Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: QfkkDqSDhFpM47mVIcDcfmOiV79IVmvBmq2m5qRNdaA=
Subject key identifier: C9:5A:A1:E2:B4:9E:1A:DA:28:DD:87:40:8D:D3:15:7D:1D:EA:6F:AF
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 019D273B0DD0D6EB8CFB93D2407DFA2057DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 1834
Signing time: Wed 25 Mar 2026 23:01:14 +0000
Manifest this update: Wed 25 Mar 2026 23:01:14 +0000
Manifest next update: Thu 26 Mar 2026 23:01:14 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: GZzraLa+CYCrF/yKVUYZECXhGz1iAjKPPnBNfLslxys=)
2: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (hash: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298=)
3: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (hash: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:0d:d0:d6:eb:8c:fb:93:d2:40:7d:fa:20:57:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Mar 25 23:01:14 2026 GMT
Not After : Mar 26 23:01:14 2026 GMT
Subject: CN=c95aa1e2b49e1ada28dd87408dd3157d1dea6faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:e2:5f:4e:59:55:a2:45:58:36:29:ec:f0:
f8:7c:93:be:5a:4a:83:66:4d:4c:fe:5c:04:88:0e:
12:69:fc:84:12:60:25:b6:16:96:54:14:80:6e:35:
cd:d8:73:3f:af:c0:58:ea:79:99:73:ba:50:0b:93:
6c:45:93:dc:71:af:d5:dc:a4:64:41:00:a6:7c:df:
da:02:8e:28:84:24:27:f8:29:cf:08:36:d2:16:d6:
33:6f:a6:9a:10:d7:89:b5:64:93:ac:95:9e:71:0f:
c0:98:c8:a0:8e:33:6a:c7:c0:20:f7:77:22:2d:98:
95:d2:ef:21:81:bd:9e:ab:ec:b0:1b:49:2b:47:9e:
7b:a6:86:75:00:75:7b:a9:29:75:74:ac:fb:4f:f4:
fd:6d:e4:76:4c:33:38:58:da:26:cd:c3:16:4c:78:
7e:7c:f2:c5:85:4b:00:af:0d:df:5b:e6:fc:7f:ac:
b3:e3:eb:82:c5:1d:5b:e3:16:b0:2a:18:a3:6c:99:
a4:4d:f5:69:71:62:28:ee:c0:1c:22:4b:3b:b4:92:
60:73:d0:d7:7f:4c:27:b5:a5:04:00:b2:f7:51:c1:
1f:a3:b8:5a:49:b9:2a:99:1b:93:2a:fd:86:98:9e:
8f:df:b3:73:5a:c2:fe:fe:11:01:14:f3:26:b8:d8:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5A:A1:E2:B4:9E:1A:DA:28:DD:87:40:8D:D3:15:7D:1D:EA:6F:AF
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b1:36:3a:4e:59:4a:10:2f:fa:80:46:84:f5:74:66:b4:d4:
a8:5f:d8:a3:47:34:0a:34:e9:69:32:49:d8:a1:73:34:e4:75:
4b:72:4b:3b:87:36:07:0e:d9:30:c8:d7:14:f9:d4:43:2e:c8:
0b:00:14:f2:50:35:12:1a:1b:6e:a7:28:ed:a5:14:63:c5:18:
8e:2e:58:f2:9c:f7:ec:d4:03:70:26:85:66:07:16:15:cd:37:
c7:5b:db:68:f9:4e:5b:22:f5:1e:23:63:3f:b8:11:e6:40:89:
15:60:76:62:9a:01:bf:9a:6c:04:8f:33:2f:fd:f8:9f:7f:7c:
c7:15:28:74:a0:5a:f4:3d:e0:7c:67:4e:a7:06:da:ae:37:31:
8b:41:54:30:f1:f0:9a:84:e2:f6:2f:a0:9a:c2:37:da:1f:b1:
1f:51:38:4c:28:17:6c:88:b4:1f:33:f2:4b:9f:a6:b7:39:db:
ce:aa:fb:ae:fd:43:5b:cb:56:61:3e:42:93:90:ae:51:b9:eb:
e8:d8:b6:a5:5f:ad:84:98:f7:fc:2f:a5:fc:47:e8:72:fe:20:
78:3d:bf:b3:8a:ff:bc:8f:a9:12:c6:d1:48:33:44:0c:4e:37:
05:5f:a5:5c:23:9c:7b:cd:2a:95:ad:a0:c5:db:c3:76:19:3e:
b3:4e:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:43 2026 by rpki-client