Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: rhp7S1COAnVOjYGXALNGSbaYt8gafQrFudxERZDjLIY=
Subject key identifier: 6F:F4:95:70:21:88:9F:3E:0E:78:F4:45:B8:01:52:A7:64:B0:48:42
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 019D25F1E7F7BCDD692C4217C8A075AC2577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:43 +0000
Manifest this update: Wed 25 Mar 2026 17:01:43 +0000
Manifest next update: Thu 26 Mar 2026 17:01:43 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: +eni9vjnrImNlzxM6OHIpwxtA45kTSq4wxGzfwaTJA8=)
2: lJvVKRd6xYXkH3w4sqIr9ELeD6o.roa (hash: misofyoI9rt+yQi6weZU/F8kwAPhAeP1MXdYFSxncAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e7:f7:bc:dd:69:2c:42:17:c8:a0:75:ac:25:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Mar 25 17:01:43 2026 GMT
Not After : Mar 26 17:01:43 2026 GMT
Subject: CN=6ff4957021889f3e0e78f445b80152a764b04842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:94:db:f0:1f:ef:b5:c5:d5:e3:a5:cf:7d:
28:b4:79:6d:b8:7d:36:33:40:b0:c5:da:39:c7:15:
a8:ca:7b:79:a1:53:5e:f5:4c:03:c0:17:a5:af:02:
b3:c9:cd:86:28:3d:01:5c:70:10:41:1f:2a:71:56:
5f:bb:45:26:30:d1:87:1e:a2:a5:f6:4e:c3:ff:5d:
0b:77:75:0b:10:70:65:00:2d:18:a3:8b:35:96:ae:
ee:29:e6:a0:19:f4:5f:79:1e:1e:de:ad:f2:35:f5:
6f:26:c0:38:72:13:56:40:4e:a9:78:b0:55:c6:0b:
6d:ab:33:6c:96:63:c7:58:b5:32:e2:0d:e4:6d:84:
bf:68:da:76:f7:84:b8:ff:b7:f3:fa:ae:58:cf:7b:
3f:46:23:e8:72:75:39:f9:77:83:48:8d:c9:48:41:
c1:73:87:58:32:69:4c:3e:7d:41:31:a0:df:d4:00:
4e:86:32:aa:67:c9:4f:df:a2:ee:b6:4d:65:d3:54:
23:a0:f7:ff:06:bf:97:b8:af:b5:fa:f2:4d:36:50:
e1:c0:d0:35:1f:65:53:e9:b8:9e:b4:44:9e:56:0f:
fe:8e:14:dc:52:37:4c:a3:f8:2b:24:6d:ab:ef:11:
6e:19:c7:b8:1b:93:eb:2c:40:12:63:f9:e5:cc:2c:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F4:95:70:21:88:9F:3E:0E:78:F4:45:B8:01:52:A7:64:B0:48:42
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:64:02:8e:b7:52:ec:d9:8f:71:89:ee:2f:89:c3:ac:87:57:
75:21:6a:bc:0b:79:ef:0f:59:07:b6:6b:f1:c3:93:52:55:78:
87:dc:2d:d8:1b:06:14:54:74:9c:56:e2:d9:2e:52:92:52:c4:
b5:b0:97:7e:fc:0b:89:7d:b4:ff:56:df:a0:ef:3a:7f:1c:27:
36:f5:86:ca:47:a0:22:9b:bb:09:7b:8a:eb:10:6b:d9:3a:0e:
28:11:fd:31:44:f3:73:1c:7d:01:c5:bb:ae:01:1e:4a:3f:03:
eb:e4:24:64:06:eb:7a:bb:40:90:62:26:46:8b:c2:ca:af:4c:
b0:c6:ff:8f:76:44:d4:a6:1f:e2:03:3e:86:89:44:98:1a:74:
cc:5c:24:1f:bd:64:da:22:1e:19:2d:2f:2d:ee:44:74:44:56:
39:09:07:45:0d:2a:a1:54:89:70:5e:ae:78:9e:21:d2:69:4e:
40:00:5e:b4:a2:37:4a:8c:6b:73:e6:c8:d8:07:63:a5:53:00:
68:b6:f1:22:0d:d7:21:5c:89:0c:80:7a:a2:d3:1a:ed:c2:e5:
7d:ff:c5:7c:e9:56:49:95:7f:02:ce:74:51:35:f5:99:a1:61:
30:95:41:e4:50:59:d4:80:25:8d:cc:23:f8:68:ac:f0:bc:91:
e1:d0:e0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:17 2026 by rpki-client