Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File: xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier: a0Wabpr31QRZXDu6dFyY8FurnWxZ9NChgN5RsqhZK8A=
Subject key identifier: 3A:C5:A0:19:DB:BE:3D:92:B6:B6:44:23:66:71:1B:F8:B8:CD:50:02
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial: 019D284D825A886F56326AB703E65C6767A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number: 044C
Signing time: Thu 26 Mar 2026 04:01:01 +0000
Manifest this update: Thu 26 Mar 2026 04:01:01 +0000
Manifest next update: Fri 27 Mar 2026 04:01:01 +0000
Files and hashes: 1: MBR4X9txb_DAPbAumwTsJqubBTw.roa (hash: 3GXUKqS4uNcGQw91JnWr+7X42phsItesfGJzuOIsuBE=)
2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: I8pg8KPjMkbNqap0NetnZXRsVPz3U/6Pj7aza90Wwmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:82:5a:88:6f:56:32:6a:b7:03:e6:5c:67:67:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
Validity
Not Before: Mar 26 04:01:01 2026 GMT
Not After : Mar 27 04:01:01 2026 GMT
Subject: CN=3ac5a019dbbe3d92b6b6442366711bf8b8cd5002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:e6:f0:fb:ba:1a:8b:9e:9f:29:ab:50:9e:
9f:da:a6:e8:70:71:b0:60:93:b7:4c:cd:7a:d7:53:
cc:ac:5e:27:ea:6b:3b:23:f1:b1:dd:5d:fc:2d:64:
2b:fe:95:68:fe:09:7f:b5:32:a8:36:c9:8e:94:e5:
07:59:bc:06:66:2b:90:7f:ad:42:3a:df:f4:b2:56:
ba:5b:e0:3a:7f:8a:1b:9e:ce:05:d7:52:0f:75:e2:
d1:ad:9b:04:1e:65:8e:2a:88:8d:de:eb:56:be:65:
c7:ea:1c:73:c7:bf:03:82:bf:35:3d:fc:f7:ee:f9:
11:8a:67:a3:fa:06:ab:a3:65:9c:d8:bb:4a:8e:36:
43:24:46:59:3b:ac:e7:2c:ea:26:f3:89:8f:16:b0:
2f:01:34:40:58:dd:f7:dc:c2:36:43:2e:3c:03:1a:
68:6a:15:4e:59:c0:b0:47:f5:72:fc:79:e5:83:16:
28:96:ca:4a:b8:9c:0f:5e:54:99:df:86:2c:92:4f:
de:d6:53:4a:c0:e4:e9:a6:f9:5b:9c:13:b7:2d:2c:
4f:32:e7:ed:95:4c:61:1c:aa:ab:b1:ed:74:ba:3a:
c1:04:82:67:c4:04:b3:6f:69:ae:28:a8:e7:aa:24:
32:39:f9:b8:4a:62:f5:d6:67:1c:d6:d9:a6:a8:d2:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:A0:19:DB:BE:3D:92:B6:B6:44:23:66:71:1B:F8:B8:CD:50:02
X509v3 Authority Key Identifier:
keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b7:80:ca:2c:0e:52:2f:e0:06:c6:94:47:ea:6d:56:29:d2:
2b:d4:f0:6d:31:c1:80:64:67:e6:86:c2:76:65:11:ad:76:35:
10:4d:34:bc:0c:14:d0:7d:c6:f2:d0:26:36:a5:c2:a1:8e:32:
96:9f:a7:ad:64:91:9b:46:b2:48:3a:26:5f:bc:e3:21:c9:62:
4e:95:cb:f6:ab:29:09:db:54:b2:a4:06:bd:be:be:c2:20:85:
88:e2:17:64:9a:53:ac:f7:9b:cd:d4:da:7a:64:ad:36:2e:e6:
9c:e5:0c:1c:31:14:c7:41:d1:cd:a6:27:d6:03:95:c6:f1:01:
4e:65:4f:aa:9a:ca:ec:c6:43:91:e3:4a:b4:9b:4e:dd:8a:57:
e9:e4:51:10:3e:47:e1:2a:db:93:da:36:9c:1d:53:1a:22:af:
1e:58:03:87:1d:c8:c8:b4:51:ed:94:44:33:2d:e8:50:55:ad:
6d:cd:98:74:53:52:59:d9:67:fd:6b:b1:cb:84:63:4c:e8:14:
47:ef:22:1a:38:4f:dd:38:03:2e:df:a4:2a:41:9b:09:f2:c2:
7e:45:dd:d3:06:de:88:92:13:3f:63:94:a3:ba:7f:f4:75:ac:
8f:76:7b:8e:61:7e:78:34:28:39:1a:34:f1:8a:dc:90:7c:0b:
c9:27:e0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:48 2026 by rpki-client