Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier: hXzoTKRWUP+WzpeIcS8MtgUcJ0JK3wA124hTiUv5u+0=
Subject key identifier: DE:C4:98:D9:E0:D3:DC:4D:FC:87:29:97:BC:1B:CB:B4:75:64:28:AA
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 019D28BB6F1E8CEB2227BF5EB462D58E0167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:05 +0000
Manifest this update: Thu 26 Mar 2026 06:01:05 +0000
Manifest next update: Fri 27 Mar 2026 06:01:05 +0000
Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: BgELXR/5Wcnv9Oa2i4XQGL6u3fSInRj9YiFrd7Dz3gg=)
2: MSXpcFJVWmFpep-wCgsZin8BaSk.roa (hash: ohEFObEZLYffE/U4SG8i1ZIGAH9G0J/KB4GeYQmg95o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:6f:1e:8c:eb:22:27:bf:5e:b4:62:d5:8e:01:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: Mar 26 06:01:05 2026 GMT
Not After : Mar 27 06:01:05 2026 GMT
Subject: CN=dec498d9e0d3dc4dfc872997bc1bcbb4756428aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:12:e0:0e:1a:1f:90:db:85:ac:46:47:0c:
ab:b4:93:9d:9a:db:de:37:e7:7e:eb:31:ba:b6:82:
d7:cb:b5:08:c5:32:2b:93:40:34:ec:29:63:d2:b1:
b7:b2:bb:d2:b5:a2:bb:50:99:3f:48:13:44:c4:a4:
f9:81:56:b0:83:49:ed:76:82:73:bd:7e:02:89:35:
97:7b:fd:54:e5:62:e7:98:ce:88:a0:a3:9f:0c:e3:
23:f6:ed:d6:c2:33:74:8a:55:3c:c0:7d:97:90:5f:
66:cb:ab:3b:a3:42:ff:6f:7e:ce:57:96:7d:29:f6:
dd:9f:dc:f1:ea:90:b2:c4:27:a9:0f:e6:34:2b:d2:
ea:b2:56:6b:12:fe:00:1d:8c:d6:29:ed:d0:82:70:
24:e5:89:25:eb:6e:4c:76:1f:00:c9:39:bd:cd:1b:
89:68:d4:57:86:8f:ee:4a:7c:fb:97:b1:30:80:5e:
02:c9:6c:01:09:a8:3c:bf:62:36:17:f4:fb:fc:50:
c4:23:71:10:c0:7f:81:c8:86:69:f8:17:2b:4d:94:
b2:4a:dc:14:d3:64:7c:93:c7:10:e1:a8:69:11:c3:
6a:dc:cf:f3:58:44:9b:8a:7d:a5:5e:4f:53:62:6c:
70:a6:54:3a:9a:5b:62:0b:9a:11:43:5d:39:b3:69:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C4:98:D9:E0:D3:DC:4D:FC:87:29:97:BC:1B:CB:B4:75:64:28:AA
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3f:9b:46:60:5e:3d:56:9a:36:35:18:cd:ae:bb:d3:9e:d4:
9b:97:c9:bf:3b:17:25:8e:4f:6c:39:58:1d:50:8d:fc:8d:b0:
08:21:33:6e:c9:f0:4d:a6:d7:d4:20:aa:57:55:30:b5:22:0c:
53:8d:f8:09:1c:b7:42:88:c3:c6:65:ab:2a:56:26:99:9b:5b:
01:35:69:d3:5c:21:25:06:7c:2e:28:97:b7:72:c2:53:03:a1:
2c:f3:cf:15:d6:fc:5a:64:75:4d:71:12:80:a2:d1:97:f2:53:
cb:cf:e1:2d:e5:cb:c2:6b:31:7f:d4:83:2e:9b:bd:02:d1:37:
e5:e2:a4:2b:5d:de:bd:3d:bc:c8:a2:e8:bd:85:a6:ff:3f:78:
56:3b:39:e4:79:9d:16:96:92:1d:7b:21:52:54:a7:ab:37:78:
4d:20:8b:36:d2:57:b9:02:45:7a:78:53:b7:09:cb:5e:86:99:
3c:9c:c7:45:2c:3e:fb:62:6a:b9:aa:a6:5a:8b:28:69:39:3d:
02:56:13:68:23:8e:94:01:3a:03:dc:a4:01:68:a3:ba:75:00:
4e:1d:a7:98:c9:d1:d2:10:37:ad:69:76:51:f6:b9:47:d2:8c:
7e:b3:6e:b4:96:c6:02:dc:ee:3b:f4:c6:19:60:db:d6:c5:b8:
98:e9:8d:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou28ejOsiJ79etGLVjgFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTVjNmY4MTVjNzBlZjE5MTBkMzc0OTM5NjM0NDVhZjkx
OGFiNTkwHhcNMjYwMzI2MDYwMTA1WhcNMjYwMzI3MDYwMTA1WjAzMTEwLwYDVQQD
EyhkZWM0OThkOWUwZDNkYzRkZmM4NzI5OTdiYzFiY2JiNDc1NjQyOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJMS4A4aH5DbhaxGRwyrtJOdmtve
N+d+6zG6toLXy7UIxTIrk0A07Clj0rG3srvStaK7UJk/SBNExKT5gVawg0ntdoJz
vX4CiTWXe/1U5WLnmM6IoKOfDOMj9u3WwjN0ilU8wH2XkF9my6s7o0L/b37OV5Z9
Kfbdn9zx6pCyxCepD+Y0K9LqslZrEv4AHYzWKe3QgnAk5Ykl625Mdh8AyTm9zRuJ
aNRXho/uSnz7l7EwgF4CyWwBCag8v2I2F/T7/FDEI3EQwH+ByIZp+BcrTZSyStwU
02R8k8cQ4ahpEcNq3M/zWESbin2lXk9TYmxwplQ6mltiC5oRQ105s2nl/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7EmNng09xN/Icpl7wby7R1ZCiqMB8GA1UdIwQY
MBaAFBSVxvgVxw7xkQ03STljRFr5GKtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYt
MjUwMDQyMDM2NmZiLzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYtMjUwMDQyMDM2NmZi
LzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz+bRmBe
PVaaNjUYza67057Um5fJvzsXJY5PbDlYHVCN/I2wCCEzbsnwTabX1CCqV1UwtSIM
U434CRy3QojDxmWrKlYmmZtbATVp01whJQZ8LiiXt3LCUwOhLPPPFdb8WmR1TXES
gKLRl/JTy8/hLeXLwmsxf9SDLpu9AtE35eKkK13evT28yKLovYWm/z94Vjs55Hmd
FpaSHXshUlSnqzd4TSCLNtJXuQJFenhTtwnLXoaZPJzHRSw++2JquaqmWosoaTk9
AlYTaCOOlAE6A9ykAWijunUATh2nmMnR0hA3rWl2Ufa5R9KMfrNutJbGAtzuO/TG
GWDb1sW4mOmNHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:18 2026 by rpki-client