Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier: tVSvaL/dNMDT+7DmRtWZEFLTOADUkgfibL0ed1FtKp0=
Subject key identifier: 53:61:F8:D0:5A:29:35:AA:E8:CB:CC:60:C9:74:A6:9C:D8:0A:CA:B2
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 019D27DFE354A7D0CEF43B28BE87772F90E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number: 08E3
Signing time: Thu 26 Mar 2026 02:01:17 +0000
Manifest this update: Thu 26 Mar 2026 02:01:17 +0000
Manifest next update: Fri 27 Mar 2026 02:01:17 +0000
Files and hashes: 1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: 1hxWmwUOKdsPGt94Hc6wBbmM3v1kOZdi64EaanU2S6Y=)
2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=)
3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=)
4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=)
5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=)
6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=)
7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e3:54:a7:d0:ce:f4:3b:28:be:87:77:2f:90:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Mar 26 02:01:17 2026 GMT
Not After : Mar 27 02:01:17 2026 GMT
Subject: CN=5361f8d05a2935aae8cbcc60c974a69cd80acab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ee:14:5f:02:28:6a:09:b0:ab:40:f5:0a:7d:
a2:8a:7e:9e:ae:99:8c:84:61:e0:11:ab:29:59:ee:
94:3a:d6:71:83:4b:62:00:41:dc:87:8c:3c:f1:7f:
46:2a:d9:1d:38:e8:1e:d6:10:f1:39:9c:04:98:6b:
a0:c8:68:f0:97:56:27:d0:33:60:12:2f:33:eb:c1:
5d:d9:e1:08:fe:ee:2b:2a:76:b9:ac:60:9c:ba:69:
56:cf:5b:dd:95:95:a0:fe:20:f9:43:3e:47:7e:23:
39:b4:30:ed:01:45:f5:00:b0:ef:5a:40:ea:12:3c:
bf:7a:20:0c:7d:80:e1:63:70:6e:d9:ae:d3:b9:b3:
2d:f6:63:53:f7:5a:ed:e5:2c:4f:51:0f:1a:29:93:
d0:43:3f:6c:1b:86:83:08:49:e5:b5:cd:96:38:c0:
57:2e:10:ca:53:5a:5b:eb:e1:26:8d:47:8a:5e:af:
df:9f:d4:0d:42:83:2f:9c:09:70:10:c7:dd:7d:6c:
91:85:4a:95:af:72:c3:36:6d:a8:ab:e5:6c:48:30:
d2:c8:4c:ee:a8:df:f0:c2:5c:25:24:a1:d3:6f:cb:
f2:0a:4e:65:1e:fe:46:c3:de:f8:1d:cd:9f:40:bc:
a4:09:2c:31:d2:d1:9a:0c:a6:be:bd:0c:cb:8d:5e:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:61:F8:D0:5A:29:35:AA:E8:CB:CC:60:C9:74:A6:9C:D8:0A:CA:B2
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f2:2d:00:83:e2:2e:2c:cb:75:78:23:60:39:15:09:09:ae:
16:ce:9e:b1:3d:ee:85:91:a0:0a:68:e6:86:97:18:04:d0:fa:
88:ab:77:51:be:cd:43:8c:37:60:1d:4e:85:ef:0d:1f:c3:a5:
53:c9:71:65:86:d3:1d:30:ae:6f:43:aa:7f:b7:eb:2f:03:30:
3d:99:0a:81:cb:43:73:bf:cd:d4:33:10:80:c6:26:89:d1:80:
c2:00:19:c2:23:53:12:2b:b8:1a:14:c6:39:65:35:89:34:2a:
e9:94:de:40:5c:ca:3f:b8:46:7a:c5:c9:19:5f:ba:36:58:92:
90:ac:1a:85:f4:3d:18:29:c0:d5:fc:95:69:ba:35:49:ec:8f:
ca:01:50:d0:b8:f5:bf:da:d3:fc:60:ea:35:97:4a:3d:02:3a:
55:68:de:b1:ff:8c:76:c5:9f:bd:ce:c2:cf:18:73:ff:12:34:
8e:fc:0e:e4:19:aa:19:6f:83:a4:93:cb:df:82:d3:a8:19:dc:
bf:d9:63:52:60:8c:b3:81:99:e9:3d:e3:25:1b:38:e7:0e:c7:
56:0b:ab:4f:10:1a:b5:36:08:76:95:84:ff:41:40:cf:83:f1:
6e:74:25:f6:77:77:30:02:f6:32:2b:5e:18:ec:e4:e1:72:40:
fa:95:d0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:39 2026 by rpki-client