Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier: Q110Dar6u7Q1UtNLugmycqz7Z2f7BU5mfg9xKg04Me4=
Subject key identifier: D5:7C:E5:7A:00:D1:46:30:A0:A4:44:12:F4:4C:D5:ED:E5:2A:C6:4C
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer: /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial: 019D27A8B774554679E704F7207ED67FF299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number: 1156
Signing time: Thu 26 Mar 2026 01:01:01 +0000
Manifest this update: Thu 26 Mar 2026 01:01:01 +0000
Manifest next update: Fri 27 Mar 2026 01:01:01 +0000
Files and hashes: 1: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: ZxWCN1UWx+ifBJc+uWgC/Bxh9lGdxHuVfgR9lA3HXuQ=)
2: ThEbdNyMjZlPcirKDdAqyJZ_IQw.roa (hash: CGthBA4HArt69dssvy/GYBuP0JxNG1Tkx2gronzpD3M=)
3: Y8VofECg6XDRc7kBDxvZBE-ydHI.roa (hash: 5sI62v5HRBdxoauH9VhzHWAJkQqiRWMnuYGerEaV4nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b7:74:55:46:79:e7:04:f7:20:7e:d6:7f:f2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Validity
Not Before: Mar 26 01:01:01 2026 GMT
Not After : Mar 27 01:01:01 2026 GMT
Subject: CN=d57ce57a00d14630a0a44412f44cd5ede52ac64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:d4:8c:ce:a8:f9:74:7a:28:66:9d:f3:a4:
4e:30:87:37:cb:4c:2b:ee:98:a4:ca:36:f2:6a:5c:
28:95:73:29:25:9f:a0:3c:c4:8e:79:8b:1f:b2:5d:
44:32:9e:05:1b:23:00:48:74:23:26:11:58:8d:f7:
f3:2e:77:45:50:76:ee:1b:2d:df:61:5a:56:0f:39:
a9:a9:d7:d7:80:76:f9:2e:65:4e:51:5e:1c:c1:4f:
8e:9a:9f:66:19:09:c3:25:a5:3b:34:8a:ed:b6:4a:
c0:31:50:0c:12:8f:5b:6a:7a:b3:5b:ae:cc:b0:82:
e8:37:71:e8:ab:e8:83:cb:fd:3f:52:e1:eb:b3:9e:
72:0c:97:d0:96:44:72:3b:5e:ce:de:ab:8d:ca:fa:
08:ab:10:a7:ea:8f:a7:59:c8:ac:12:94:a4:5e:c2:
fb:b4:88:ce:50:96:df:d4:7e:a5:06:63:7d:36:f3:
64:c5:1a:e5:21:8e:be:6c:9f:02:84:68:52:13:77:
4b:fb:1f:b5:34:35:4b:12:e1:5c:05:af:95:7e:7b:
e7:77:be:9b:ef:9b:0f:9b:dd:83:34:38:ad:0e:c1:
22:56:0f:b5:b1:ab:4f:4d:39:a8:5b:97:22:fb:17:
12:4b:57:33:23:b6:94:b4:de:a2:20:f9:ed:28:8b:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7C:E5:7A:00:D1:46:30:A0:A4:44:12:F4:4C:D5:ED:E5:2A:C6:4C
X509v3 Authority Key Identifier:
keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:34:19:76:7b:e1:d3:ac:bc:08:bb:ea:34:58:b3:f3:bc:71:
95:30:68:aa:bf:49:4d:4c:8f:c6:44:dd:0d:ec:36:0c:a3:63:
27:54:be:7f:4c:15:b8:35:89:f1:b4:52:76:09:89:d7:30:ab:
ce:59:3a:fc:3e:f8:39:b2:eb:e9:dd:69:ea:00:47:ad:4f:c5:
4a:50:b7:19:fc:a6:4a:2b:aa:69:8e:cf:f3:50:f6:b9:63:e8:
32:86:59:41:7f:4c:e7:77:8c:36:e0:3b:34:44:39:f9:44:ab:
c0:42:9d:f5:2f:ab:b3:64:5f:01:2d:25:b9:0a:50:40:92:60:
88:85:34:9d:47:98:5a:91:8c:02:bd:ea:11:60:88:a1:54:21:
2d:72:2f:0b:06:f9:87:9d:8c:a3:f6:d7:1f:0b:0f:64:5d:5e:
9b:1f:dc:a2:d8:10:42:41:37:5e:aa:64:01:05:53:4f:4e:e1:
29:19:03:40:d8:50:61:c2:25:30:62:be:f2:54:fb:94:11:64:
bc:82:78:37:57:14:f2:9e:f0:28:c3:5c:25:a0:fa:d3:8f:32:
36:2e:3c:46:4e:21:6e:7a:82:a4:53:75:4c:e0:b9:af:ba:3f:
a1:a0:6c:e2:1f:22:16:cc:26:ff:d9:89:c4:b1:14:13:cd:54:
f0:81:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:26 2026 by rpki-client