Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier: 7rF3jszMUMOIT0addRoRFfnKdwThUJ19RdJgo9UeXDI=
Subject key identifier: 47:E1:BE:AC:10:8D:07:85:E4:1B:5F:75:45:A7:D5:71:5B:E7:38:0F
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial: 019D273B25BBDF5EEBE3D49D2F77D91E0A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:20 +0000
Manifest this update: Wed 25 Mar 2026 23:01:20 +0000
Manifest next update: Thu 26 Mar 2026 23:01:20 +0000
Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: qobw0xM5fALiMxoUqtWZV7IQdZNn++crFxZyy2wZYDs=)
2: Q9sYeL9y1OznxnC50ohiHoXs8Uc.roa (hash: aIxNkhwpmyzmF/3GFcRmbZ6fKr+QG1YWTaNKfwYICV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:25:bb:df:5e:eb:e3:d4:9d:2f:77:d9:1e:0a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Validity
Not Before: Mar 25 23:01:20 2026 GMT
Not After : Mar 26 23:01:20 2026 GMT
Subject: CN=47e1beac108d0785e41b5f7545a7d5715be7380f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:18:cd:e8:84:00:73:3f:02:84:31:32:a8:
d1:b0:41:c5:dc:e7:17:10:04:ee:be:73:4e:35:9a:
7b:51:d0:5d:3e:f4:a7:7f:1c:4a:44:94:0f:44:2f:
28:5f:23:0f:7c:b4:fe:75:73:ad:39:25:6e:88:b9:
cd:ca:fa:be:36:f5:e1:14:00:07:98:77:54:31:c1:
8c:3f:ad:e4:c0:58:c6:3a:f1:10:14:b8:2f:91:9a:
00:a1:b2:36:0d:a2:db:ce:76:a2:57:3d:5e:93:55:
85:f2:82:49:7b:68:2a:4f:fe:a2:4d:65:d7:bf:7b:
f5:a3:e5:fb:22:2a:90:70:01:9e:d7:23:80:ac:af:
63:e5:33:ae:22:01:2e:c3:ff:d7:ef:6b:9b:cf:17:
35:07:73:e2:f6:74:28:29:00:de:c5:bc:9a:28:f0:
38:59:85:55:45:e0:6d:d1:20:3a:4b:50:ff:f4:fe:
a4:c8:e2:8a:6e:53:32:42:9e:4f:43:38:35:ef:cf:
61:56:84:e0:24:81:dc:26:5f:e9:53:71:32:5d:44:
a3:5f:ac:b8:1e:2e:7f:94:65:1b:94:06:40:75:fe:
39:2c:f5:5d:82:6d:2e:c7:9a:56:09:b1:84:bf:fe:
42:ce:99:a2:1b:fb:4c:89:46:07:c9:cb:c4:75:9b:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:BE:AC:10:8D:07:85:E4:1B:5F:75:45:A7:D5:71:5B:E7:38:0F
X509v3 Authority Key Identifier:
keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:68:67:1a:47:ba:23:50:fc:17:fc:a4:b2:90:b5:60:d7:75:
42:80:4b:02:05:24:82:30:6c:ee:48:92:a1:62:9d:5f:6d:9e:
52:bb:6f:39:7b:44:69:c7:ca:68:b0:fc:d8:1c:01:08:26:b6:
42:3c:45:ba:ed:b9:52:31:7c:ad:fa:95:f2:d6:e0:60:2f:9e:
23:32:92:f1:0e:16:de:11:30:90:5f:07:19:a4:b7:13:8e:3b:
c9:29:f7:04:86:19:8c:fb:7c:06:66:65:54:45:c6:26:50:49:
22:7c:48:62:da:f8:38:44:b4:d9:d0:1b:c4:b9:f8:cb:c7:cd:
cd:cd:54:5e:cf:20:f4:3b:12:bd:43:3e:cb:1e:ef:ad:65:97:
62:fe:b9:85:2d:7d:ed:b2:39:f6:d9:97:ff:4c:f4:af:cf:46:
94:cd:67:e1:ac:0b:e8:67:71:d0:90:5e:60:1c:95:f9:2f:c0:
07:c2:95:99:7c:26:ba:b4:ac:c6:14:fd:e9:d7:68:b2:37:17:
9d:c5:4e:0f:d5:12:1a:f1:83:d9:70:60:51:a4:3f:48:fb:b7:
72:91:00:dc:8e:64:e0:ca:0d:5e:5a:19:3b:b8:3d:70:cb:27:
9f:41:81:ce:39:80:2d:1c:7b:25:5c:d1:f6:de:8f:16:9f:c6:
50:28:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:22 2026 by rpki-client