Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
File: FgRPZYu8kicHhfe7ByrJNolfSTM.mft (raw, json)
Hash identifier: pwDAakG6PxBkki5szdfDX8IFGY0mpEbHJSY0KNqn5/0=
Subject key identifier: 99:29:62:B4:19:44:A5:E1:BC:13:1F:EC:28:EC:C7:6D:5B:5D:B8:88
Authority key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
Certificate issuer: /CN=16044f658bbc92270785f7bb072ac936895f4933
Certificate serial: 019D2772D580D58E1D36B0C77A2F3617D288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
Manifest number: 011B
Signing time: Thu 26 Mar 2026 00:02:10 +0000
Manifest this update: Thu 26 Mar 2026 00:02:10 +0000
Manifest next update: Fri 27 Mar 2026 00:02:10 +0000
Files and hashes: 1: FgRPZYu8kicHhfe7ByrJNolfSTM.crl (hash: ZT00B6qLP1zLOMfHzTzrRnKOB9BGl+w+Ro+QRBy9SYs=)
2: WatKg_0MoVqhZNrvrktjemd-kkU.roa (hash: HB6mZ1x55io1eH3g2s4HymshoqNX8HC4t8plzzNViRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d5:80:d5:8e:1d:36:b0:c7:7a:2f:36:17:d2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16044f658bbc92270785f7bb072ac936895f4933
Validity
Not Before: Mar 26 00:02:10 2026 GMT
Not After : Mar 27 00:02:10 2026 GMT
Subject: CN=992962b41944a5e1bc131fec28ecc76d5b5db888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c4:b6:73:05:43:09:f6:fc:55:6d:69:0f:63:
59:5a:fa:b6:10:27:db:31:ed:ef:f0:08:94:f6:c4:
83:54:df:0b:90:50:34:d1:0e:5e:c8:0c:c6:75:66:
64:14:cd:0d:f0:99:54:2c:34:1a:af:49:57:f7:ac:
f9:7b:02:e8:a9:89:45:4a:e7:2f:09:f4:24:47:0f:
8d:3b:f6:71:fb:96:d4:09:db:e8:59:23:38:5e:81:
5e:b5:78:68:88:44:cf:fb:8a:19:12:1d:33:59:9e:
17:b8:20:d6:88:4d:e2:64:bc:aa:e3:59:df:e2:c4:
ea:00:1a:e8:97:34:6a:0d:b2:36:22:59:36:eb:bd:
c1:cc:a5:03:33:f0:39:b3:82:a6:da:57:f4:e7:c8:
0b:d6:19:35:82:81:f4:1e:42:75:a1:8b:5a:bd:94:
c5:d6:6a:13:be:47:d6:79:b8:8b:d6:24:49:7f:67:
95:1c:70:be:82:24:8d:54:ab:cb:b4:6b:4a:24:d4:
54:f1:c4:1f:c7:c9:e4:13:86:f4:db:1c:e4:b6:a5:
d6:f1:8f:cf:f9:29:9a:47:a9:2f:49:27:5b:a3:6b:
fd:23:1c:c0:c4:b1:04:7b:d6:22:f3:5d:20:7a:ef:
28:7d:76:9a:18:fa:f0:db:e7:93:2a:3d:e8:b0:e9:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:29:62:B4:19:44:A5:E1:BC:13:1F:EC:28:EC:C7:6D:5B:5D:B8:88
X509v3 Authority Key Identifier:
keyid:16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5c:91:b0:d9:f2:5a:be:ea:06:82:7c:21:3e:fc:82:3f:c8:
73:12:3a:2a:ab:4e:7b:67:35:ee:e9:fe:9d:43:25:28:6d:a2:
bb:be:15:44:04:3a:7d:a3:20:a2:ef:55:ea:c4:1f:d0:8d:55:
ce:97:7f:59:88:da:d1:39:0f:56:bc:ad:ec:5c:00:74:b1:09:
15:d7:14:18:f4:58:0f:2b:04:a3:bf:37:e1:54:af:a1:bf:f8:
1e:47:90:ff:37:17:8b:b4:53:a6:75:6b:77:26:ec:0c:30:a8:
e2:3a:ab:03:d1:ee:a1:b5:8f:49:fe:c7:3f:f1:b4:7e:31:62:
f6:f8:df:5b:71:cc:be:4f:c8:64:0d:12:07:fe:3c:41:0d:19:
cf:9e:87:92:96:99:f5:54:33:0c:dc:01:af:08:ad:af:b5:3a:
8c:a5:f1:2a:54:20:30:dd:3f:15:39:75:0a:69:eb:2a:61:33:
e6:4f:8f:c8:01:3c:96:2d:1f:b9:60:d8:2f:e7:5d:e5:76:52:
41:ea:78:0f:ef:a0:69:8b:45:fd:4d:4a:a7:7e:9a:25:8e:e2:
40:c4:2d:da:ee:cf:bd:2d:fd:bf:a6:40:90:d5:0a:7e:e3:d9:
ba:d8:45:73:3f:f9:79:7c:b4:c4:6b:51:d1:ce:96:34:ea:6b:
47:10:6f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:46 2026 by rpki-client