Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
File: Fi5IMpyL6O8gnplY2marAkAUXhk.mft (raw, json)
Hash identifier: tzARIy9UWqpaFfyWPvVkqBypvUPtxXqfFHEyrJH1MIE=
Subject key identifier: 85:72:C6:48:D4:76:90:DD:E8:31:EE:20:1D:AC:6F:FE:7F:A6:06:02
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Certificate issuer: /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial: 019D2884ACD5F25F3C863AAB59CD75E59994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
Manifest number: 0965
Signing time: Thu 26 Mar 2026 05:01:16 +0000
Manifest this update: Thu 26 Mar 2026 05:01:16 +0000
Manifest next update: Fri 27 Mar 2026 05:01:16 +0000
Files and hashes: 1: 62jZg4gngBAnPwivfw6fHLKrFR8.roa (hash: x5Xq81WhPxvz0KcW7Qb+lmuqrFvDsxsxDYK9R0dFh5A=)
2: Fi5IMpyL6O8gnplY2marAkAUXhk.crl (hash: v1QlWbOmeNAF5XHivK4t8zr+/qBBLhvIz8JF9iO5jyw=)
3: L1zbFMwgTo8k0cGpa43eL9rJSvs.roa (hash: 3nOYFWDqeUlGtXtuv/0p8OtC8pzPOMkeWtIsBYndPi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ac:d5:f2:5f:3c:86:3a:ab:59:cd:75:e5:99:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
Validity
Not Before: Mar 26 05:01:16 2026 GMT
Not After : Mar 27 05:01:16 2026 GMT
Subject: CN=8572c648d47690dde831ee201dac6ffe7fa60602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:a1:c4:3c:00:86:31:6f:6f:5f:86:92:00:
e6:29:fb:5b:3e:43:40:97:64:60:6f:f9:1e:87:ce:
53:31:9c:bd:59:cd:90:07:d1:e5:7b:fa:2f:53:60:
00:dd:b0:17:fe:37:4f:52:39:8d:6a:e1:e2:c8:84:
ba:69:a0:c3:9d:68:83:00:13:61:ab:e0:c7:e2:52:
64:49:64:08:f3:9d:15:3e:a1:5d:ed:0e:75:5a:7a:
6d:da:10:6e:9d:f0:4b:96:cf:70:d2:f1:75:d4:bd:
9a:75:9f:f7:86:e0:49:a6:68:f4:c4:03:02:a2:16:
df:7d:dd:28:86:ae:02:c0:81:df:3f:a6:4b:55:1d:
be:0d:33:d3:94:d7:44:b7:fd:54:29:05:2e:4a:53:
79:9b:fc:c0:94:a0:a9:dd:4e:df:fa:83:ba:57:56:
07:9b:72:2b:e8:37:d5:6f:d4:7e:59:a3:78:0a:3d:
70:30:09:42:1e:7b:57:7a:cd:d3:a4:d9:bc:0b:9e:
dc:40:31:8f:e0:70:63:ce:00:d5:6f:9f:ae:b1:ca:
ad:a9:e3:1c:23:4a:a6:91:c0:d0:ff:b2:85:b3:79:
2d:3d:f3:4c:08:de:09:d4:59:20:be:bd:42:34:6d:
7d:8e:ab:67:66:5c:a2:1c:49:fb:76:3c:ca:4e:20:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:C6:48:D4:76:90:DD:E8:31:EE:20:1D:AC:6F:FE:7F:A6:06:02
X509v3 Authority Key Identifier:
keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:70:dc:9c:61:ca:59:2c:6d:f5:17:c4:ed:0f:6e:15:3e:9d:
9a:b7:3a:ae:bc:03:4f:ea:fc:81:4a:27:04:0e:f2:2c:bb:d3:
df:52:1a:11:24:82:69:12:fd:4e:c9:84:d4:16:6d:2f:6d:fd:
90:1f:ee:bd:5a:d7:49:8f:af:29:09:e7:3a:a7:56:e6:89:dd:
fc:83:1a:b7:28:18:4e:dc:a1:5a:d7:d7:d3:ef:52:71:83:6d:
5e:d3:f4:a4:db:84:82:f7:0c:fb:26:40:aa:12:81:24:c7:a2:
8c:36:00:50:c1:37:ff:d9:c8:e4:73:a0:4f:c8:e5:45:ed:35:
36:b3:63:f1:ee:24:69:d7:02:a8:b9:d9:d8:ab:2c:3f:ee:ef:
a9:ba:d5:e6:38:e4:1e:29:42:cf:a9:a3:46:09:cc:13:b4:f1:
31:28:72:89:a4:7c:dc:3c:2c:d8:30:5d:3c:2e:65:e1:08:d0:
7a:d6:65:f3:a9:f9:64:fa:57:d7:cf:7f:e1:e1:2e:a3:4a:59:
9a:e0:e8:32:d3:78:3e:63:b4:4e:e6:40:54:82:c8:75:80:ae:
ea:a0:96:a9:43:3a:ee:34:e6:4d:15:1f:36:70:ec:cc:60:fc:
b5:4f:cf:6f:b5:0e:46:cc:6b:3a:ef:57:b8:ab:2a:0a:fe:2d:
bb:4b:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:19:50 2026 by rpki-client