Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier: xk0IwF2msDkPJ74g1tdlXundRjh/E1diweQeJWgO3PA=
Subject key identifier: C2:3F:6E:F9:F3:14:6B:F0:E1:87:AD:61:E0:8E:1B:57:3F:71:6E:49
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial: 019D27DFE9DDFDD0869B5963AEB41C49D820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number: 134B
Signing time: Thu 26 Mar 2026 02:01:18 +0000
Manifest this update: Thu 26 Mar 2026 02:01:18 +0000
Manifest next update: Fri 27 Mar 2026 02:01:18 +0000
Files and hashes: 1: 0tgi-bedT7M90yonGJNHWcEtkks.roa (hash: jx45i7P1C49PseKbfYGkTcUnQdu8nI1iX163v3oChsI=)
2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: dsum2wVJUmXOdonJTHTGFW7sA9n3HV4MQNCG7fyy7Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e9:dd:fd:d0:86:9b:59:63:ae:b4:1c:49:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Validity
Not Before: Mar 26 02:01:18 2026 GMT
Not After : Mar 27 02:01:18 2026 GMT
Subject: CN=c23f6ef9f3146bf0e187ad61e08e1b573f716e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:12:2a:10:7a:89:56:f6:05:84:07:a4:8d:
9b:5f:46:a3:ca:8d:91:f9:b8:c0:ef:c2:2d:60:59:
65:96:e1:4a:7b:cc:9d:b8:dc:aa:8a:7f:79:7b:0c:
e2:91:fb:b7:72:98:9b:97:a2:92:d8:36:3a:53:ea:
34:96:54:d2:3b:00:23:71:10:28:14:9b:04:54:5e:
58:1b:d5:0f:1f:7d:01:e2:e3:30:1e:46:b6:e8:03:
8a:2c:89:72:23:4a:e7:8b:90:cb:cf:0d:e8:aa:6a:
54:40:06:4b:15:35:97:ac:3c:ed:2f:f3:91:0e:97:
33:c7:0e:97:7a:b4:8f:15:06:f6:fa:25:fe:2e:e8:
bc:05:13:2f:dd:1a:e6:09:18:92:ad:f8:b9:fb:04:
b8:48:8a:84:b3:0e:e9:dc:f6:b1:dc:1b:b3:d3:19:
f7:e8:e9:de:b2:d7:d6:44:7c:d6:69:b2:41:cd:98:
19:8b:66:cb:3d:31:97:6c:56:e8:f3:8a:25:c1:f5:
35:e0:d8:c6:db:cc:0e:63:53:8d:40:ec:49:0f:08:
89:4c:97:7e:3f:52:14:b4:a2:74:3f:da:70:45:b1:
fd:ca:f1:55:3e:e2:c8:6d:e5:98:43:fe:cf:bb:de:
28:75:e7:54:b9:71:90:9b:c7:e8:4b:6e:3d:ec:b3:
47:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3F:6E:F9:F3:14:6B:F0:E1:87:AD:61:E0:8E:1B:57:3F:71:6E:49
X509v3 Authority Key Identifier:
keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:29:06:54:a3:ef:c1:29:fc:1f:69:f5:77:21:68:36:4a:44:
21:b5:7d:55:9f:41:ef:ff:dc:e6:a9:1a:9b:2b:c7:2b:15:46:
65:73:0a:90:59:b9:c3:b3:2b:9e:3c:41:c5:77:87:64:9f:3b:
bc:e2:2a:5a:cc:1f:27:92:23:7f:25:ff:b8:3e:91:db:67:9b:
69:e7:3b:ea:97:11:66:7d:54:d1:76:9c:03:40:f7:0c:7c:65:
29:1f:e9:8d:39:23:a5:1c:da:2b:12:90:17:2b:f3:fe:8f:91:
ba:e0:2f:99:d3:34:aa:1d:2e:9f:4e:aa:bd:af:04:58:85:8c:
4d:9e:ab:66:c3:17:fd:67:96:a4:45:7c:89:24:be:74:cd:92:
87:95:18:b1:b4:4d:eb:40:2b:0f:75:30:e2:86:b4:b3:5b:8a:
21:04:4c:58:0b:e9:f3:23:f4:4a:24:f0:f1:d8:1c:dd:16:57:
e2:b6:5c:37:dd:33:e7:8d:9c:55:0b:50:72:83:de:48:bf:cf:
4a:40:c7:9d:1b:6b:b2:35:68:7c:31:60:bf:d0:3e:6e:45:64:
4d:b3:01:30:b6:52:2a:7c:d1:ec:06:d4:bf:f1:ae:df:bd:ad:
d0:3c:d4:82:4f:e8:d1:5e:97:a5:ec:d0:33:fa:8e:e9:8e:b4:
92:44:1e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:37 2026 by rpki-client