Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: rQhD1bOpejhSs6g2Fh5cCgafjLpiE5NrAo+FV28lu3w=
Subject key identifier: 9F:D4:12:FD:44:3C:03:A4:95:D9:AF:C5:D5:7D:FD:00:6F:52:C0:F2
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 019D29610AA83054FAD6EB2497C419C02C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 1586
Signing time: Thu 26 Mar 2026 09:01:58 +0000
Manifest this update: Thu 26 Mar 2026 09:01:58 +0000
Manifest next update: Fri 27 Mar 2026 09:01:58 +0000
Files and hashes: 1: 7fDVFx_W8cXxkevRfIg2i3GdYio.roa (hash: Fsf0L/tikLEgDCmVChLeIt5Pn4gsSm28h3gpWcwkAMM=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: FR3EvvoTax+Szz9cBiG+OqAy2Ou3qaOV4+iBU3fD+7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:0a:a8:30:54:fa:d6:eb:24:97:c4:19:c0:2c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: Mar 26 09:01:58 2026 GMT
Not After : Mar 27 09:01:58 2026 GMT
Subject: CN=9fd412fd443c03a495d9afc5d57dfd006f52c0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:f9:87:52:d0:22:d4:ca:bc:0d:50:e9:55:
e9:62:04:4b:93:f7:7d:ec:9b:33:96:0d:7b:7e:95:
8c:a1:96:89:69:e1:a6:02:e9:69:39:7e:58:56:78:
50:aa:70:fb:20:26:d2:7c:2e:39:36:a6:56:54:bb:
65:d3:49:6e:53:c6:c7:30:93:f2:85:a7:5f:cf:5e:
6c:7a:2d:4f:d0:c6:21:ee:b1:09:b5:54:a5:e6:8c:
26:03:3c:b7:e7:70:75:f9:ad:60:3e:43:52:34:da:
03:45:08:f8:b1:6d:f5:f5:9e:f2:ca:6f:79:d8:5f:
a6:05:f2:d1:9d:fe:e0:fd:46:b5:97:15:37:fc:96:
8f:da:9c:38:3e:80:70:a8:90:4c:db:52:39:9f:a3:
6f:51:f6:56:1a:d5:57:b5:19:18:e2:ee:7f:52:e6:
f4:68:32:60:f2:ae:93:2c:67:be:33:e6:12:55:72:
ce:40:92:1c:05:c7:a7:66:b1:59:a2:ca:e0:57:91:
1f:53:1d:cf:1c:04:9c:55:06:79:dd:d5:fa:62:9f:
66:01:c9:f5:db:14:b2:1e:19:b6:1e:f8:a0:97:2a:
20:d5:ee:71:00:63:dc:5f:58:fd:17:ab:aa:8a:7c:
fd:29:09:e8:be:44:e7:15:b6:47:49:2e:13:69:e5:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D4:12:FD:44:3C:03:A4:95:D9:AF:C5:D5:7D:FD:00:6F:52:C0:F2
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:84:83:bb:d1:15:79:51:5a:2b:13:29:e8:3c:da:b4:30:c1:
87:2d:aa:f2:63:81:64:91:5c:15:47:a3:ae:15:13:52:a8:be:
9f:94:ac:04:da:bd:06:b8:86:4c:ee:96:51:97:70:b9:71:97:
92:b3:a2:b9:9a:d9:fe:9d:e6:89:7e:ed:25:cd:41:70:8a:64:
b1:f0:4b:8e:07:63:c1:06:63:52:74:c9:d7:4a:3b:08:19:19:
ec:dc:d1:f7:80:72:c2:4f:0a:40:ef:e6:ec:1e:39:c1:15:81:
d3:28:87:31:0c:9f:ac:bf:7d:43:97:81:55:f5:8e:77:56:de:
06:13:49:16:e7:4d:1e:f1:67:a1:19:c6:a1:1e:2c:1e:5d:af:
84:39:c7:6f:e9:85:c2:77:f1:a6:02:68:01:1f:dd:aa:03:c6:
ee:01:44:5a:af:6e:76:6b:b1:ab:74:01:0c:fe:da:90:da:9a:
80:5a:f6:81:a7:ed:65:3d:66:25:27:a7:33:97:96:88:3a:0c:
5a:ca:e1:eb:4f:98:c1:50:75:84:32:93:81:5a:dc:7d:3e:0a:
cf:73:69:09:90:86:c1:e8:d2:67:0d:c0:6f:9a:51:40:e1:48:
e4:44:1c:23:9b:35:d9:d1:c4:e3:04:6a:b2:c8:6b:f5:b0:8d:
08:a0:cc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:40 2026 by rpki-client