Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
File: FnhcBIzz1bIYafSUNPLTu0fUO6E.mft (raw, json)
Hash identifier: fEPmhTVIOhpUQaTlnqt30MF1gGBfZKT37p+1M4oF0Pc=
Subject key identifier: CE:B2:A8:5B:52:52:24:CD:AB:F0:61:41:BB:FF:27:67:73:73:2B:D3
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Certificate issuer: /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial: 019D2772C961EB003284E627F4EBC6DEAC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
Manifest number: 1787
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: FnhcBIzz1bIYafSUNPLTu0fUO6E.crl (hash: R6tC7EkFFlE4v3KanQMb6uHwjTTrE5jOxLuBTdGCYIs=)
2: sWpGqOrvUhu_YeE103lUKrGogwY.roa (hash: G53bT0iyZh0zmMZw59Fi11N/QHTX1EKTX4fPsCxbvVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c9:61:eb:00:32:84:e6:27:f4:eb:c6:de:ac:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=ceb2a85b525224cdabf06141bbff276773732bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:ff:50:a8:00:47:ef:42:c4:4b:03:21:5b:
f3:37:bc:22:50:70:fd:97:b2:6e:24:0b:f6:54:03:
ff:47:a0:3f:23:3b:bf:39:9c:4c:67:09:5e:15:f9:
27:24:8a:de:1f:c6:92:2e:be:ef:3b:10:ff:82:b4:
6a:fa:87:a7:3d:f9:0c:3e:e5:f7:93:6e:50:e0:d1:
db:05:28:bc:9d:b6:f5:eb:55:89:fc:17:70:aa:dc:
85:47:a0:76:10:47:4d:f5:92:5f:44:4a:b1:9d:7c:
56:3f:d1:66:0b:a3:f1:55:d9:5b:fc:01:d3:0c:53:
c5:e4:d2:5f:43:3e:b6:26:d4:29:19:7c:3a:98:21:
bf:aa:87:07:55:30:0b:16:ae:34:64:2a:65:ac:a1:
95:e8:45:9d:b0:67:ac:a5:c0:bc:00:38:fa:2c:81:
43:f2:0f:bd:0b:ea:85:e7:22:8e:f8:a9:e9:59:74:
75:3c:c6:dd:5a:f9:bd:a0:dc:67:b5:ee:3e:93:10:
e7:e8:36:47:fa:81:cb:6c:a2:db:c6:07:48:46:a4:
f2:e8:fc:8d:62:8c:e9:94:c2:f5:d9:de:fd:e0:27:
1f:81:e4:2d:87:21:0a:8f:15:26:f9:e9:50:fb:6d:
d1:04:fc:f2:4d:f0:dd:45:bb:29:6f:d6:82:fd:a5:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B2:A8:5B:52:52:24:CD:AB:F0:61:41:BB:FF:27:67:73:73:2B:D3
X509v3 Authority Key Identifier:
keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:aa:0d:0f:3b:bb:31:34:1d:a0:51:03:47:b8:64:e0:d2:2a:
98:2e:f9:b9:89:57:62:fe:16:15:7c:e6:e8:6b:59:66:28:26:
80:81:8d:d6:00:51:07:19:8c:82:3b:fe:88:21:18:f7:e0:dd:
a3:d8:25:39:e8:41:28:d9:a4:08:7e:c6:9b:5d:55:79:8e:13:
35:4a:29:85:dc:76:d7:5b:c9:46:c0:40:b7:80:56:c8:e0:16:
42:28:30:7f:34:b7:75:2f:fa:1b:b1:74:3e:83:92:0a:69:6c:
0f:b2:ef:4f:1f:8d:08:b6:2b:04:fd:3d:30:e0:f9:a0:74:04:
43:a2:90:8d:9a:ba:5f:c7:4d:55:dc:a7:c3:84:8b:4e:98:b8:
0a:3d:77:26:3c:b0:b5:94:53:71:8a:ea:4c:cf:99:e0:75:47:
c0:d3:02:49:42:af:2d:3a:36:bb:4f:94:63:5d:63:37:e0:d5:
66:df:cc:37:f7:0e:e1:68:34:3b:47:3a:47:e7:0c:92:b5:5b:
a5:10:61:64:2b:c2:fc:6d:cf:24:09:02:d2:9d:4e:5c:5b:dc:
6e:7b:15:5b:a3:99:89:51:06:60:44:fc:6e:08:f5:40:88:a8:
0c:6e:ac:4c:a0:4c:3e:e7:36:5e:92:e8:79:15:28:83:dd:ca:
79:48:ed:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncslh6wAyhOYn9OvG3qweMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Nzg1YzA0OGNmM2Q1YjIxODY5ZjQ5NDM0ZjJkM2JiNDdk
NDNiYTEwHhcNMjYwMzI2MDAwMjA3WhcNMjYwMzI3MDAwMjA3WjAzMTEwLwYDVQQD
EyhjZWIyYTg1YjUyNTIyNGNkYWJmMDYxNDFiYmZmMjc2NzczNzMyYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Pf/UKgAR+9CxEsDIVvzN7wiUHD9
l7JuJAv2VAP/R6A/Izu/OZxMZwleFfknJIreH8aSLr7vOxD/grRq+oenPfkMPuX3
k25Q4NHbBSi8nbb161WJ/BdwqtyFR6B2EEdN9ZJfREqxnXxWP9FmC6PxVdlb/AHT
DFPF5NJfQz62JtQpGXw6mCG/qocHVTALFq40ZCplrKGV6EWdsGespcC8ADj6LIFD
8g+9C+qF5yKO+KnpWXR1PMbdWvm9oNxnte4+kxDn6DZH+oHLbKLbxgdIRqTy6PyN
YozplML12d794CcfgeQthyEKjxUm+elQ+23RBPzyTfDdRbspb9aC/aVs5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6yqFtSUiTNq/BhQbv/J2dzcyvTMB8GA1UdIwQY
MBaAFBZ4XASM89WyGGn0lDTy07tH1DuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNGEwMGYtYzczZi00MDE0LWFkZTAt
YWIzN2ZlZDUyYTRkLzEvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNGEwMGYtYzczZi00MDE0LWFkZTAtYWIzN2ZlZDUyYTRk
LzEvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKoNDzu7
MTQdoFEDR7hk4NIqmC75uYlXYv4WFXzm6GtZZigmgIGN1gBRBxmMgjv+iCEY9+Dd
o9glOehBKNmkCH7Gm11VeY4TNUophdx211vJRsBAt4BWyOAWQigwfzS3dS/6G7F0
PoOSCmlsD7LvTx+NCLYrBP09MOD5oHQEQ6KQjZq6X8dNVdynw4SLTpi4Cj13Jjyw
tZRTcYrqTM+Z4HVHwNMCSUKvLTo2u0+UY11jN+DVZt/MN/cO4Wg0O0c6R+cMkrVb
pRBhZCvC/G3PJAkC0p1OXFvcbnsVW6OZiVEGYET8bgj1QIioDG6sTKBMPuc2XpLo
eRUog93KeUjtsw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:20 2026 by rpki-client