Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json)
Hash identifier: 57W6X1wyYtrdaCkxLx/Wl6SrCTbHCc/tXlS/HDcTXC8=
Subject key identifier: 6B:41:E2:A1:50:C6:D7:04:6C:FC:1C:D6:EE:8E:A9:4F:8D:97:B3:3A
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 019D26CCE35AEBCA92C4BFF89DC780602DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
Manifest number: 18BB
Signing time: Wed 25 Mar 2026 21:00:54 +0000
Manifest this update: Wed 25 Mar 2026 21:00:54 +0000
Manifest next update: Thu 26 Mar 2026 21:00:54 +0000
Files and hashes: 1: 43xKNj8d1J5ZbdUCB9huFf51dlY.roa (hash: 0C77rsfbABsBAgXhMhHrXliF4EtBR+zdrxbfWGDutkA=)
2: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (hash: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0=)
3: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: GA2d373O1BiYhgJ+IBky8hMpFP6mCsk4RMZkkDHEynQ=)
4: Mqx-zb562ywYV8pX6wNPPIxwnPA.roa (hash: OtbembzOi1Q67rhuvfY9lENyB3xApH7b2U9zu5YCpzg=)
5: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (hash: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg=)
6: VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa (hash: meHtFxM6jSoAy9Y7SaMHGYbPp+WrlG0Kpg1DeuyayZE=)
7: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (hash: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc=)
8: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (hash: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e3:5a:eb:ca:92:c4:bf:f8:9d:c7:80:60:2d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Mar 25 21:00:54 2026 GMT
Not After : Mar 26 21:00:54 2026 GMT
Subject: CN=6b41e2a150c6d7046cfc1cd6ee8ea94f8d97b33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:09:78:79:83:49:4b:ea:2b:72:6f:cd:a7:fd:
01:c0:e9:17:c7:cf:69:a0:c6:4e:8e:cc:6e:f3:cc:
67:3e:78:fe:f9:c2:86:70:c8:59:58:99:88:57:20:
b4:e0:d7:d5:19:bf:b2:d3:4d:8e:fc:56:d4:45:fb:
4d:99:1d:55:bd:dc:ac:14:01:a2:11:78:25:26:ed:
ae:dd:3d:24:3c:6b:8d:d2:18:99:d8:73:5d:56:72:
c0:9e:71:de:5d:4e:47:93:bb:5c:78:6a:75:f3:f0:
87:c5:fe:36:6a:27:03:b6:2c:4e:b3:1a:87:16:82:
65:6a:30:d7:37:da:6b:08:2d:0d:08:3b:29:6e:67:
24:fd:b5:5f:d1:7a:06:7f:a0:bf:33:fa:e0:86:fd:
17:b7:9f:8e:00:d3:0a:be:d0:8d:6f:35:eb:c6:cb:
52:00:79:43:cd:9f:15:f7:90:84:01:eb:f9:4d:90:
37:1b:6a:2f:2d:f8:ce:50:2a:e4:7c:4c:2c:25:4f:
be:a6:82:79:44:c1:d9:89:24:f4:f1:bf:c0:3f:0f:
d0:97:53:86:a2:a7:de:ff:a8:24:db:69:eb:1f:8f:
31:59:07:50:0f:81:99:c0:93:8d:bd:5f:ad:d5:b1:
4b:97:8d:91:a0:33:0c:e3:50:d7:dd:42:1c:e0:43:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:41:E2:A1:50:C6:D7:04:6C:FC:1C:D6:EE:8E:A9:4F:8D:97:B3:3A
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f9:3a:35:f0:3f:97:2f:4a:8b:57:66:97:50:91:f3:2e:b5:
fc:90:6c:59:62:20:16:3a:2b:1d:8c:23:be:a8:b4:af:35:ad:
ca:2d:3d:1e:4b:8b:96:29:d3:1d:7b:3b:22:d1:01:eb:1e:33:
0e:da:af:85:77:df:2c:df:da:62:c4:5c:b7:7e:55:61:1c:5c:
06:d7:80:43:0b:db:06:79:7f:9d:28:bd:d7:25:56:be:df:ec:
33:4a:b2:10:fe:af:90:3c:bc:b6:2b:d6:85:4c:66:7e:19:dc:
99:37:ea:28:78:27:8e:90:56:8d:95:21:76:af:9f:59:70:bc:
77:51:68:56:81:4b:0a:93:dd:bb:b6:d7:6d:b7:48:25:7c:70:
f3:73:c4:53:c0:96:a4:c6:de:52:a8:87:47:66:8d:b5:fd:78:
bb:f8:a7:cc:d9:9a:bc:36:05:e8:bd:af:37:17:56:b3:48:b7:
20:74:3e:3d:e6:3c:b7:5d:e5:1a:e1:34:f1:33:be:4c:bc:5c:
0a:03:c7:8a:4f:01:59:8d:dd:c0:52:d9:c8:1c:91:a6:3a:1d:
11:c2:0f:41:42:85:94:a2:e6:8e:6e:1f:32:d7:83:ef:97:6f:
ba:fa:61:aa:25:75:f7:be:81:9f:c7:00:fb:1b:fd:93:5a:df:
38:10:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:32 2026 by rpki-client