Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
File: Fas-cvc0DahW6T1i7o0CPx18juc.mft (raw, json)
Hash identifier: qbufA5bgqPwTPO1wfQqmyWcnNcjXJfJ0LjXXI6uFL1I=
Subject key identifier: 60:E6:32:8F:A6:91:D0:E7:B3:D7:C7:B6:5F:C9:3C:E8:43:39:37:65
Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
Certificate issuer: /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Certificate serial: 019D29616B862D62007BD9DCC1C128223A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
Manifest number: 0DCD
Signing time: Thu 26 Mar 2026 09:02:23 +0000
Manifest this update: Thu 26 Mar 2026 09:02:23 +0000
Manifest next update: Fri 27 Mar 2026 09:02:23 +0000
Files and hashes: 1: 3qA4FQIUtzDs5t_mEHhNZORgMfU.roa (hash: GH+TqQvh17FK/3T+3gQp0M00LakHIoZrhZmY+Sn7jQw=)
2: Fas-cvc0DahW6T1i7o0CPx18juc.crl (hash: EsSiF6SrKjIxzL4+Fxg4os+h39MrUE56Mo7+3oH2914=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:6b:86:2d:62:00:7b:d9:dc:c1:c1:28:22:3a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Validity
Not Before: Mar 26 09:02:23 2026 GMT
Not After : Mar 27 09:02:23 2026 GMT
Subject: CN=60e6328fa691d0e7b3d7c7b65fc93ce843393765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:9f:e4:6b:b7:c9:bd:9b:e1:3b:8e:f1:91:
a2:44:4f:00:77:c7:ed:0a:68:c8:dc:b2:df:fe:ee:
d1:b3:48:68:46:2f:28:42:95:eb:37:e7:a2:db:ff:
42:c9:93:a3:6b:5e:05:ee:9c:88:cc:05:09:6c:68:
11:ba:74:22:64:60:12:27:c8:65:b9:10:53:65:3d:
dc:94:fe:4b:18:0f:28:b9:b5:14:1e:18:ac:c5:36:
3f:fa:b5:7f:9b:c3:29:5a:81:e6:22:29:c7:23:30:
0b:22:26:91:ba:82:28:c4:00:0a:ce:33:77:3b:bd:
40:ab:35:1b:d3:67:a9:e0:ce:50:ba:cf:68:f5:af:
6a:d6:4f:96:c7:8d:32:34:db:d2:45:c2:e1:3d:c7:
84:f2:ef:83:d9:25:59:7a:ab:05:8a:10:bf:90:1c:
a4:6c:5e:8c:df:a2:d4:04:f1:18:ef:27:15:4a:e8:
14:9f:fa:53:1e:2a:b5:3c:97:fe:66:e8:11:00:c1:
fe:9f:73:f3:b9:40:16:a6:f5:1a:d2:6d:54:da:5e:
87:fd:56:a0:da:6a:d8:d9:3f:df:98:83:b5:55:78:
5f:14:76:bc:ba:33:18:a8:74:64:96:ad:4d:21:e7:
88:11:3a:ee:8b:ba:55:45:39:f6:7d:88:82:c1:d9:
48:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E6:32:8F:A6:91:D0:E7:B3:D7:C7:B6:5F:C9:3C:E8:43:39:37:65
X509v3 Authority Key Identifier:
keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:62:2c:fe:8d:42:7b:63:a5:ac:33:29:bd:1d:00:ef:5f:7c:
94:30:cd:da:18:a3:6c:5e:25:97:4f:52:20:7a:01:99:c2:42:
33:3c:3b:a9:31:0c:5a:af:a0:53:1a:11:3d:ff:24:cb:cf:ac:
47:b9:68:60:c5:e9:79:75:88:07:0a:dc:6f:34:97:19:e1:07:
46:d3:8a:11:27:8c:b6:3e:11:8c:41:9b:31:e5:6c:ef:8e:dd:
a3:6d:2e:12:ef:4f:47:7c:cd:73:96:d4:18:6e:8e:85:e7:c5:
57:b8:42:57:88:c6:a8:c2:90:62:06:a9:20:62:b6:34:81:b4:
a0:1a:7e:21:c8:be:4c:73:93:80:f5:66:f9:cc:27:4c:b9:34:
67:ad:58:9e:26:4f:8a:1b:7a:2f:69:0b:6d:b4:06:3a:c8:28:
e0:9d:43:ae:23:3e:da:a9:18:34:e8:ed:88:9f:2c:fa:48:ff:
06:35:70:8f:2d:3b:37:b3:71:a9:35:a6:7b:f0:f4:2c:82:ae:
fc:a7:98:25:1d:91:47:bd:b7:62:5a:dd:1b:3d:27:09:c3:7a:
04:32:b1:e0:0e:1b:53:1b:e7:be:c3:f2:6b:52:bc:24:a5:b4:
05:e5:a9:36:53:d8:39:50:e5:14:5d:e5:45:59:74:83:29:6e:
c5:f2:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:43 2026 by rpki-client