Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
File: fFkLczxW4U66xp97RNS8lU6TcOM.mft (raw, json)
Hash identifier: ls3xEeWLFc2mX+b5EIv4wD19L4VMyJu7fE+aZub135g=
Subject key identifier: 39:7D:52:BD:A7:B9:48:60:A2:91:46:5E:05:51:CD:44:08:77:FD:70
Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Certificate serial: 019D27DF917191E29141198C589CDEA857BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
Manifest number: 155C
Signing time: Thu 26 Mar 2026 02:00:56 +0000
Manifest this update: Thu 26 Mar 2026 02:00:56 +0000
Manifest next update: Fri 27 Mar 2026 02:00:56 +0000
Files and hashes: 1: D4LM_-yMapw5el8niCLWD3O15zs.roa (hash: fm1csnGJtCUdbxvyMsvPSvwlp32QsYfLZeDz4aX3VyA=)
2: fFkLczxW4U66xp97RNS8lU6TcOM.crl (hash: fdr75zq74OAP97AkXZe7fOJjMOr85QPZHNE+/SQMAMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:91:71:91:e2:91:41:19:8c:58:9c:de:a8:57:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Validity
Not Before: Mar 26 02:00:56 2026 GMT
Not After : Mar 27 02:00:56 2026 GMT
Subject: CN=397d52bda7b94860a291465e0551cd440877fd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7b:f9:ca:c7:63:23:35:8a:e0:ef:22:b4:90:
9c:a1:3f:6e:98:10:78:c7:f3:31:b1:59:53:a6:1a:
d3:b4:60:7d:07:69:ec:ad:7a:45:c1:1b:54:68:80:
b9:ce:f2:b9:e1:4d:f9:40:d7:a6:1f:a8:d5:1d:4a:
da:cb:99:42:30:b2:58:d4:63:f2:7b:cf:de:ff:6c:
28:b4:f5:94:d1:01:f9:3f:1c:c2:3e:67:5b:fd:55:
fd:19:02:91:c0:4b:e8:cf:d0:f5:84:b0:06:1f:a9:
36:7d:34:2a:14:0c:66:68:e4:a6:ab:dc:27:02:d3:
8d:6f:93:d9:8b:d4:29:3e:96:4b:e1:0d:e7:4b:ce:
b5:d5:49:b2:35:d5:fb:76:28:51:78:46:b4:28:e6:
57:a2:24:28:c0:10:49:25:d9:07:02:c6:b6:60:c6:
b2:f7:bb:52:7e:1b:fd:50:78:b7:40:69:43:6d:ec:
6d:3c:2a:3f:c9:9b:51:6b:63:46:43:32:13:86:ce:
b7:3b:24:01:e2:19:fd:78:f3:d3:d2:d2:3e:cf:00:
6f:e6:d7:90:8c:60:54:cb:9d:da:18:d9:1f:a0:c0:
51:34:29:92:fe:52:f8:5b:11:1a:90:79:47:a3:f3:
6e:2b:ae:a3:1c:a2:be:d7:b9:af:73:44:62:49:aa:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7D:52:BD:A7:B9:48:60:A2:91:46:5E:05:51:CD:44:08:77:FD:70
X509v3 Authority Key Identifier:
keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fc:33:fe:33:ef:b6:97:f5:b4:a9:a5:67:ba:62:d9:84:64:
ae:87:59:06:e0:09:c3:05:c6:db:3b:2d:3a:86:6c:88:f7:7e:
f1:03:aa:17:ee:db:a1:f5:5e:c3:3d:74:37:eb:57:d0:6f:dc:
6b:43:6b:c7:03:17:6e:7b:37:5e:41:a3:8b:8a:ea:01:e1:e7:
8b:4d:c5:5d:44:62:22:b7:3b:3e:22:b8:12:b4:70:c8:a6:a0:
85:06:94:1f:60:b9:cf:b8:0b:ab:26:12:4c:a0:a6:0f:ea:b6:
4c:a9:af:3b:ed:4d:90:3c:41:67:a3:27:97:d7:67:69:06:27:
0e:52:05:63:26:35:87:c4:a7:75:c1:33:95:59:c7:1e:ef:a2:
57:62:71:00:2d:1d:3e:22:e7:52:df:1d:10:e7:a0:11:78:78:
4f:4f:ec:1e:a3:69:23:f6:6d:73:14:a9:94:16:d9:08:a6:1b:
f5:68:76:24:32:41:94:9b:53:e4:c6:b1:5a:95:03:52:cd:ae:
97:41:85:2d:8d:af:06:fe:e1:2a:be:bd:53:bd:2a:1a:94:92:
f5:25:ea:ec:ee:57:4d:ff:47:07:a6:71:db:7b:f5:81:6c:c1:
2c:2e:0b:e3:b8:cf:19:a6:c2:9b:b3:17:c9:7f:80:06:7b:4e:
6f:26:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:04 2026 by rpki-client