Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: i/ptUN4rdsq4VdigKObPSQnQi3D6lOEugsSfAwms8/c=
Subject key identifier: C6:06:65:EC:4E:02:49:F6:64:AF:48:B1:CF:C7:34:7A:A2:94:FD:F4
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 019D2AA93A28A187E28823EB469687DEC65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 15:00:26 +0000
Manifest this update: Thu 26 Mar 2026 15:00:26 +0000
Manifest next update: Fri 27 Mar 2026 15:00:26 +0000
Files and hashes: 1: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: ruxD2a8MaYoYwuElm2mwGVx5qmh1M78dYhd7wtrzAQ0=)
2: SZG8XeixTaqiVxW5rJUPZ8oUaFs.roa (hash: 1YSVd0Zexb+YYuPe7vCuTagdfSqZISFbptqFWf/HX9o=)
3: wpxxQF5AabypL-KTlSZ22CF0FgQ.roa (hash: LcmjGoMQfmQ0l8r/PAIze2pDnlI+sA44Nszwtlprn+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:3a:28:a1:87:e2:88:23:eb:46:96:87:de:c6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Mar 26 15:00:26 2026 GMT
Not After : Mar 27 15:00:26 2026 GMT
Subject: CN=c60665ec4e0249f664af48b1cfc7347aa294fdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:3f:e9:9d:ad:d0:5f:30:f4:45:87:90:d0:
43:58:49:4f:43:ac:54:48:25:68:f5:3c:63:34:d3:
55:16:cc:6b:44:b8:c7:5e:ac:f8:6e:2f:75:1d:57:
d6:84:07:d7:f1:37:24:65:db:ff:63:5f:d0:ac:d7:
3b:af:61:29:17:aa:47:92:4b:d2:88:c6:28:42:ce:
c8:d5:6e:b6:93:fd:a4:90:4b:4a:f7:31:01:30:0d:
02:32:a0:74:0a:e3:3d:f7:f8:0a:93:f8:55:c0:c7:
18:33:80:44:60:b1:c1:61:a4:25:f9:78:e3:62:8f:
15:6a:64:7b:df:64:c5:ae:5c:7d:f4:0a:ec:cc:42:
27:28:b6:80:04:09:d6:b6:3c:17:d6:51:f7:7a:62:
e3:d6:c1:97:73:1c:fe:f9:eb:ef:34:06:03:e7:6b:
aa:52:71:2a:85:ba:ad:6b:6a:99:eb:b1:53:b0:b7:
30:49:bc:d9:b8:ae:36:d0:48:63:bc:f1:f0:0d:1d:
25:5d:95:99:87:1b:cf:0a:3b:8f:02:ea:1e:2e:92:
e6:e0:2f:73:52:e0:87:8f:02:4e:1f:50:c4:c1:45:
25:35:e6:74:43:40:ec:de:a7:bd:68:8f:e6:fb:e1:
b5:93:b4:96:11:ae:81:28:21:f0:c9:62:d0:3c:94:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:06:65:EC:4E:02:49:F6:64:AF:48:B1:CF:C7:34:7A:A2:94:FD:F4
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:de:48:1b:26:f4:98:b8:39:fd:9e:75:84:7e:36:5d:06:b1:
a9:f5:07:78:3c:1c:4b:e4:23:93:88:6e:1c:39:c4:31:30:39:
bc:15:74:6f:86:94:c9:a7:dd:8e:c5:29:dd:9c:9e:7e:1e:7d:
eb:21:bb:43:d1:ee:4e:6c:f7:d2:36:ba:4f:41:5a:b4:7d:23:
74:6b:ab:0d:af:09:75:ab:9b:98:2a:d9:cc:bf:12:d2:b6:b3:
39:83:4d:62:2f:28:6f:ec:ba:53:b9:29:cd:f5:5f:aa:cc:55:
be:1c:eb:ef:23:e2:f1:d9:d8:f3:01:1a:f0:1f:a0:a6:59:63:
2c:e3:ff:e0:43:ba:7d:96:05:7f:bc:6a:cd:ab:65:07:5d:8d:
78:71:cb:cf:c3:c7:10:25:45:c2:6b:a5:1f:d6:f1:d5:5a:61:
a3:56:78:da:ac:c7:72:6a:b1:5c:dc:6a:44:b3:00:ce:ff:69:
93:e9:fa:e7:be:4f:50:ec:29:c6:7e:12:43:f8:89:42:5a:74:
db:2e:1d:e8:fc:d6:bd:29:72:6f:0a:83:f2:36:4c:e5:fc:94:
bc:9f:ed:1c:81:f1:ee:9d:38:3c:bb:ce:98:36:b9:60:95:dc:
81:78:56:ab:77:76:89:fe:91:b6:36:41:c7:c5:48:99:94:69:
ac:c4:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:25 2026 by rpki-client