Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier: o/dzacgvvexN0a/NTb7RnDz90N6VbwL5yfWl+kTDrJk=
Subject key identifier: C7:3A:9E:2D:2A:4B:31:55:35:38:A5:8C:09:4A:B2:DE:96:DC:63:23
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 019D2997849CD5BE0AA4977941C5DE636484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number: 160A
Signing time: Thu 26 Mar 2026 10:01:28 +0000
Manifest this update: Thu 26 Mar 2026 10:01:28 +0000
Manifest next update: Fri 27 Mar 2026 10:01:28 +0000
Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: a1iKQIbvgLpDexLmlbSAXdLd1O4nFk+WKWRuicU1PUo=)
2: jfn31bWoPt5u8J8dk_jaDuYtKVY.roa (hash: KodCP7xC+csniIon7z4178+lNkYaP00De8YC+4THaAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:84:9c:d5:be:0a:a4:97:79:41:c5:de:63:64:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Mar 26 10:01:28 2026 GMT
Not After : Mar 27 10:01:28 2026 GMT
Subject: CN=c73a9e2d2a4b31553538a58c094ab2de96dc6323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:1d:82:d9:fb:ab:58:e8:0a:59:a6:e8:c5:
ed:26:1a:4f:2f:20:11:ee:7e:b1:00:49:86:47:0a:
a5:7d:0a:d1:2c:64:4f:fa:34:56:5f:bb:ae:a3:22:
ed:9e:8d:2b:d2:8e:69:6f:af:93:3c:44:e6:c4:da:
2e:2a:f1:c8:e8:88:24:59:59:b0:1d:ad:fd:50:36:
07:4e:9b:a0:13:bb:c1:40:0c:d7:28:e0:2a:d9:1c:
02:9a:e0:70:1b:25:98:bf:c8:f9:31:f8:64:e3:02:
5a:b1:97:a2:21:b9:06:3a:d5:bc:9d:76:45:40:95:
b3:93:bc:95:d4:69:e3:cd:06:c9:c3:49:07:be:f7:
68:7d:b6:a4:bf:1a:56:34:84:ef:e9:2b:b0:fb:58:
85:4d:86:d7:68:a3:ef:2d:9c:4a:60:ba:ee:0e:47:
56:fd:c1:f1:95:4a:03:92:1c:1e:cb:75:04:46:27:
66:09:26:5f:ad:a7:a5:54:50:09:73:04:ab:e6:1b:
2f:2e:b6:89:a6:56:be:b3:d2:1d:19:3e:6c:7a:29:
ea:57:9c:4c:a4:ee:14:b0:64:54:62:95:f0:df:2e:
3b:4e:af:15:30:bd:d0:38:83:9a:92:20:9f:b1:e5:
39:a2:13:6b:fa:e7:8c:9b:32:62:0a:c4:e8:a8:65:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3A:9E:2D:2A:4B:31:55:35:38:A5:8C:09:4A:B2:DE:96:DC:63:23
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f2:d6:b8:e5:e2:1e:e1:7a:c8:50:94:a6:ad:5c:55:5a:9e:
45:80:6c:f5:37:92:39:a2:cd:d9:fd:50:b8:48:e0:bc:73:d0:
7c:84:0a:e4:7b:04:37:72:9c:76:ad:37:22:eb:60:dd:f8:ee:
ed:3d:52:b8:7b:70:3d:18:ca:4b:2f:85:79:29:dc:54:8f:bd:
0a:88:4e:15:0a:7e:03:1f:ed:43:7f:16:92:b8:11:47:fd:86:
9c:40:8d:2e:45:55:7f:37:02:a6:8a:fe:2f:8f:27:84:2c:0a:
10:8f:84:de:be:b8:2d:22:d1:16:2c:39:79:5a:b4:6e:9a:3c:
e6:ed:fa:36:e8:a1:64:09:d6:64:4a:ee:67:27:fb:01:ff:53:
92:98:85:d4:68:a2:6d:58:6d:ea:98:fa:94:78:02:45:a7:9d:
ab:35:8b:61:43:71:6b:21:c8:71:b7:b1:ac:6f:57:35:ab:9a:
bf:cc:13:52:5c:9d:b4:4b:c1:e1:c6:10:83:01:44:a1:b8:be:
71:cb:1c:bd:54:0a:b2:55:6d:aa:3b:96:3e:1c:22:04:64:20:
99:3a:9c:64:15:40:ba:c7:5c:bd:09:61:ac:6b:44:66:1d:18:
4e:ab:b9:9a:a0:06:26:99:cb:7e:68:2c:38:48:23:22:aa:d6:
4b:05:e8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:45 2026 by rpki-client