Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File: FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier: 5KkyCc5G1dKBeluaWK6uBHPZHLLprXPKF1TXhoj66VU=
Subject key identifier: 9D:71:8A:AC:96:81:DF:DC:4E:80:C4:B4:E5:A7:1F:AE:EE:55:FE:13
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 019D2695D2FA867AD4BDD1C6DD4C58EE75AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 20:00:46 +0000
Manifest this update: Wed 25 Mar 2026 20:00:46 +0000
Manifest next update: Thu 26 Mar 2026 20:00:46 +0000
Files and hashes: 1: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: DF7RcIcPrvZpWNxfHykgYHpIPftSco91a1ey+9Q2Vac=)
2: vp0UDxTRbXOKDx0P7pG927dMuNw.roa (hash: a6PCE7KRbdt4SopfZX0xNsbWLBfdbr17il681AbH0vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d2:fa:86:7a:d4:bd:d1:c6:dd:4c:58:ee:75:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Mar 25 20:00:46 2026 GMT
Not After : Mar 26 20:00:46 2026 GMT
Subject: CN=9d718aac9681dfdc4e80c4b4e5a71faeee55fe13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:87:12:75:ac:e1:f4:5a:dd:1f:46:2c:9d:
23:6d:d8:13:88:70:b7:9b:60:29:eb:67:db:4a:c6:
01:7c:6e:45:6e:0e:70:cf:5b:ee:62:9b:c3:e5:05:
e2:dd:18:a9:59:fc:2f:18:29:ef:4d:b7:91:ac:ce:
d5:a5:4d:28:db:9a:65:f8:a0:d2:8a:5c:cd:62:ad:
96:21:a0:54:e3:9a:29:2d:aa:d7:c3:9b:32:1b:44:
e1:79:d2:79:ba:f5:8a:7c:fa:ef:4c:48:51:b0:68:
8d:89:e0:48:d5:76:4c:d3:38:b5:a3:93:83:88:03:
5b:68:a2:a2:13:90:16:10:85:a9:6c:33:a3:b6:7d:
c4:1e:74:28:08:33:e9:1e:4f:d0:8e:cc:f0:6a:2a:
60:aa:3e:f0:4d:18:d2:1f:8e:0a:3d:95:9f:83:ea:
de:67:a0:1f:6e:56:83:a6:a3:1f:db:2b:83:d1:57:
ea:52:1f:4f:7d:ed:ee:7f:0f:4d:37:af:10:65:4e:
5c:2a:e2:6c:a5:01:f4:fc:44:c2:e3:f5:fa:d2:fd:
eb:7b:35:ac:b1:9f:e9:99:ba:97:33:84:39:85:e4:
5c:ee:55:50:5d:8a:88:3d:4a:bb:a6:00:8b:f0:17:
6e:3f:4e:ee:5f:dc:2d:9b:96:27:f2:54:ed:4b:dc:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:71:8A:AC:96:81:DF:DC:4E:80:C4:B4:E5:A7:1F:AE:EE:55:FE:13
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ef:88:db:de:56:b3:b8:69:d1:e8:26:a7:18:cd:27:f5:08:
fa:bb:51:88:22:d0:65:c7:17:be:64:34:5e:01:36:e6:17:44:
35:c2:74:95:82:fc:b2:c0:d9:9f:6e:5e:0e:e7:db:f7:2c:1c:
2b:fa:4e:c3:0a:e0:54:c3:4d:38:54:55:11:26:11:8b:9b:69:
8a:bf:5e:82:99:63:f2:a3:b1:7e:81:48:d6:df:e7:00:38:07:
ec:a8:90:ef:3d:8d:23:70:55:95:b1:d5:36:63:d0:33:d3:19:
72:43:e1:0b:80:c9:ef:c7:08:38:2a:e8:51:51:5d:84:cb:2f:
e9:c5:41:27:b9:5c:04:9f:f2:50:76:34:4c:2f:a2:90:80:61:
a6:d1:86:9d:c7:5f:7f:25:6f:4d:42:e8:af:79:59:c7:4e:44:
2a:92:83:f0:48:95:99:2b:28:1e:cc:02:52:2f:b7:37:da:87:
80:e1:d6:31:62:5a:c7:2d:8d:9f:d0:05:c4:a2:27:77:67:b1:
7b:f6:5a:11:b9:70:d0:b6:a4:a8:42:77:2c:c0:e8:5d:af:8e:
c0:7f:c7:e6:99:e0:20:12:42:b4:c4:bd:91:b9:68:a0:ad:be:
7a:3a:46:cd:f9:87:79:7e:80:d3:23:0d:fa:80:80:97:3f:d7:
fe:cf:f5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:43:42 2026 by rpki-client