Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
File: FMEnKYgtb8xADSTHoWGR6_ea064.mft (raw, json)
Hash identifier: lj5ZrWCTb0GWN41APifqnUs5jZR5cj7ZtTSI2wLiqN8=
Subject key identifier: DE:0F:B5:BA:16:E3:C5:88:2E:51:C1:77:1D:92:6B:BC:8E:05:1A:B2
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Certificate issuer: /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial: 019D2772BF7D3DC2EF268B9D4A51E3E1CE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
Manifest number: 1821
Signing time: Thu 26 Mar 2026 00:02:04 +0000
Manifest this update: Thu 26 Mar 2026 00:02:04 +0000
Manifest next update: Fri 27 Mar 2026 00:02:04 +0000
Files and hashes: 1: FMEnKYgtb8xADSTHoWGR6_ea064.crl (hash: uUnXXgfbzYmpbrC7sb5CWa7BEdMVLyAEsWkrBd+M2z4=)
2: aqcC1Xw1GlkHwNfJpV5G96B6Y14.roa (hash: gyAassRslHqQmsAqTMeUZ/It9+daVRU3z5BUBwSorZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:bf:7d:3d:c2:ef:26:8b:9d:4a:51:e3:e1:ce:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Validity
Not Before: Mar 26 00:02:04 2026 GMT
Not After : Mar 27 00:02:04 2026 GMT
Subject: CN=de0fb5ba16e3c5882e51c1771d926bbc8e051ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:98:12:2a:53:8e:34:00:af:41:10:98:65:
dd:f4:ac:4a:12:28:81:b1:3f:f7:6e:e7:bd:58:0d:
5c:fb:8b:91:cf:37:be:ba:b9:03:ff:f3:18:02:0f:
69:c0:8d:14:bc:33:66:68:f9:66:77:9e:c7:dc:db:
6a:44:b0:f8:7a:ab:67:75:4b:92:7e:97:db:da:4b:
11:fc:77:7d:0f:4d:7c:11:84:a0:e9:b5:29:33:bb:
f8:04:d8:43:12:f3:3f:c3:4a:31:a6:3b:0d:0f:40:
c7:0e:94:b0:2a:61:8f:63:f7:8c:c3:ec:95:20:f8:
88:b6:5f:9e:c1:28:66:9a:11:79:31:2e:93:76:15:
6b:f4:2f:0b:c7:48:5c:3f:bd:68:1e:00:fc:61:ef:
65:a3:2e:33:79:a7:8c:a8:e6:e3:41:42:2c:42:64:
f0:66:c1:72:be:92:63:02:e1:03:59:8d:15:8d:91:
cd:a2:70:77:af:a2:c9:a6:56:27:3e:24:b8:d4:70:
a8:36:a7:20:fd:03:e2:a3:c9:6e:3d:57:df:05:e6:
cf:9a:6f:ef:18:41:98:93:bd:1c:34:e7:84:75:7c:
8e:c7:99:c8:4c:6b:fa:82:2b:73:b3:71:80:c8:6e:
fb:23:f5:94:1b:94:8b:f3:04:61:d6:79:20:3e:08:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0F:B5:BA:16:E3:C5:88:2E:51:C1:77:1D:92:6B:BC:8E:05:1A:B2
X509v3 Authority Key Identifier:
keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2d:b4:6a:3c:29:db:a2:2d:1c:83:e4:b7:b2:8c:b5:9a:a6:
f7:8f:ca:d8:fe:73:ac:11:3d:50:d7:ed:84:b5:90:06:2b:d8:
7a:cf:6f:bf:77:fd:36:9c:d7:ea:20:c3:d4:0c:87:78:c3:5c:
54:07:c8:9c:4f:23:c0:d3:86:08:3d:9a:82:21:ab:17:2a:11:
d0:77:ee:20:ee:9a:88:cd:c8:03:fd:ac:59:c8:85:98:f9:ec:
e3:31:66:ab:88:2e:0c:43:ca:12:b6:dd:a3:b9:bf:73:b9:c7:
29:06:6f:e1:8b:4e:d3:de:36:d4:03:7b:20:2d:ab:bc:7c:0d:
5b:d7:78:df:b1:e4:31:1c:41:6e:43:88:7d:da:96:84:e5:52:
0b:ae:fc:29:3c:0c:ec:66:28:38:13:97:ae:cf:27:09:28:0e:
ea:89:71:46:4f:f4:b4:de:84:bf:ae:cf:df:63:e1:90:9e:65:
b7:a4:fa:6b:8c:5f:a5:46:63:98:ba:f5:d9:7c:9a:11:7c:a8:
54:65:83:ca:0c:8e:18:1f:92:fe:53:93:5e:6e:c4:bb:d4:22:
28:32:f2:22:1b:32:12:8c:7f:df:94:3a:61:4b:54:49:38:50:
1d:87:f3:bb:00:eb:85:86:2b:f4:25:94:fb:77:3d:2c:d9:52:
c5:2b:28:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:46 2026 by rpki-client