Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: PIq467nEv6dzgnyTvoEgRoaIlh/ZkcY5iPRVCVKmg6M=
Subject key identifier: 50:D7:2F:D0:80:9A:6F:0A:AD:BD:3A:1E:77:47:AF:77:8B:21:0F:CB
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 019D27A8AAD08EC2C82533B3835D0CE9BA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 175D
Signing time: Thu 26 Mar 2026 01:00:58 +0000
Manifest this update: Thu 26 Mar 2026 01:00:58 +0000
Manifest next update: Fri 27 Mar 2026 01:00:58 +0000
Files and hashes: 1: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: et6XCm5zbc5cQw9zR7RWbr2YlkXL+2LjGRcMlz+0nlI=)
2: xd3jG3HbjtG0MuzuTRaYxtTyNcw.roa (hash: zkFlgvRz6cw1Fnc2wE2R8kAE+e+wpIfkz9Qvftstx7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:aa:d0:8e:c2:c8:25:33:b3:83:5d:0c:e9:ba:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Mar 26 01:00:58 2026 GMT
Not After : Mar 27 01:00:58 2026 GMT
Subject: CN=50d72fd0809a6f0aadbd3a1e7747af778b210fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:5d:a9:25:87:9f:de:29:b2:79:bb:62:15:
15:21:de:eb:0b:7c:ae:a7:7d:7c:c3:6a:13:0a:35:
77:54:2e:31:5f:15:97:b7:d4:05:ba:9c:48:39:ac:
d1:cf:21:a7:86:0d:ef:48:03:8e:10:f8:99:0f:ac:
ae:b7:cf:ac:56:57:1b:8d:58:85:bb:29:03:19:a7:
0e:81:50:47:ae:cf:53:ee:11:7a:f9:2a:33:41:f9:
91:02:52:76:55:8b:7b:be:cf:a9:3d:28:5c:34:ea:
6f:e5:72:2b:1c:b6:fd:93:b7:6b:5e:4d:0a:18:6e:
a6:94:27:33:46:6c:30:2e:50:f6:e4:ed:87:e1:67:
20:ca:75:60:bd:16:e1:62:3c:0f:28:5f:a9:43:e5:
18:6b:69:54:db:1d:f8:8b:1d:a1:2b:65:14:ee:df:
57:06:5a:2c:47:a1:a7:75:9f:57:9e:cc:52:20:13:
f8:ee:0b:8e:7f:62:12:9b:2e:a9:6c:68:36:4d:43:
4b:c6:4e:62:7e:e1:5f:e6:18:e1:27:91:08:ed:d2:
24:eb:9b:d7:ad:a2:8e:16:50:22:10:04:c4:93:67:
78:ac:34:d3:17:2f:6f:70:67:c9:42:fc:58:8f:7b:
4a:11:12:a0:c2:3f:2a:f6:50:2d:25:dd:ad:00:a6:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D7:2F:D0:80:9A:6F:0A:AD:BD:3A:1E:77:47:AF:77:8B:21:0F:CB
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f3:86:7b:42:e7:52:87:61:d7:2d:be:ce:85:e8:44:b5:78:
8c:1b:67:7c:76:29:7f:37:7c:ca:4d:72:1c:18:1d:a9:4c:d6:
55:aa:97:f7:c6:27:8e:30:6d:27:48:24:c1:63:dc:20:cb:a7:
d4:2c:96:8f:3c:79:7f:51:d0:b6:47:f6:69:af:34:ec:24:23:
3e:43:d9:ab:f8:07:37:9a:33:13:99:2c:6b:13:d6:f1:3e:67:
53:13:96:77:10:5d:6a:b0:1f:44:7c:73:40:3d:ce:1e:6d:bc:
28:ca:4c:30:5d:43:34:ea:fe:67:57:e6:8e:75:3a:cb:09:a0:
50:84:00:4f:e7:2e:a3:a8:97:ff:0a:c4:f2:1f:4c:95:b6:ff:
ff:37:e9:5d:64:f0:b0:ce:0c:2e:7c:fe:72:df:b1:fe:66:79:
92:34:f9:0b:09:17:64:7f:24:6a:0a:4b:62:97:26:06:ab:f2:
4d:9d:90:34:18:45:ef:e1:c5:5d:07:d4:f2:08:b1:3e:87:ef:
d3:31:9a:61:7b:75:ee:9a:0c:40:ea:50:83:b1:82:95:3e:6b:
20:7a:02:e1:7b:ff:3f:f0:a4:ed:78:fe:db:72:4e:ef:4f:19:
29:cb:fc:d7:88:5d:71:c5:d1:6e:98:30:b7:56:b5:78:d0:3b:
ac:05:6a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:50 2026 by rpki-client