Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: GCSNVbI/IrVOWvDe9Xt4wAUUiCRzA3yecHa1UZCOyF4=
Subject key identifier: 3C:6C:21:FB:6E:BB:F3:BE:36:0A:EB:43:87:1F:9D:FB:38:A8:B8:DB
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 019D27E03C2B5E0F3F93697F1F1F6EB0EF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 159B
Signing time: Thu 26 Mar 2026 02:01:39 +0000
Manifest this update: Thu 26 Mar 2026 02:01:39 +0000
Manifest next update: Fri 27 Mar 2026 02:01:39 +0000
Files and hashes: 1: 4KVFT5rfCFpQJiwyphxd1Ug6J-g.roa (hash: H9IZSHKQQb+XSiam4n6FXPX7X+NUo4iyE9Bfz0ZsuCI=)
2: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: vcoesvy6JroZneomJaYXEhg8WNLOdcvMH58JRFAJo4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3c:2b:5e:0f:3f:93:69:7f:1f:1f:6e:b0:ef:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Mar 26 02:01:39 2026 GMT
Not After : Mar 27 02:01:39 2026 GMT
Subject: CN=3c6c21fb6ebbf3be360aeb43871f9dfb38a8b8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:5a:18:4c:4b:7a:ee:3f:c4:66:4f:c6:ee:
13:93:ed:49:07:cc:ad:9b:f8:43:b2:d0:0d:8e:69:
2e:27:00:87:83:ab:66:c7:21:c1:bb:90:00:5b:af:
7a:fa:51:5f:d0:5f:63:29:9a:d6:02:dd:aa:97:45:
5d:bb:aa:b3:ca:84:0c:fe:9e:a8:a7:d5:93:e5:18:
a2:85:fd:4f:69:7c:ed:6f:12:6e:cf:a0:02:ce:d8:
9a:0f:74:f0:ac:11:31:a9:6b:3f:1f:b0:eb:df:b1:
c0:36:39:47:4b:2e:c3:85:8f:80:a8:13:03:aa:6f:
e9:80:73:d0:d9:ec:43:42:5e:67:72:f3:38:d5:98:
81:17:dc:3b:0a:62:3b:6f:5e:72:a7:67:b9:3a:7e:
92:d8:a1:fc:01:39:90:35:3b:a4:9e:99:21:37:82:
2d:66:8a:45:ca:66:0a:0e:f0:04:c9:b8:a5:2d:02:
cb:c2:e5:ef:79:20:a5:81:8d:56:98:b4:59:b7:8b:
59:d9:4a:03:34:33:3a:9d:4c:73:46:1c:68:54:f0:
72:0d:0a:11:24:66:cf:cf:26:90:fc:2c:01:20:b8:
bf:bb:b8:df:03:57:65:89:4e:ad:57:cf:1e:62:c0:
31:6e:df:ad:bf:7a:34:00:16:63:9b:11:56:c6:51:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6C:21:FB:6E:BB:F3:BE:36:0A:EB:43:87:1F:9D:FB:38:A8:B8:DB
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:44:87:d7:ec:ba:3b:04:a7:05:93:df:60:5f:c9:08:08:89:
5d:fc:87:b6:5e:08:33:11:10:cb:bc:f8:35:b5:04:19:85:d6:
7f:3e:49:55:b8:54:6a:4c:84:fb:28:0a:c9:3a:35:9b:a5:f8:
33:c8:25:e6:47:06:02:89:87:43:74:8d:22:8f:cf:f6:f7:9b:
f0:f1:9e:83:b6:a5:0d:d0:e4:b0:b1:cd:ff:59:2c:c9:a3:c4:
5b:c5:3e:97:f4:43:6c:15:58:be:54:f8:13:39:04:32:8c:01:
d6:59:a4:25:92:fc:c0:8c:cb:d6:86:ac:d6:c5:02:aa:da:d5:
be:a9:fb:a4:3a:10:63:05:01:f5:f2:b6:a8:6a:d6:da:b7:14:
cc:c0:4c:72:5d:7a:48:c7:58:e4:85:a6:af:4b:69:2f:be:ef:
45:bb:c6:dd:1f:50:a9:84:21:e3:98:76:21:f0:8b:2d:d0:30:
74:6b:49:2d:11:01:cd:b7:92:bd:fb:d2:7a:d5:51:a0:36:39:
0f:d3:d5:b4:85:3d:54:22:0f:db:2c:84:76:d1:f4:c6:52:8c:
39:fb:a7:70:70:39:de:32:05:92:d9:78:89:bd:f9:6e:8d:cc:
cd:79:12:32:cc:9e:e4:91:08:61:a3:84:65:7e:9a:60:90:91:
20:0b:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:54 2026 by rpki-client