Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File: FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier: 06UQP2rOwX2lyCd37c7uBYFIYdpTvKBwvU5i3w6Vs94=
Subject key identifier: FB:9B:C0:2D:20:B8:65:51:2E:93:6E:38:ED:96:D0:57:4C:94:A5:B8
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial: 019D254C72C396F91B92A38A5D8B629B6813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number: 0B29
Signing time: Wed 25 Mar 2026 14:01:00 +0000
Manifest this update: Wed 25 Mar 2026 14:01:00 +0000
Manifest next update: Thu 26 Mar 2026 14:01:00 +0000
Files and hashes: 1: 1uN-f7Pe3Yoax_Gy67R47bHTZtU.roa (hash: MsQhz6+if76h/AmIW7u+uBAwg92G7zeCMFsByKAoJ9g=)
2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: 175fTF31JPLqOURy0aRxQTCZdgCR86yJZcK/Nxn9fcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:72:c3:96:f9:1b:92:a3:8a:5d:8b:62:9b:68:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Validity
Not Before: Mar 25 14:01:00 2026 GMT
Not After : Mar 26 14:01:00 2026 GMT
Subject: CN=fb9bc02d20b865512e936e38ed96d0574c94a5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:3b:9d:8b:b7:94:b2:74:b3:24:51:20:80:
f1:0f:bd:d9:31:96:41:4a:2e:64:0d:8d:3f:8e:45:
37:6c:55:aa:73:85:dd:81:c9:d6:31:be:33:84:65:
22:c2:aa:30:39:32:a1:8e:ca:56:60:5d:0a:b6:cd:
df:11:17:af:04:df:8c:3f:dd:44:0b:b5:07:fa:7e:
20:60:d8:ab:bb:75:85:c2:96:da:22:c1:9f:22:ad:
b0:21:38:8d:ca:ce:b9:82:93:76:6f:31:0f:89:7d:
b1:d2:be:08:33:41:0a:e1:22:41:4a:fc:f7:86:93:
8a:67:82:9b:a6:de:84:1e:77:44:3e:05:1e:4e:1e:
3e:24:64:69:e5:e5:38:a0:8d:72:cf:b4:1b:c5:4f:
25:19:ba:4d:c2:fd:84:9a:56:65:94:67:ae:2b:ab:
fe:b4:8d:23:8f:dc:b9:29:ef:0a:89:90:1c:6f:32:
9b:67:18:1f:84:34:9b:ac:57:cb:87:63:20:2a:e6:
d0:e0:5f:70:6a:fd:42:84:4c:77:67:9f:f4:39:2d:
09:a8:43:26:9c:80:90:8e:ca:d1:c3:cc:36:1f:97:
9f:9c:8b:11:d8:05:6a:fb:44:63:2f:5d:a4:dc:90:
4a:33:d0:83:58:7d:44:23:07:b7:de:5d:0a:dd:c3:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9B:C0:2D:20:B8:65:51:2E:93:6E:38:ED:96:D0:57:4C:94:A5:B8
X509v3 Authority Key Identifier:
keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:20:e1:f8:b9:87:13:16:77:de:09:4d:bd:35:59:b0:6b:97:
e0:7d:ec:ee:2d:40:08:18:63:0e:16:9d:6d:03:b3:28:74:57:
40:7d:76:e5:82:51:78:3a:3c:6c:c1:eb:c1:01:ef:f2:48:d3:
97:11:79:7a:84:6e:38:8d:ec:69:38:65:fb:9a:24:b2:7d:f3:
9c:9f:65:e2:da:d4:d9:81:d9:d2:51:c8:4d:a2:22:e5:13:69:
b0:be:eb:b4:6e:3c:6f:66:72:f5:76:10:b4:cc:c0:74:70:24:
0e:da:b9:5a:1e:1e:81:f0:34:3c:c7:dc:87:ca:a9:c8:6d:bd:
8b:f0:ba:46:c5:d4:00:76:e2:b4:ae:38:61:c6:b7:f5:7c:63:
04:09:90:27:f7:76:ff:7e:8f:0a:58:bb:31:02:0e:fe:e0:b1:
69:8f:ef:55:1c:c2:d7:bd:bd:ed:b8:eb:d7:8a:8f:7a:a0:18:
40:72:a1:aa:dc:63:4f:b1:57:7e:72:b5:53:1e:29:fd:88:16:
cf:d5:81:aa:6e:92:18:9a:dd:14:a6:2e:a9:b2:1f:67:da:1d:
51:44:25:23:81:1d:08:27:5f:ff:4e:4b:02:d4:b4:46:96:1a:
90:7e:ff:1b:82:50:58:7f:77:f8:1c:d6:1c:60:3b:ee:05:99:
c1:cc:a1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:29:43 2026 by rpki-client