Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier: ooPHg/jm18rKtBRfi2Y9h2X+TpUv3yW2dVuG8dZslJQ=
Subject key identifier: 5B:98:E5:52:D3:A6:3C:B6:80:DE:B5:13:AD:91:9E:40:2D:1F:54:A6
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial: 019D2772C0B375F8357A929320B282F8B11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:02:04 +0000
Manifest this update: Thu 26 Mar 2026 00:02:04 +0000
Manifest next update: Fri 27 Mar 2026 00:02:04 +0000
Files and hashes: 1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: UWPxyxXFYXnQWjt+3vqAI/HJdjqEZCLDRRBFsWQQj4k=)
2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c0:b3:75:f8:35:7a:92:93:20:b2:82:f8:b1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
Validity
Not Before: Mar 26 00:02:04 2026 GMT
Not After : Mar 27 00:02:04 2026 GMT
Subject: CN=5b98e552d3a63cb680deb513ad919e402d1f54a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:1f:af:22:83:9c:6b:44:e2:33:cc:8e:ae:
53:b8:70:07:9b:96:b6:f3:82:97:1b:aa:3f:74:f7:
a0:ae:98:86:8c:dd:c3:33:59:74:2b:e1:1e:08:dc:
5b:f6:7c:5e:45:5a:68:a6:07:7a:c0:80:42:e7:e6:
21:35:f5:ec:19:7e:3a:2e:f0:bb:9b:52:02:12:8a:
33:30:99:6c:7b:95:c1:8c:68:e2:a0:a5:be:ef:e9:
b8:80:c4:b5:4b:61:c1:ce:90:98:a8:b6:22:9f:e4:
8e:d0:c2:a1:f1:7c:e4:6c:df:c6:41:52:1c:d4:46:
32:6d:0a:1f:3e:6b:4d:80:c9:b2:e9:52:1e:c8:40:
b5:81:03:94:f3:ae:05:45:4e:be:61:23:4a:0c:44:
5e:76:39:7d:3b:ff:ed:31:f9:c5:66:c9:05:f2:b9:
64:04:64:ed:4a:08:df:d6:cf:63:43:0d:3f:95:ad:
75:e6:a0:77:eb:22:07:f3:43:20:8a:67:7b:e5:04:
76:04:16:3d:35:f1:e0:9a:85:a7:c4:3b:13:a6:d0:
32:12:b2:c4:05:11:5b:03:9e:d2:26:73:23:8a:4d:
0c:68:41:6a:45:8f:58:bb:04:47:34:b8:bc:18:69:
87:46:f6:ed:30:fb:62:47:24:6b:cb:e4:4b:df:42:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:98:E5:52:D3:A6:3C:B6:80:DE:B5:13:AD:91:9E:40:2D:1F:54:A6
X509v3 Authority Key Identifier:
keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:27:c0:a1:a2:f4:12:7f:f6:82:06:a7:77:39:0a:f7:6f:90:
09:aa:80:01:fa:b5:fc:b0:cc:82:dc:02:6b:33:f1:e8:f1:4b:
43:d7:b8:61:c2:ae:f8:47:a5:98:7d:16:67:99:ed:2a:c3:24:
e9:56:82:1a:b8:60:94:36:ec:5a:7e:57:a9:46:27:38:61:c8:
2b:49:cc:25:1a:12:bf:e8:2f:09:b8:e4:49:8a:87:23:e9:4d:
77:e4:19:99:ff:3f:50:46:df:1c:ce:28:ab:14:c4:0a:c8:d6:
12:eb:b2:5b:ab:77:02:b9:22:79:d9:e8:7f:8e:76:f2:4f:3a:
84:fb:39:7d:cb:fb:b5:72:2d:ac:d2:cd:99:4f:ab:8c:74:e5:
7a:71:ab:62:49:e1:af:4c:65:62:a6:db:df:da:73:d5:1b:e7:
e8:c9:a6:11:f3:fe:5c:4f:6b:eb:cd:b8:f6:bf:e4:3c:e7:d4:
2e:c1:8c:15:57:99:8c:cc:53:13:f5:e4:fa:9d:5f:91:e0:76:
ca:5c:95:c8:0e:86:1e:e7:4f:2a:9f:24:ad:fc:fc:bd:58:30:
a0:cd:75:dc:e7:7a:27:0c:29:28:f1:4c:5d:04:00:b9:c6:8f:
f7:d6:f0:cd:46:e6:d9:da:fd:1d:2c:a6:43:d5:57:6d:9a:63:
7e:90:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:24 2026 by rpki-client