Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
File: FXaJHPKx2OxWwDvHqW3pWKDgADI.mft (raw, json)
Hash identifier: leK+oxRU1k4IKIq9QrPo4iRXcKVoNSGhyaoGe3oUGLU=
Subject key identifier: 09:1F:47:FA:37:F6:71:1C:6A:92:B2:4E:FB:98:E7:A6:D1:53:40:1F
Authority key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
Certificate issuer: /CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Certificate serial: 019D26CD2028FB4D0D7633F2DC70839BC002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
Manifest number: 062F
Signing time: Wed 25 Mar 2026 21:01:10 +0000
Manifest this update: Wed 25 Mar 2026 21:01:10 +0000
Manifest next update: Thu 26 Mar 2026 21:01:10 +0000
Files and hashes: 1: FXaJHPKx2OxWwDvHqW3pWKDgADI.crl (hash: /6Nf7wwPKbn7hxYuZuCeNBnm0h1frj5K7Sde/Ii4WSw=)
2: IeSw-4bcio5RXnwbEa4KykMgwOY.roa (hash: OoWXczxt8RFsumILUeDSej8qKitlw3VHsPcYq7wi388=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:20:28:fb:4d:0d:76:33:f2:dc:70:83:9b:c0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Validity
Not Before: Mar 25 21:01:10 2026 GMT
Not After : Mar 26 21:01:10 2026 GMT
Subject: CN=091f47fa37f6711c6a92b24efb98e7a6d153401f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:da:21:c8:9d:3f:3a:44:f8:a6:c1:ae:38:
ae:e8:d9:66:b3:e3:39:f7:24:40:0a:b0:cf:a0:9a:
da:00:7d:06:00:5b:a5:7c:a1:97:e6:6d:dd:66:14:
18:5e:b1:81:fe:66:89:51:52:d1:69:d7:5f:3a:90:
7e:96:49:43:6c:cd:69:66:99:24:86:70:ce:0f:89:
f5:0e:d0:31:3a:18:67:ef:65:d5:d0:09:ca:8f:53:
c6:f3:6a:6e:a0:93:d5:79:a2:8e:2e:37:8e:72:19:
f8:15:1e:11:95:6f:91:3a:73:50:c9:d0:1b:6e:05:
d7:9b:2f:ce:59:b1:2a:c3:7a:fc:b9:49:99:58:5f:
08:b3:a3:e6:b2:1f:42:7a:a7:be:ca:ba:5f:b6:55:
d2:e9:16:b4:0f:ec:0c:a7:63:ca:32:6d:10:76:75:
0b:ae:8d:0b:04:f8:0e:04:fc:61:54:1e:77:12:9a:
4a:94:60:ad:11:5c:74:e9:d0:2f:3f:ad:40:56:f2:
74:d3:c9:d9:14:56:68:d2:07:49:b7:de:61:bb:84:
28:76:e5:fc:15:2c:65:60:30:e1:0e:d7:48:2e:1b:
80:56:3e:5c:00:ba:95:83:19:c8:d2:77:7c:61:17:
a6:2c:c4:06:d6:c4:f1:ae:47:99:f8:dd:6a:2b:a5:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:47:FA:37:F6:71:1C:6A:92:B2:4E:FB:98:E7:A6:D1:53:40:1F
X509v3 Authority Key Identifier:
keyid:15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d4:e9:70:39:26:85:e0:01:49:23:a1:10:54:6c:c1:4b:c8:
21:ee:2f:a2:50:8b:1c:ec:df:1c:01:40:ea:02:90:42:56:17:
80:b2:e0:b6:d7:f7:5e:38:aa:a5:fb:53:26:d8:a4:86:1a:12:
6d:bf:98:6c:39:1e:a6:7e:77:13:96:29:16:e0:fb:ca:0d:ba:
67:b0:67:16:ef:3c:6a:7d:cc:91:d2:09:e1:1f:32:4b:7e:ee:
69:86:23:b5:09:fe:e4:0e:4a:07:de:4f:ba:72:70:7c:74:07:
3b:88:1c:b3:f3:02:38:b2:ba:dd:2d:c5:eb:7a:24:81:65:4e:
f4:d5:43:e3:f2:f7:1c:e0:6a:79:f0:70:4c:2a:5a:35:ee:de:
ed:38:a5:af:75:7c:ce:bd:64:25:db:e9:d7:27:8f:66:9f:b0:
3c:5a:2a:5b:2d:4b:20:18:ad:fe:32:1f:53:a7:86:8a:72:ae:
85:f4:4c:55:e6:20:37:1d:52:74:ab:c4:9a:1b:d0:7d:73:3e:
d2:4f:ad:aa:12:a7:77:99:a3:e4:f1:fe:5c:aa:3c:96:ec:40:
b5:e4:81:13:3e:ed:bb:fe:e2:23:8e:68:b3:ad:65:ef:39:c8:
25:ba:b6:9a:d7:b2:ce:3d:45:cb:15:18:30:b9:3a:2e:e4:eb:
a5:c9:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:36 2026 by rpki-client