Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier: xBZN9cI8k3ygdiUY6K/eUYG45Z3O7Oz9oYXwIlwolC0=
Subject key identifier: C1:95:CE:93:96:22:20:B6:58:D9:68:74:7F:9C:BB:5C:74:C0:C7:B8
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial: 019D2884D61819BFF561E54E7C72D800E9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number: 17A3
Signing time: Thu 26 Mar 2026 05:01:27 +0000
Manifest this update: Thu 26 Mar 2026 05:01:27 +0000
Manifest next update: Fri 27 Mar 2026 05:01:27 +0000
Files and hashes: 1: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: ZCgKtxcfAL4fyqj2uyLA1xbtwnvy4IHD5YDOFcoXdw8=)
2: pqfPRJRXyOZ16sEictRnWg5paro.roa (hash: Iy8adOlkmCKzZcCemxuStClF7zRpOXHA9lf434dtvhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d6:18:19:bf:f5:61:e5:4e:7c:72:d8:00:e9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Validity
Not Before: Mar 26 05:01:27 2026 GMT
Not After : Mar 27 05:01:27 2026 GMT
Subject: CN=c195ce93962220b658d968747f9cbb5c74c0c7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:05:ab:45:25:cc:c5:71:88:c3:32:70:55:
a2:9e:29:9e:9a:15:ac:ea:ea:d0:0e:ac:80:68:d6:
b8:c5:a1:8d:a1:68:4a:34:a4:c3:fc:49:56:9f:27:
f7:cf:fd:62:b0:1a:c0:30:c8:fe:72:d3:d3:9c:9d:
ba:23:ac:fd:ee:db:ec:62:af:c8:78:07:24:91:ec:
21:6b:d3:77:c3:ad:4e:f7:38:f4:d4:78:d1:50:69:
a1:c4:50:ed:21:db:c4:79:38:24:d9:a6:28:9a:a9:
15:cd:5c:2a:3d:8f:a6:63:e5:c2:d7:85:27:01:8d:
94:c1:73:e1:aa:79:f2:12:3f:86:f6:65:61:c1:63:
b2:83:e4:cf:3f:20:c6:d6:fb:50:bf:bf:6a:59:f9:
2b:a0:6d:f0:cf:5c:b8:5c:0d:5f:4f:c8:82:ca:1c:
5b:b7:ef:fb:c6:8e:c1:41:35:60:08:2d:8c:94:fa:
46:28:c1:5b:aa:e6:31:c4:05:57:c5:75:ab:82:9d:
db:d1:08:a0:93:c1:d2:1f:71:a3:2b:11:94:84:52:
4a:a1:0b:5f:41:1f:51:8d:12:d7:0e:c1:70:e9:61:
0e:5e:7d:8c:15:11:7a:8b:26:d0:1c:a5:44:cc:c0:
b1:71:6d:79:c7:d5:7b:16:ef:2a:9d:d7:02:f1:24:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:95:CE:93:96:22:20:B6:58:D9:68:74:7F:9C:BB:5C:74:C0:C7:B8
X509v3 Authority Key Identifier:
keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bb:0e:73:23:7f:ed:1e:9b:58:e7:fd:e4:83:43:d9:81:e9:
84:43:c8:08:a0:df:38:18:58:5e:30:dc:fc:88:a5:c7:9f:9b:
89:b5:17:cf:74:a0:a5:d5:81:f4:e9:b3:64:ac:47:dc:45:21:
26:f0:ee:b0:99:f6:96:36:a1:97:da:99:10:6f:00:eb:02:4d:
e0:9a:47:90:43:19:7a:9e:d5:1f:89:3b:33:8f:00:a7:8e:0e:
d0:58:e0:9b:a6:ae:27:a6:08:c6:31:77:2c:76:81:27:2f:9a:
c5:a9:bd:2e:44:54:04:2f:4c:24:14:8c:59:e7:63:2e:02:d3:
d6:e1:41:b2:01:f5:ab:97:85:33:f6:b0:9a:a9:30:19:4e:25:
99:41:80:05:9e:1d:03:25:f2:10:5c:1d:01:69:48:f6:f1:83:
53:2f:2e:b7:2f:92:06:48:59:ee:4d:84:50:89:ae:aa:2f:71:
7a:d8:ef:cd:99:a0:65:47:ef:9b:b2:96:79:1f:ff:59:e6:78:
d9:7b:87:b4:79:2a:bb:b7:3e:b7:0f:d2:8a:59:b5:f6:69:79:
09:83:31:9f:c0:16:37:61:e2:31:cb:56:4f:89:69:0c:0f:76:
be:72:d9:70:2f:a1:ef:c5:88:37:bd:b1:0c:2a:69:2a:13:d9:
5d:bd:2a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:44 2026 by rpki-client