb:a2:e3:fa:44:66:e7:11:
da:80:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:44 2026 by rpki-client