Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
File: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft (raw, json)
Hash identifier: 0xZ9mgZ7l8XtDXRF6rtK1gio7leGVdxA4ogBxQbHSfo=
Subject key identifier: 00:0C:08:F2:4C:D6:81:B3:01:E2:BA:C7:85:75:23:20:C8:44:3A:1C
Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee
Certificate serial: 019D2884C79D69302FF83E7E2252FD4D8641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
Manifest number: 0A46
Signing time: Thu 26 Mar 2026 05:01:23 +0000
Manifest this update: Thu 26 Mar 2026 05:01:23 +0000
Manifest next update: Fri 27 Mar 2026 05:01:23 +0000
Files and hashes: 1: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl (hash: 8R/p/bc1KIqPDqyEJ2e4WszZg4xU6FU4QTY1P3vedWM=)
2: GFZcD-SiqJlzeu5I4CSkb1OREjw.roa (hash: XxnmUWyfzPzcdobUtDhD16hiBtaiKFeoObHAgaQYHmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c7:9d:69:30:2f:f8:3e:7e:22:52:fd:4d:86:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee
Validity
Not Before: Mar 26 05:01:23 2026 GMT
Not After : Mar 27 05:01:23 2026 GMT
Subject: CN=000c08f24cd681b301e2bac785752320c8443a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2e:4e:c0:82:3f:1a:09:47:ec:be:09:4a:3a:
4d:df:9c:52:73:79:14:8f:6b:5c:de:a4:a5:e7:21:
45:60:6b:4a:8c:1f:2e:ae:3c:63:a7:b0:f8:b9:06:
f6:97:bf:75:a0:c5:a6:97:0e:11:74:98:d9:d6:95:
d9:1f:b0:64:7a:de:b8:8e:81:e6:7c:49:5c:ae:9f:
72:8a:cf:2c:17:d2:5c:d7:a2:66:b7:7e:1d:68:5a:
cc:af:11:d4:34:8b:5d:43:05:c9:76:1c:c2:b1:84:
57:f9:d3:15:b2:c8:2c:18:98:5f:bb:66:77:ad:3b:
46:9e:9a:b4:05:74:b6:0b:13:f1:81:25:60:dc:12:
a1:1e:1a:ea:0a:af:2d:35:d6:25:78:bf:4e:c1:a7:
1b:38:98:72:7f:e9:8f:fc:79:32:b2:63:53:ab:8b:
73:8b:d9:3b:a6:65:43:65:1a:77:02:59:af:ff:43:
18:42:3d:5b:bd:06:4f:f0:4f:86:69:18:f2:95:01:
ec:a0:ac:c7:5a:be:63:49:dd:0f:47:4f:2a:ac:e0:
1a:62:4d:44:22:d9:87:9a:40:7f:e7:b1:8c:43:8f:
33:82:83:6e:73:a1:a8:c3:32:e2:cf:bb:1c:24:97:
bd:0c:09:71:09:12:d4:71:04:47:5e:31:55:63:11:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0C:08:F2:4C:D6:81:B3:01:E2:BA:C7:85:75:23:20:C8:44:3A:1C
X509v3 Authority Key Identifier:
keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:51:4b:50:a9:88:96:4e:9e:b6:dc:12:fc:23:5e:fc:b0:0e:
2a:59:0d:f6:84:ca:12:7d:5b:11:71:5c:e9:07:64:ba:d6:c7:
03:a4:80:70:40:26:39:10:a9:51:e0:ec:79:7d:3a:64:52:67:
9c:af:a6:f0:ec:45:28:77:42:7a:ed:7a:d3:3e:11:da:30:d5:
dd:13:49:4d:67:88:56:f8:d9:98:6d:8d:e8:e1:44:29:53:f8:
48:c0:0d:2e:47:9a:70:94:78:fc:f8:43:58:e3:4c:8a:ac:e8:
6c:96:b5:1d:0b:9b:34:05:b9:e2:43:05:6f:62:31:87:93:d8:
a6:79:0d:07:11:e0:a0:f4:27:17:ba:20:a2:d1:f9:7e:bf:2d:
fb:87:1b:70:22:1d:a8:9c:54:c0:fd:9c:b3:7f:78:91:0c:f0:
51:4d:79:a6:c1:50:78:88:10:94:eb:48:e9:ca:e3:63:d8:5f:
ea:27:5e:00:6a:26:d2:9e:bc:ce:82:01:c1:81:7c:00:43:4b:
9c:95:33:e9:7f:df:76:97:64:37:28:5c:df:bb:dc:e9:e2:89:
05:bd:eb:2c:25:97:8b:c7:ec:c7:8d:fb:e9:2e:52:d6:ef:5b:
9a:cb:61:c5:38:b3:bb:02:2d:a6:1e:df:d4:ab:2f:b8:4c:1c:
26:b9:d0:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohMedaTAv+D5+IlL9TYZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NzFlNjY4NDMwNmI3NDgxNTZjMmFlM2Y0MjBiYjM2NmIy
ZWZjZWUwHhcNMjYwMzI2MDUwMTIzWhcNMjYwMzI3MDUwMTIzWjAzMTEwLwYDVQQD
EygwMDBjMDhmMjRjZDY4MWIzMDFlMmJhYzc4NTc1MjMyMGM4NDQzYTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S5OwII/GglH7L4JSjpN35xSc3kU
j2tc3qSl5yFFYGtKjB8urjxjp7D4uQb2l791oMWmlw4RdJjZ1pXZH7Bket64joHm
fElcrp9yis8sF9Jc16Jmt34daFrMrxHUNItdQwXJdhzCsYRX+dMVssgsGJhfu2Z3
rTtGnpq0BXS2CxPxgSVg3BKhHhrqCq8tNdYleL9OwacbOJhyf+mP/HkysmNTq4tz
i9k7pmVDZRp3Almv/0MYQj1bvQZP8E+GaRjylQHsoKzHWr5jSd0PR08qrOAaYk1E
ItmHmkB/57GMQ48zgoNuc6GowzLiz7scJJe9DAlxCRLUcQRHXjFVYxEElwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAMCPJM1oGzAeK6x4V1IyDIRDocMB8GA1UdIwQY
MBaAFBVx5mhDBrdIFWwq4/QguzZrLvzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYt
NzM4YzBiZjhlYTk4LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81MDZmMmEtNzI0Ni00MTkwLTk2ZmYtNzM4YzBiZjhlYTk4
LzEvRlhIbWFFTUd0MGdWYkNyajlDQzdObXN1X080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFFLUKmI
lk6ettwS/CNe/LAOKlkN9oTKEn1bEXFc6QdkutbHA6SAcEAmORCpUeDseX06ZFJn
nK+m8OxFKHdCeu160z4R2jDV3RNJTWeIVvjZmG2N6OFEKVP4SMANLkeacJR4/PhD
WONMiqzobJa1HQubNAW54kMFb2Ixh5PYpnkNBxHgoPQnF7ogotH5fr8t+4cbcCId
qJxUwP2cs394kQzwUU15psFQeIgQlOtI6crjY9hf6ideAGom0p68zoIBwYF8AENL
nJUz6X/fdpdkNyhc37vc6eKJBb3rLCWXi8fsx4376S5S1u9bmsthxTizuwItph7f
1KsvuEwcJrnQsw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:14 2026 by rpki-client