Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier: w7B3SiC07/ujRc6K/prbSW2dcO8yh5tVr0FQLKsiY3g=
Subject key identifier: 18:14:62:DE:93:D5:CC:22:01:6E:B7:C0:7A:E4:34:AF:E9:57:4A:A9
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial: 019D2771DE8B6E5B5C98CA112FC39236392D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number: 0D15
Signing time: Thu 26 Mar 2026 00:01:06 +0000
Manifest this update: Thu 26 Mar 2026 00:01:06 +0000
Manifest next update: Fri 27 Mar 2026 00:01:06 +0000
Files and hashes: 1: DGGg1cwcyckOEj5piFasZLtUpCM.roa (hash: b8NWlcDq3cqXueexrQLS4YXKUPoPYtHevhupgWyi2lA=)
2: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: R9YpbqoG2Ebt1gRPOzfI9Cqo/duc2IsWoH5JxhUuDsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:de:8b:6e:5b:5c:98:ca:11:2f:c3:92:36:39:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
Validity
Not Before: Mar 26 00:01:06 2026 GMT
Not After : Mar 27 00:01:06 2026 GMT
Subject: CN=181462de93d5cc22016eb7c07ae434afe9574aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:63:8a:61:34:5e:70:c2:e7:93:ca:6b:f6:
64:8c:f4:0b:63:af:6e:a6:e2:f3:98:98:2f:6a:95:
e4:50:9d:5c:09:99:68:e1:66:16:a2:26:b5:e7:e2:
c2:d4:8b:5e:85:34:22:84:57:3a:03:5f:2f:72:a0:
dc:1b:8c:4e:6f:2e:d8:4d:99:a5:16:d5:4e:41:85:
53:eb:9f:e0:06:31:ec:a8:5d:4b:29:2c:d0:21:34:
78:0e:e8:e0:e8:7d:6c:19:5c:c3:5c:07:f0:2a:c3:
08:7b:84:b3:3d:ac:02:ca:9f:5a:28:6b:0b:f9:66:
f6:9d:77:6d:dd:a4:34:26:bf:81:07:e9:86:26:0b:
87:cf:7b:cb:d2:b0:c3:0c:eb:35:25:f3:d1:dd:01:
dc:d0:76:23:4c:b9:ab:8a:f0:cf:24:ac:f9:06:a7:
8a:56:fd:5d:7d:8b:73:d2:90:b4:1a:43:82:48:2b:
f0:2c:61:a0:0b:36:17:b2:7b:2f:52:39:58:c5:d2:
15:e2:ea:38:22:08:36:61:7a:39:ad:17:21:46:7e:
a2:1f:59:5f:4d:31:36:14:58:8a:4a:f3:56:de:b1:
62:84:78:7c:23:1b:dc:4f:6b:40:ce:26:84:9e:6c:
46:1c:c6:ab:14:30:6a:e2:20:1f:da:56:64:2e:1c:
36:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:62:DE:93:D5:CC:22:01:6E:B7:C0:7A:E4:34:AF:E9:57:4A:A9
X509v3 Authority Key Identifier:
keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cf:16:2b:00:0f:c0:5c:00:c0:f1:64:1a:e3:d9:b5:9c:c9:
80:09:42:d5:d6:a0:36:92:7d:07:57:df:d5:65:b3:6c:5b:d0:
ba:5a:ae:d0:5f:6b:36:a7:b1:8a:8a:79:db:0f:21:3d:6c:45:
96:03:83:bf:eb:93:12:1f:9a:41:8e:74:31:34:11:8b:d1:9c:
62:7b:b4:d7:e1:30:54:c0:2c:80:48:df:58:37:4d:6b:bf:57:
67:9a:ab:f1:42:d3:eb:82:62:12:97:2f:11:22:e3:6d:12:c8:
67:27:eb:41:45:d5:3b:42:f3:d8:4d:8e:b5:36:2b:52:f5:ed:
09:1e:3c:97:74:a9:a0:aa:19:2b:3f:65:13:db:64:ff:00:d4:
44:b0:77:62:70:4d:08:6f:d6:40:d7:dc:75:43:df:1c:65:19:
94:2a:dd:2a:f8:b0:92:0d:a0:e0:cb:91:d2:4b:2d:9d:53:a2:
42:ef:59:01:67:f1:81:78:f4:a6:f9:cf:ce:c4:e5:e6:7f:39:
f0:07:79:b9:5f:1e:9b:31:cc:33:2a:dc:9d:f3:e6:48:fe:21:
d4:c0:dd:c1:8f:fa:f4:31:07:b8:b6:e1:c0:e0:50:8f:9b:3b:
3b:d1:e8:bb:ac:ca:20:5d:03:9e:f3:a2:a8:d7:c5:5a:93:ab:
06:ed:64:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:55 2026 by rpki-client