Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
File: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft (raw, json)
Hash identifier: d7LrU75ZMZ2EqHn9y/PfKcsZQL5bvmP8zN8KYui1lqE=
Subject key identifier: 32:40:DE:39:3E:0B:60:A6:01:FD:B0:38:92:F4:6C:77:02:76:27:74
Authority key identifier: 16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
Certificate issuer: /CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Certificate serial: 019D2A7297D91B643D1AAF05537BF21496BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
Manifest number: 0D50
Signing time: Thu 26 Mar 2026 14:00:45 +0000
Manifest this update: Thu 26 Mar 2026 14:00:45 +0000
Manifest next update: Fri 27 Mar 2026 14:00:45 +0000
Files and hashes: 1: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl (hash: jIeIhqPA/a8hruzejpS6nEq5tRs6sCQR270o7qWP1Ko=)
2: FyoBSzsu3AEspQ8gNao5uNadIZI.roa (hash: zGRU/uV+JjFR+4PQQsHLeqPX3jRtUeV1goXtigjNlCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:97:d9:1b:64:3d:1a:af:05:53:7b:f2:14:96:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Validity
Not Before: Mar 26 14:00:45 2026 GMT
Not After : Mar 27 14:00:45 2026 GMT
Subject: CN=3240de393e0b60a601fdb03892f46c7702762774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:fe:96:78:ac:ce:d9:10:cb:d2:d0:98:12:
a6:0c:83:fe:8e:2b:12:21:ef:c0:f7:69:a1:15:0d:
d0:00:3c:66:83:ac:ff:5d:1c:67:75:8e:16:4e:d7:
69:d7:5c:ed:77:23:01:59:2b:62:cc:e2:22:94:57:
f9:dd:7f:bd:22:3c:67:35:ff:2e:44:49:a7:eb:3d:
c8:11:92:71:a4:a0:1e:65:29:2c:60:57:62:4b:ab:
b4:ae:35:84:1a:e0:d6:a9:ff:b1:8d:83:b9:c5:48:
83:9f:0e:32:5d:60:30:4f:43:1a:4a:53:c1:f0:9a:
37:aa:1a:5e:82:10:c8:5e:03:01:38:4f:33:20:04:
74:95:fc:2e:6a:7b:6a:2b:eb:98:5a:0c:5f:29:73:
34:4e:f0:2f:4c:a6:48:a7:0b:d6:c1:a4:66:dd:fd:
d3:e1:7a:8b:f0:08:2a:13:b6:03:7d:03:e4:f1:2b:
a2:4c:57:b2:d3:2c:8f:2b:31:3d:9c:ca:4e:8f:b8:
f9:e6:a6:51:60:d9:9c:c4:06:9b:c5:19:c0:72:fc:
b8:13:95:28:50:09:e1:2f:62:ed:7d:6a:9f:64:d9:
27:a5:b2:da:e4:4e:6a:cf:01:8f:dc:1e:a2:49:9c:
a9:58:66:14:d9:bb:39:67:c3:cf:11:99:17:74:42:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:40:DE:39:3E:0B:60:A6:01:FD:B0:38:92:F4:6C:77:02:76:27:74
X509v3 Authority Key Identifier:
keyid:16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3e:b8:b0:16:2a:d5:58:36:8e:e5:85:52:1a:ae:87:35:86:
91:a5:9f:b5:5d:45:99:3d:89:43:53:c6:2f:c7:96:ef:02:f3:
65:f9:a1:22:2e:d0:07:cc:9c:2d:51:2e:64:d5:60:db:ee:8c:
4c:08:f3:af:f0:81:b0:6c:8d:9e:9d:28:96:a2:7a:35:ac:c5:
3d:a3:33:1b:58:9c:52:ea:58:ce:2c:6e:aa:96:87:49:dc:29:
67:7f:89:e1:86:e9:23:a8:ea:42:16:56:65:c3:77:06:1f:0a:
90:5b:e2:a0:3e:0d:ff:0f:2a:cf:09:0a:f0:27:69:ae:c2:2c:
bd:6c:b9:a8:a5:73:de:4e:d7:36:f5:61:3a:24:ab:f1:c9:ce:
0d:33:dd:2f:f5:71:66:f1:13:1f:5c:4c:6e:97:9a:bd:36:00:
9e:dd:0e:9e:52:02:f4:d4:d2:0d:d9:4f:f4:1b:94:b0:93:3a:
8d:3a:bb:4a:ab:24:b1:79:3a:1e:5b:dc:5a:ea:5f:48:25:05:
ad:40:5b:6b:d2:41:e5:a8:88:c6:5b:84:e5:f7:db:c9:f0:b6:
68:7e:ba:5c:85:04:c1:bd:e9:ad:b1:bd:31:db:b9:4a:d7:cc:
73:e6:20:7d:0d:67:b4:f3:c8:e9:a0:10:00:f7:49:f2:07:fd:
9c:48:1d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:53 2026 by rpki-client