Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File: FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier: 3EjzG+A3tBgCpK7HyNKvsprasmbUoItYRnBK6/Ndxc8=
Subject key identifier: A4:75:6F:8D:8B:FD:D4:24:B2:C8:0B:58:0A:37:9A:74:55:4F:F5:36
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 019D27E02DFDC5224DF75CCF6132FD056748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number: 10C6
Signing time: Thu 26 Mar 2026 02:01:36 +0000
Manifest this update: Thu 26 Mar 2026 02:01:36 +0000
Manifest next update: Fri 27 Mar 2026 02:01:36 +0000
Files and hashes: 1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: taoN4fi8BgtUryN3kcxT73yRYEIFfYVfzDOdxatPf6I=)
2: uqh5vzYZR8kX59fW4ktNNDTjJJM.roa (hash: Q1Pg0MQt19v7W47q/hykMRMDeFtrQ4HcqUWfZqD3sPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:2d:fd:c5:22:4d:f7:5c:cf:61:32:fd:05:67:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: Mar 26 02:01:36 2026 GMT
Not After : Mar 27 02:01:36 2026 GMT
Subject: CN=a4756f8d8bfdd424b2c80b580a379a74554ff536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:63:4f:84:45:89:93:d9:2c:33:d4:ec:1b:
63:aa:a9:74:e7:d9:f0:5e:ee:0d:28:cc:a9:8f:89:
cc:bc:63:fb:43:a0:2b:1c:bc:28:42:cf:d7:7d:7b:
cd:9d:e6:0d:92:e0:f8:3f:d3:c7:d5:80:2c:85:3c:
bb:6b:bf:66:15:36:e2:2a:fe:07:b5:8a:2f:f8:3f:
8b:2c:d8:4b:65:da:17:d7:e1:5a:45:c0:ba:40:04:
7e:7b:60:5c:12:c9:7f:e8:f0:da:c2:94:52:dc:d6:
c7:08:4c:2d:04:d9:9c:a9:28:d0:2f:7a:f6:ef:b6:
61:8f:26:b5:31:d1:7b:40:92:90:32:57:d7:ff:a0:
ee:84:ff:63:47:32:22:34:9a:06:30:f4:ea:f7:ec:
fd:e5:3d:d0:88:62:a8:16:0e:9b:d6:10:d3:d8:23:
05:2e:bc:0c:90:ca:23:79:bb:46:37:01:62:02:b4:
3b:85:6a:ea:1c:39:75:b7:5d:76:99:24:66:d3:15:
97:b1:63:1c:9a:ef:35:23:dd:cb:82:54:2e:81:9a:
fb:a2:95:01:61:c7:09:7f:3c:4a:61:68:2d:68:ad:
35:92:4d:13:d9:a7:13:f8:b1:b8:c2:2b:96:04:cb:
a7:2c:37:ef:b1:31:d3:53:7a:03:4d:74:93:3a:c2:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:75:6F:8D:8B:FD:D4:24:B2:C8:0B:58:0A:37:9A:74:55:4F:F5:36
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:28:77:19:8f:4b:f4:06:77:0c:03:6b:f3:cf:8d:be:27:d2:
01:59:c6:ed:0c:a3:78:3f:60:d2:53:7a:ed:11:17:d6:65:00:
3a:08:8d:31:cc:fc:ce:f8:c3:96:df:e9:0d:bb:01:9e:80:c7:
5b:58:70:40:29:8a:18:5a:f9:e6:5f:57:3d:55:b6:7b:02:72:
3b:c6:dc:3c:e6:c4:4d:7b:2a:03:d7:5e:29:b0:5a:2a:30:e8:
0d:51:4f:60:c8:95:14:d6:21:e2:e3:71:f3:3a:bd:91:fe:0e:
5e:6e:cb:ab:5c:d1:dc:13:e4:05:72:dd:16:b1:bb:91:8d:d6:
3d:3f:75:74:6c:54:ec:97:3d:b7:6c:37:19:73:8a:58:4b:f3:
c0:41:c6:23:43:bc:70:4b:04:b6:70:b0:c1:c2:bd:d7:68:37:
b0:b6:c9:90:ac:3d:ba:79:a6:2b:df:e0:e4:02:7e:07:03:95:
b8:98:bc:44:df:e0:b2:a6:1e:a2:62:75:c4:18:09:c6:9b:ae:
39:d2:72:a9:80:bc:69:57:98:5b:3a:8b:aa:81:07:a0:c0:4a:
16:bb:92:3b:d5:da:76:37:21:f8:d1:d1:9e:59:04:3a:c6:7c:
5d:f5:2b:d1:2c:3d:27:12:5e:73:ef:e7:4a:c3:59:e1:83:80:
90:30:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:39:30 2026 by rpki-client