Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier: QI+7u0vAUT5l6DUAyQHsbUdDv/6pHgHUL37UMgjx1j8=
Subject key identifier: 55:49:80:79:57:83:B4:E3:80:14:5A:A0:63:1C:36:6B:CA:7D:35:53
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 019D27DFA3A76CE4FE6C5812CCB0621B0196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:00 +0000
Manifest this update: Thu 26 Mar 2026 02:01:00 +0000
Manifest next update: Fri 27 Mar 2026 02:01:00 +0000
Files and hashes: 1: 2Yztgl1JDQiHLbJTugznfEzk5Qc.roa (hash: jSITK3S0lez0+624vvcXLxi93dFSIlVEaD28cVt/Qe0=)
2: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: LGvLOVsRk7dKOfpVpMU4XtwO3C6BtFooBjbxii+Yk3g=)
3: c0s191T9M-PjiRKEaUw3Sv51WuI.roa (hash: HMekVBw+h+CR9Vb7bu+DywUuyLHvbFqFC7IFjxkwPss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a3:a7:6c:e4:fe:6c:58:12:cc:b0:62:1b:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: Mar 26 02:01:00 2026 GMT
Not After : Mar 27 02:01:00 2026 GMT
Subject: CN=554980795783b4e380145aa0631c366bca7d3553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:1a:b6:90:5d:82:90:04:b3:9b:69:75:04:
0c:bc:e8:d8:19:10:b7:9f:bc:ff:1f:8d:a6:ef:eb:
25:90:3b:29:73:94:19:bb:56:31:5d:fd:fa:d4:0c:
be:b5:cd:65:42:57:69:e4:68:c2:8c:9c:33:57:28:
ad:1c:e2:b3:6d:38:ce:4c:8b:ce:72:4c:c3:c6:32:
08:dd:20:f5:f4:84:17:7e:3a:a7:d5:99:19:ab:02:
6c:e0:8f:15:0c:90:b2:0d:f2:9e:9e:e5:97:ad:e4:
60:e3:32:6d:56:aa:a3:2f:98:09:4d:22:11:f4:48:
bc:e2:f9:9e:55:b7:8e:ea:8c:0e:e6:ee:c4:25:20:
af:03:ef:42:69:1b:43:55:1c:aa:2e:1b:8c:50:45:
97:43:44:7d:8e:5a:21:ef:b2:0e:29:3f:20:d3:f6:
47:b9:a4:88:a9:45:40:c0:2d:55:83:d9:be:02:25:
48:72:c8:e1:69:1c:11:95:68:42:a2:fe:b8:07:a5:
2c:37:c9:d4:82:00:ab:c0:3f:40:83:36:36:8c:ff:
df:d2:17:a9:27:71:ec:a9:33:d6:0a:0f:99:12:fc:
9b:98:49:f4:bc:35:8d:50:29:75:16:ab:7b:5a:6b:
58:62:65:12:f2:dd:22:8a:4f:87:15:b0:c1:a7:bb:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:49:80:79:57:83:B4:E3:80:14:5A:A0:63:1C:36:6B:CA:7D:35:53
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cf:1a:f0:8f:c2:d6:78:28:b3:85:9b:b7:e3:bc:21:d0:dd:
e4:42:83:22:fa:41:75:a0:2a:f5:2b:4d:9e:7d:8e:cf:76:5b:
c5:b0:3b:bb:51:50:22:fc:f1:d3:a8:fc:ee:54:52:da:64:c8:
6e:a7:da:3b:a6:57:2f:ac:15:91:3d:6e:50:b1:6b:c0:e6:62:
e0:3b:d4:21:a5:19:a3:98:c7:28:35:1b:3f:b8:c7:49:00:3f:
fb:59:e3:26:1d:de:30:ed:c4:51:51:d8:15:7f:f7:37:4c:ce:
a2:a4:51:7d:5a:92:0c:fd:83:77:e7:de:b4:2f:02:a2:b6:2b:
f8:1a:44:a5:9e:3e:16:2e:22:e4:f5:d8:bf:94:6a:38:22:c0:
38:04:af:7d:b2:9b:60:51:53:9a:a7:02:5e:70:bc:34:db:86:
11:ce:5d:ff:29:74:20:8a:47:85:5b:06:76:f4:9a:20:6f:4d:
41:06:92:26:ef:10:be:7c:34:24:bf:4d:65:bf:37:9c:fb:90:
1e:e4:25:6b:f6:68:e8:99:aa:72:77:9a:d4:a8:29:36:6e:4f:
b7:e4:b5:cd:3f:7d:cb:90:02:31:3c:fc:40:4d:f8:70:fb:2e:
ea:7f:95:cc:24:b9:a6:19:a5:f4:d4:30:ed:29:95:5c:98:25:
2c:a0:4e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:42 2026 by rpki-client