Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier: KlERb8kQUPp7S24dPX2ZMJ2/U+Mkt6zACPk8Kqf8l3A=
Subject key identifier: 6B:61:85:51:37:02:84:EE:F0:FB:09:7D:B6:CB:1F:EB:9B:5D:54:BC
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer: /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial: 019D2996DC1881FEB4C264427917BD4DDD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number: 1157
Signing time: Thu 26 Mar 2026 10:00:45 +0000
Manifest this update: Thu 26 Mar 2026 10:00:45 +0000
Manifest next update: Fri 27 Mar 2026 10:00:45 +0000
Files and hashes: 1: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: sM7sTxmlXY72YFS+cTTGsd/goD7w9hMTKVhmjsUMFp8=)
2: ThEbdNyMjZlPcirKDdAqyJZ_IQw.roa (hash: CGthBA4HArt69dssvy/GYBuP0JxNG1Tkx2gronzpD3M=)
3: Y8VofECg6XDRc7kBDxvZBE-ydHI.roa (hash: 5sI62v5HRBdxoauH9VhzHWAJkQqiRWMnuYGerEaV4nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:dc:18:81:fe:b4:c2:64:42:79:17:bd:4d:dd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Validity
Not Before: Mar 26 10:00:45 2026 GMT
Not After : Mar 27 10:00:45 2026 GMT
Subject: CN=6b618551370284eef0fb097db6cb1feb9b5d54bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:18:28:e2:ad:8c:8e:d3:a5:e9:63:59:ee:
b1:03:0b:2b:33:1e:9d:f8:13:ef:2a:e7:a5:2c:db:
f4:ed:7c:7c:ec:e2:ee:52:bf:8e:81:33:e5:12:61:
12:04:ef:31:93:1a:63:c9:5d:c2:30:2b:6c:7b:d0:
c4:43:3f:8f:97:9f:5e:01:ad:ec:e5:28:3c:97:2f:
88:ba:4d:7c:c4:ea:4a:c2:80:d5:f2:bb:43:23:52:
8a:37:c6:a5:c6:8c:42:7a:93:7d:28:46:fc:52:14:
ff:07:fb:bc:ee:13:d0:c3:f4:c7:37:98:fe:30:6e:
4e:97:c8:07:ad:33:60:9b:56:6d:44:aa:42:3f:2f:
a1:e5:f8:b4:23:82:aa:05:c8:87:77:f5:f6:a4:78:
73:92:7a:4f:7e:77:d5:ca:ad:e3:be:9b:a6:a1:e7:
ab:b0:49:d2:ef:a7:1f:69:49:47:8d:05:e3:48:fe:
72:63:99:c9:f3:1e:3a:ec:88:23:ed:06:01:8e:11:
e9:7c:9b:5e:e0:bb:0c:fe:e9:a2:1a:ae:a8:8f:48:
d7:d0:d1:35:a8:de:dc:d9:3b:88:2b:44:0b:0e:da:
d1:d2:86:a8:5f:e7:de:cf:91:b2:8c:53:da:6f:a5:
08:39:c4:4e:90:00:d2:68:b9:06:a5:67:da:2a:2a:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:61:85:51:37:02:84:EE:F0:FB:09:7D:B6:CB:1F:EB:9B:5D:54:BC
X509v3 Authority Key Identifier:
keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9f:b9:12:78:dd:db:9c:3f:20:da:6f:7c:a9:57:19:b4:70:
35:c1:36:03:23:be:88:a1:22:c6:21:60:66:e3:10:26:dd:35:
51:13:ce:2f:93:9c:fb:27:33:b1:48:d8:41:46:e2:19:9a:90:
86:f2:16:ff:ac:92:98:c6:bf:f6:50:6e:f0:cf:2f:19:c3:45:
ec:f1:c3:f1:23:33:38:db:8b:eb:a4:cf:64:8a:c6:c6:01:95:
99:74:1c:13:e8:4c:c2:09:46:b0:9e:2c:a0:55:e7:4f:2c:7e:
55:b4:fb:a1:e3:83:a0:69:dc:47:15:69:ae:94:fb:8b:c6:8d:
38:9b:34:0f:e2:ae:a7:68:a5:d4:a1:ef:68:8d:7c:d5:16:61:
0c:36:77:a1:d9:42:d0:be:15:7b:62:d2:ce:8e:cc:84:fe:d6:
2c:ea:2c:85:e9:5c:85:94:36:de:a7:18:a9:82:fc:c8:90:68:
8f:ab:86:25:cf:2f:2e:97:12:eb:df:65:f1:72:46:29:69:a3:
95:2b:44:dd:b4:4d:20:34:41:bd:64:c8:93:60:c3:41:82:55:
07:98:2b:38:7a:3a:ed:02:9c:ed:43:23:46:bf:62:5b:7d:c9:
90:51:72:59:aa:27:5f:52:00:ca:f7:49:5c:b8:75:ff:0e:d9:
5c:34:67:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:31 2026 by rpki-client