Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier: HMe+KeC/SBTkLPjjM9W3tNSuU02Cqt+OtdMsNVF6cpo=
Subject key identifier: 11:6C:1A:2F:6B:D1:C6:D5:0F:6C:EF:34:29:BE:FC:26:46:32:6F:36
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial: 019D27DFE3E5C4A0CFDAE733F940393C869A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 02:01:17 +0000
Manifest this update: Thu 26 Mar 2026 02:01:17 +0000
Manifest next update: Fri 27 Mar 2026 02:01:17 +0000
Files and hashes: 1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: Y55Snc3uDKyCiKXsApiLOHgXvJZbGWy6ZOI1g4/k6Q0=)
2: lmzI8mKK7VNK4bS0BEeEZ9whyrI.roa (hash: V1SxHQwjwN4AmdXg8rhG9lnM2vuDDx2mOA2my+gG8OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e3:e5:c4:a0:cf:da:e7:33:f9:40:39:3c:86:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
Validity
Not Before: Mar 26 02:01:17 2026 GMT
Not After : Mar 27 02:01:17 2026 GMT
Subject: CN=116c1a2f6bd1c6d50f6cef3429befc2646326f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:70:bc:cc:76:92:66:94:3a:30:9e:79:3d:
15:82:42:0b:f3:ab:1d:7e:fb:77:4d:02:54:87:c3:
04:d3:c1:69:12:b3:10:19:64:4d:7d:78:09:4d:ec:
fd:b2:95:7b:e8:dc:2d:e7:df:9c:7f:a8:ed:b5:0f:
87:dc:5c:ed:14:6f:38:1e:f3:26:91:ef:76:ba:af:
50:da:35:92:8d:c1:fd:29:07:38:e9:1b:b6:29:e8:
18:aa:9f:84:8a:e4:94:3c:e0:09:39:15:cd:22:af:
1d:61:cd:2e:03:a3:22:54:3c:f8:e5:86:fa:40:1c:
60:19:9a:5e:ac:db:c3:02:6d:ad:ed:47:6d:e7:db:
6f:57:c9:03:63:aa:5f:63:0b:ba:95:75:b0:0c:f6:
22:c9:75:8b:8f:c2:0b:e0:c8:59:1b:9d:6b:af:1b:
c9:96:15:31:91:d0:f0:7d:67:28:0a:14:85:c0:47:
33:ef:f6:4e:1c:92:d6:98:05:18:54:43:de:17:ba:
3b:0f:9d:cc:aa:d6:de:29:77:f5:2d:2f:28:09:5f:
2e:37:7c:2e:d3:ee:df:17:dc:27:5e:96:b6:2e:87:
b3:5b:b6:b2:71:b0:d1:b5:cc:4f:fa:ee:f7:69:32:
2d:40:eb:fa:bb:96:d9:10:af:1b:7d:06:31:40:28:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6C:1A:2F:6B:D1:C6:D5:0F:6C:EF:34:29:BE:FC:26:46:32:6F:36
X509v3 Authority Key Identifier:
keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2e:58:6b:bf:4e:68:77:76:58:d0:e0:65:e7:55:99:79:3d:
f9:6f:d2:26:14:9a:dd:ed:a8:18:3c:cc:e4:1c:81:1c:73:ff:
5b:ad:4b:f7:f2:2d:c4:c7:b8:5e:85:28:e6:66:8b:b3:35:20:
dd:b4:f6:70:0a:06:4b:74:c3:da:cc:62:e7:9f:3b:b2:7c:7d:
ef:70:83:ae:4f:3f:82:86:f9:c3:c8:f5:8c:9b:59:8a:30:3c:
3a:71:d8:64:7e:18:7e:9e:be:8f:1b:3c:8d:3d:32:55:57:75:
79:50:83:66:65:61:13:66:34:26:71:27:f7:47:19:c1:b1:a0:
8b:f3:e1:aa:b0:41:19:89:91:e3:f4:5b:76:bb:bf:53:d5:ea:
53:f1:7a:dc:fa:5a:48:1a:9f:02:c5:6d:3a:7c:a1:4a:0e:4e:
1a:e8:91:4b:c3:b2:5c:e3:03:85:92:b8:57:f7:ec:4e:95:4d:
66:7c:d0:41:b8:66:ec:90:3c:5c:6c:14:49:8f:76:24:ce:f1:
f3:dc:3f:18:58:44:d7:bc:7b:61:ce:cf:1a:3c:12:0a:69:6d:
88:88:94:d2:b9:cc:10:f8:56:7b:40:c2:77:d6:7e:b1:7b:9d:
fa:01:74:c2:e1:67:2a:8e:dc:43:8f:42:6d:3f:17:5a:d1:30:
b4:00:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:06 2026 by rpki-client