Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
File: FPt8Mzas1BidP6xjmigNmwAg8pg.mft (raw, json)
Hash identifier: NB7iKu6Afh4xby3koPKu+bwSvsO+a5NSR0BUs45wKiQ=
Subject key identifier: 61:5D:EC:1F:3C:90:1C:A9:A6:CF:B7:25:A4:71:54:79:BE:B4:C4:B1
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Certificate serial: 019D2704D8CF9E3E966EA6A3EC068EEF5EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
Manifest number: 17CB
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: FPt8Mzas1BidP6xjmigNmwAg8pg.crl (hash: 1N+2+s5F7jz7+g0y7FpYkh2iwNltj56KIpeuQ4LYxNI=)
2: MD2PWTqpDDGEMux-2kxi3Hd8PQM.roa (hash: Pu3fjnw+yegdjONecUUu8p5b5PIQ+jy3LKoUoEMvgbg=)
3: V50bPPxe9__9PdVaWrp4pIj1_3U.roa (hash: IVLdcVsUqYG9MQEXxQ1iKoQ3JRljtxzT2Wh5hJYRUuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d8:cf:9e:3e:96:6e:a6:a3:ec:06:8e:ef:5e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=615dec1f3c901ca9a6cfb725a4715479beb4c4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:d9:c8:c8:af:a5:0a:88:10:80:6f:cd:72:
c5:18:c9:a6:72:e7:38:5c:0a:e7:e9:07:b5:f7:b8:
d7:9a:21:34:94:45:c5:67:57:e8:92:cf:f3:06:f7:
e6:6c:5a:dc:de:a7:c6:79:ad:02:8b:72:6c:c0:d4:
94:ec:f9:03:1e:0d:2f:37:6e:25:b6:80:3c:8c:76:
74:ae:38:e9:ca:ec:ce:62:ff:ad:e2:05:82:4d:33:
1b:06:9f:f4:1c:bc:96:82:3b:e0:e6:a6:66:9a:57:
fe:8d:b3:e6:62:00:02:e7:61:18:62:97:15:e4:00:
41:ec:1b:08:70:a6:10:8d:9f:d1:b4:3f:1b:a0:98:
ae:2e:5a:01:73:64:11:e0:9e:ee:a7:65:32:4f:ef:
88:cb:2c:2f:0a:11:07:c5:12:cb:15:0e:52:2e:d7:
7a:18:42:6d:22:30:4f:8c:7e:95:fa:4e:1d:72:56:
4d:47:61:6f:3d:5b:84:d5:e9:25:46:ba:17:cf:7a:
91:bc:37:57:c1:e8:08:3f:6e:9a:93:c9:55:72:0a:
89:67:02:e0:91:6f:79:70:58:4b:3f:ca:8f:73:73:
2b:c7:d0:af:f2:e8:3f:02:b5:2b:85:f6:91:6d:71:
4f:0e:ad:1b:80:eb:34:d7:94:5e:ce:32:f6:44:12:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:EC:1F:3C:90:1C:A9:A6:CF:B7:25:A4:71:54:79:BE:B4:C4:B1
X509v3 Authority Key Identifier:
keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:68:3d:c6:98:95:77:17:7a:cf:8b:f9:8a:cf:3c:a4:e4:2b:
30:9b:41:1b:1a:97:df:08:a2:5a:19:b2:04:99:c4:c6:03:ce:
96:a7:d3:3d:34:2f:a5:69:ee:d9:2c:67:e7:cb:84:5a:91:9e:
24:25:27:b5:23:d9:02:26:f3:8f:2d:1f:a5:db:34:15:cf:4d:
5b:b4:d7:50:b1:5e:ca:a4:4e:df:55:f4:d4:4d:fa:eb:7c:ea:
0c:04:53:28:2b:2e:39:4c:a6:e6:13:3b:80:c0:40:3d:a3:59:
ec:ce:0e:53:1a:d5:30:44:4f:5c:d3:af:6b:bf:94:82:a5:20:
14:d7:50:58:42:5a:ad:45:9b:95:15:eb:41:08:f7:b6:47:60:
eb:97:80:04:47:ba:95:ce:b5:54:94:60:d6:11:0d:b7:72:81:
54:83:3f:d6:c1:e5:e6:b4:89:83:38:a5:5f:92:4a:3b:a1:4d:
78:da:ce:bd:ed:13:d9:8d:e7:e6:27:95:6d:76:1a:ae:9a:c4:
81:4f:be:fa:86:71:27:70:d5:13:2a:e7:dd:b5:4b:38:e1:2e:
ae:4d:19:4a:58:a4:a9:24:67:a0:25:15:6c:6b:aa:6b:f3:87:
2b:d6:9a:65:8f:89:18:4c:e3:9e:c4:19:6a:a3:a2:6e:c7:84:
25:54:8f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:56 2026 by rpki-client