Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
File: FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft (raw, json)
Hash identifier: qIr4D/aAzCzeGIte096Gi1XLpvjWp577nk+nh4J8Nzs=
Subject key identifier: BF:D5:C0:39:4E:88:97:23:91:FB:65:6A:46:A6:0E:53:D6:15:9C:A1
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial: 019D27A87F1894939E95916929360F9EA635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
Manifest number: 0539
Signing time: Thu 26 Mar 2026 01:00:47 +0000
Manifest this update: Thu 26 Mar 2026 01:00:47 +0000
Manifest next update: Fri 27 Mar 2026 01:00:47 +0000
Files and hashes: 1: 1-Gi0WglfPEDkKdexDXnKU5N07dg.roa (hash: 6gCrfLIveiynT67NWLBkqnoTcS/eVVpbgxDQ/v8TVK4=)
2: FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl (hash: Ma8v87nXIf30+73JGqG7XJRYUtSuw14u1przv7CFCaI=)
3: f84vJw7wG4ISORQxAMD5iiMwEgg.roa (hash: XaUoU6IIIIA7AtaKVBXhP/8omy3ZC6BdNEc6ogpNveA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:7f:18:94:93:9e:95:91:69:29:36:0f:9e:a6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
Validity
Not Before: Mar 26 01:00:47 2026 GMT
Not After : Mar 27 01:00:47 2026 GMT
Subject: CN=bfd5c0394e88972391fb656a46a60e53d6159ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:cc:c6:5c:c4:f8:af:fa:8c:a6:2c:e2:79:
d2:92:1c:64:33:f4:4a:22:ba:6a:2f:1d:53:64:9b:
73:b6:83:1c:4c:37:03:4b:1d:dc:80:fa:16:20:eb:
2d:7a:a8:01:73:00:74:13:ff:bc:9e:14:68:4f:70:
77:ab:32:99:4c:95:64:e5:f0:af:fc:5c:48:de:31:
eb:69:95:df:f5:10:07:81:f3:09:55:82:ff:4f:f4:
83:0f:ae:e9:f0:2d:08:ba:04:4e:b9:87:72:de:58:
62:7d:38:16:27:24:9b:33:64:f3:bc:c9:36:a0:fd:
df:5c:0c:8c:88:b7:d5:1d:1a:12:58:56:70:55:05:
5f:fb:b5:f8:90:7a:f9:da:7f:61:32:23:14:59:bb:
0a:85:76:e7:b1:98:0d:9b:ce:97:84:6b:6c:48:8e:
c9:ce:7e:f3:fc:b6:5a:4e:3a:79:21:3b:93:e5:a3:
eb:32:a7:02:97:b4:30:99:ad:14:47:4d:af:b8:66:
00:32:28:b9:4e:4e:2a:e9:04:ec:f6:55:93:04:95:
54:10:1e:96:8b:c0:19:e2:63:e0:ec:e7:fe:1d:28:
6a:c3:00:ba:42:fd:4e:1d:89:73:94:fb:85:5b:ab:
8d:9a:81:af:b9:7a:49:1d:77:ad:7d:ef:5a:42:be:
b3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D5:C0:39:4E:88:97:23:91:FB:65:6A:46:A6:0E:53:D6:15:9C:A1
X509v3 Authority Key Identifier:
keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:03:90:0e:44:be:85:90:35:13:b2:ef:74:5f:a2:29:77:83:
23:7a:40:85:70:07:85:ad:a6:ad:d6:40:b4:db:f3:b6:92:5f:
16:a2:3b:6a:77:88:89:4e:9a:1f:9e:4d:18:4f:4d:03:63:88:
fe:de:50:e1:72:e0:e0:d9:d5:2d:4d:44:78:c1:28:f8:b3:87:
02:aa:cd:7e:6e:b0:fe:30:bc:d5:f6:bc:d4:0e:17:97:42:a5:
f2:7a:49:c0:ae:93:87:84:fc:fb:0b:2f:14:69:71:cf:c2:40:
1f:1d:b0:3e:db:d7:c1:fd:28:fc:70:b6:a1:4f:a7:29:44:3d:
79:8b:d6:3e:05:cd:78:18:17:21:0c:98:b8:6f:51:5d:fa:53:
bf:d6:a4:26:60:3d:06:72:0e:f0:f9:f7:72:0e:8f:76:59:ef:
54:25:17:30:bb:5b:72:4a:fc:fa:40:9a:f1:ee:50:72:d6:b1:
78:69:23:eb:72:cb:1b:6e:aa:4d:c4:23:f5:54:e0:c4:39:dd:
02:0e:eb:2f:97:4b:25:a8:0c:25:65:f8:18:2f:4b:28:4a:ed:
28:0c:28:7e:9b:6c:32:a8:fe:42:8f:f7:e3:34:fa:a2:64:29:
e0:e9:06:a8:71:86:b6:5d:38:95:26:8b:94:1f:3a:8d:67:ab:
61:93:44:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:59 2026 by rpki-client