Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
File: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft (raw, json)
Hash identifier: NYDTaU8k9AHwXIh+KdlCJpvvn5Or2/2IT5SSM48y/7o=
Subject key identifier: 31:A8:98:D3:4E:E4:BE:16:B2:7A:0F:2B:85:C4:C9:C5:82:5F:B9:F9
Authority key identifier: 17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
Certificate issuer: /CN=171bfdd42fa9484f56e189ba683d5188c524083b
Certificate serial: 019D265F03E462CA2DA6ECCC8DBB16652FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
Manifest number: 02ED
Signing time: Wed 25 Mar 2026 19:00:54 +0000
Manifest this update: Wed 25 Mar 2026 19:00:54 +0000
Manifest next update: Thu 26 Mar 2026 19:00:54 +0000
Files and hashes: 1: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl (hash: CUZ5KiWg/bJ5uZu7OP3vOHetjXGgyZw+9DfJYFuo1mo=)
2: Juzj2uWFNNcGNxZgq6Ns5mV8eN0.roa (hash: 43m9udxpd/q88DzOc722p98By6DFIuMj99m1Ii2HfgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:03:e4:62:ca:2d:a6:ec:cc:8d:bb:16:65:2f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171bfdd42fa9484f56e189ba683d5188c524083b
Validity
Not Before: Mar 25 19:00:54 2026 GMT
Not After : Mar 26 19:00:54 2026 GMT
Subject: CN=31a898d34ee4be16b27a0f2b85c4c9c5825fb9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:13:6d:74:9b:02:62:a9:fd:bc:60:7e:38:
ff:ef:57:2a:72:d2:0f:14:d6:db:b1:3e:26:b1:ae:
0b:6f:59:fd:2a:6b:84:e2:10:c0:23:68:23:15:b1:
c6:03:b0:ec:4e:77:b7:07:77:4d:41:ff:20:37:e6:
ab:26:95:eb:74:52:83:6a:78:67:4a:d1:4b:7c:eb:
3e:64:cd:e3:83:be:4d:3f:b6:39:eb:3e:12:df:4b:
40:08:28:04:27:30:e9:15:3b:6f:56:b8:60:f4:4c:
84:9d:88:db:00:99:29:91:62:f8:ab:8a:03:cd:14:
79:5b:30:b5:2b:44:a0:44:6a:6b:83:b2:fb:5e:32:
00:c0:a7:4e:71:a6:3a:87:ab:82:fb:22:4c:1c:90:
bb:d1:c1:4b:a6:37:9e:cc:bd:53:43:f0:7c:45:c9:
97:a2:f0:49:02:61:73:ff:4e:00:b1:2d:c3:ee:db:
9e:0e:27:b5:ad:ad:e3:da:ce:48:ad:4f:5d:7d:76:
bc:22:e8:f6:f3:5e:f7:6d:a3:1b:9a:f8:a7:95:85:
ed:57:30:d9:ab:7e:d8:8e:4c:dc:53:74:85:dc:c0:
e8:1b:dd:35:72:f3:d2:83:e7:f9:fa:33:c3:7f:d4:
d1:54:17:07:60:ff:21:ad:ed:87:a3:3d:9a:3f:56:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A8:98:D3:4E:E4:BE:16:B2:7A:0F:2B:85:C4:C9:C5:82:5F:B9:F9
X509v3 Authority Key Identifier:
keyid:17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:86:a8:76:11:ce:ed:77:79:ae:ab:0f:5e:fc:88:58:a2:75:
67:01:1c:42:5b:d5:39:e8:2d:9c:21:e3:28:bf:b5:53:11:6e:
c7:c4:c0:0e:bd:ee:41:cc:47:78:24:9c:df:4a:60:d2:d7:e6:
c0:8f:62:c4:d2:a0:2f:07:b8:f4:77:6e:d4:7b:e9:c2:06:af:
66:f9:73:2b:66:ae:53:a5:3d:75:07:18:09:6e:6d:5e:2d:5b:
9f:07:47:e8:9f:67:88:d8:17:d5:85:9b:88:8f:bb:30:72:d8:
e4:2b:6f:39:4c:9f:91:cb:d5:8f:c3:4e:7a:b1:76:9b:70:e1:
b0:bb:98:dd:05:2a:4a:fd:c7:ad:92:bc:79:a3:06:c1:3c:a1:
c8:1f:05:b4:a5:ab:e5:92:6f:16:6b:0f:ed:b0:03:aa:8c:11:
99:cd:4a:3a:07:01:b7:b6:fe:74:fd:b2:4a:6d:15:a7:d7:07:
82:6c:fe:72:01:2a:25:5c:14:e8:1a:74:5f:be:08:cc:54:d5:
c7:e8:74:e5:05:85:2d:04:0d:0b:c5:04:88:c3:69:1a:46:b2:
30:60:41:eb:a8:42:d3:91:ea:b5:5f:6c:fe:50:a3:70:87:3e:
26:be:e6:dd:ce:b4:ae:0e:89:c1:51:6f:78:08:fd:7f:6a:31:
bd:7b:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:24 2026 by rpki-client