Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
File: FseIv2PBqcecEUVP45bScWqh03g.mft (raw, json)
Hash identifier: SqI57sE+ppk3vM4TCD3HPJKzEL80cdlzbKWca+r/r/Y=
Subject key identifier: A8:11:1D:78:6B:2B:E1:1C:89:CB:28:BD:19:A7:F5:BC:14:32:9F:A5
Authority key identifier: 16:C7:88:BF:63:C1:A9:C7:9C:11:45:4F:E3:96:D2:71:6A:A1:D3:78
Certificate issuer: /CN=16c788bf63c1a9c79c11454fe396d2716aa1d378
Certificate serial: 01A0D19302474A64BD9B18C632966F3AA21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
Manifest number: 021C
Signing time: Thu 24 Sep 2026 04:01:07 +0000
Manifest this update: Thu 24 Sep 2026 04:01:07 +0000
Manifest next update: Fri 25 Sep 2026 04:01:07 +0000
Files and hashes: 1: FseIv2PBqcecEUVP45bScWqh03g.crl (hash: JBCH3xS1msmeUWI23BA/dfk08OS9c4a1C15a5iqcf90=)
2: nDmReaPTunv3rpuf20ug4JkPOgU.asa (hash: /CHUZ8GEsPydRB6nZOopJhNQ8frWrOhKD8Z1ZQifie8=)
3: r0ErFB9jCD4xbUhMnw9fU4li-3o.roa (hash: g57/KRcIS2omYrdJOqYvOIP4Higa58DGPvJrJE8+WvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:02:47:4a:64:bd:9b:18:c6:32:96:6f:3a:a2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c788bf63c1a9c79c11454fe396d2716aa1d378
Validity
Not Before: Sep 24 04:01:07 2026 GMT
Not After : Sep 25 04:01:07 2026 GMT
Subject: CN=a8111d786b2be11c89cb28bd19a7f5bc14329fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7a:61:58:08:a9:36:e7:0d:96:ab:75:b9:4f:
47:2c:92:fd:c5:91:82:6f:08:d7:75:aa:e8:de:fe:
a0:6b:28:fa:38:f5:0c:21:19:13:2c:6b:46:c0:c4:
1b:fe:da:42:d4:d0:c6:05:49:f2:30:32:f5:d2:fd:
1e:17:1e:29:9f:21:ee:3a:ee:5c:bd:2c:84:97:bc:
8d:ff:14:b4:de:4c:fa:10:b6:9f:c1:ed:d8:e6:ea:
6e:c8:43:ef:65:0f:be:d9:6b:a0:49:39:05:b9:ec:
a4:e3:ae:b8:c2:06:5e:b8:b3:4b:e7:d1:5e:2a:20:
b5:a2:d3:80:ff:39:4c:d1:f7:ec:37:14:72:69:61:
ed:f7:2a:b3:c0:70:a6:16:b3:3a:27:65:3a:a5:57:
6d:16:cf:94:8a:d2:98:b2:b4:e2:d2:19:44:c9:17:
39:b7:fc:93:0b:16:82:a1:53:42:1a:3a:15:f7:e6:
62:3b:66:38:21:3e:42:e5:02:4d:19:70:96:3a:81:
1a:5e:ea:53:bf:b0:4a:07:a4:9e:64:e9:fa:42:b1:
c0:53:ea:ec:b8:82:9b:ad:7e:4a:26:46:67:88:8e:
2d:2d:5f:6d:ac:a1:12:24:40:eb:38:57:a7:b1:41:
d2:7b:66:fb:00:5b:66:90:1f:7a:76:1a:9a:86:07:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:11:1D:78:6B:2B:E1:1C:89:CB:28:BD:19:A7:F5:BC:14:32:9F:A5
X509v3 Authority Key Identifier:
keyid:16:C7:88:BF:63:C1:A9:C7:9C:11:45:4F:E3:96:D2:71:6A:A1:D3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ac:19:48:2b:1e:c7:60:c1:f1:60:b2:d8:5c:8b:ae:a5:35:
de:77:30:3e:03:1c:fc:d0:c4:fa:de:d1:79:fb:52:ea:45:55:
58:e6:7c:03:b8:2a:06:7c:f9:bf:ea:b8:95:64:57:c9:84:81:
5d:e5:f9:88:b8:e9:46:ff:00:5e:f2:17:bb:3d:bf:c3:c4:a6:
f2:bb:b9:20:89:df:d4:a2:59:05:40:90:18:ee:64:97:f7:da:
5a:f9:71:38:37:2b:ea:51:e9:da:c7:ab:d3:40:b0:6e:64:c8:
68:24:bd:95:01:d1:29:c2:37:2e:35:a0:c1:1c:2e:94:c3:8c:
f3:e7:f9:7e:41:d3:de:a8:49:ec:ef:66:80:9f:d1:db:cd:09:
ad:e7:1e:2e:2d:91:0d:8d:96:73:88:19:c9:81:a9:44:90:a6:
3c:3d:35:77:a1:94:2a:52:d8:54:0b:c8:1b:1f:5c:bb:fa:61:
c0:68:34:3d:bc:59:bb:1e:ed:cf:ba:59:fd:ac:b8:30:a6:ed:
e3:57:3d:88:0e:5e:28:5a:af:04:32:8d:1e:f3:37:a5:34:d2:
1c:e7:e5:cc:6a:ca:58:dd:17:bf:53:ab:03:f5:af:7d:32:82:
9e:a2:d9:6e:e3:8a:8c:ed:bc:4d:5d:c5:a2:73:b2:06:83:fc:
f3:be:d2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:26:49 2026 by rpki-client