Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
File: FgRPZYu8kicHhfe7ByrJNolfSTM.mft (raw, json)
Hash identifier: SVXMCXGceaPNZHsNDVzMOfFDZo9FLN77APMRmjbgJDw=
Subject key identifier: 37:97:66:57:5F:09:56:8F:D3:C6:0A:18:9A:78:B4:E5:3F:33:87:8D
Authority key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
Certificate issuer: /CN=16044f658bbc92270785f7bb072ac936895f4933
Certificate serial: 01A17BF2B96DCFC1E20D8E73E722DC9D0447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
Manifest number: 0359
Signing time: Tue 27 Oct 2026 06:01:06 +0000
Manifest this update: Tue 27 Oct 2026 06:01:06 +0000
Manifest next update: Wed 28 Oct 2026 06:01:06 +0000
Files and hashes: 1: FgRPZYu8kicHhfe7ByrJNolfSTM.crl (hash: yp7pZX5degjvcrPH4pP3GRUXQJtdXXYCI/1XlCWiBik=)
2: WatKg_0MoVqhZNrvrktjemd-kkU.roa (hash: HB6mZ1x55io1eH3g2s4HymshoqNX8HC4t8plzzNViRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:b9:6d:cf:c1:e2:0d:8e:73:e7:22:dc:9d:04:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16044f658bbc92270785f7bb072ac936895f4933
Validity
Not Before: Oct 27 06:01:06 2026 GMT
Not After : Oct 28 06:01:06 2026 GMT
Subject: CN=379766575f09568fd3c60a189a78b4e53f33878d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:1a:37:45:67:46:15:f0:6a:f1:15:54:c5:
47:74:57:82:a0:dd:05:b4:b2:d8:eb:a5:13:51:8c:
03:e3:8e:b0:33:58:ad:57:49:b5:b9:c1:b6:08:bf:
dd:dc:95:63:f0:11:53:fc:15:b5:dc:2f:22:7f:6e:
58:9a:f1:a6:91:f5:61:7d:28:d4:5c:0d:70:28:f0:
73:ff:b9:42:55:d7:7f:ed:53:43:5e:ec:a0:45:c1:
ea:8f:86:e4:b9:32:3e:b9:b0:64:7f:24:a8:a8:23:
d2:6b:ab:2f:b4:68:eb:9f:a1:f5:b3:02:2a:75:fa:
22:fd:89:64:f5:cb:fa:06:6a:59:7d:aa:0d:d0:2b:
6f:d3:37:f0:61:44:84:26:8f:fa:1c:93:6c:23:c4:
dd:3a:3b:42:18:f0:fe:6c:d4:4b:dd:cf:83:7e:5b:
76:d5:b1:94:22:bc:b1:99:24:46:da:0f:7c:a2:3b:
84:dc:7e:21:14:a2:23:e5:2e:97:6e:de:28:71:e6:
f9:ee:5a:f7:0f:de:61:9c:12:61:c5:1a:d3:9f:6c:
7e:e1:5f:70:4c:02:8b:e4:42:e3:e4:d3:c0:23:60:
c2:17:e3:a1:2f:de:5c:01:ea:ab:62:d1:6d:82:cc:
86:4a:40:e7:f0:b6:66:e7:fc:6d:b3:ab:0d:f1:af:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:97:66:57:5F:09:56:8F:D3:C6:0A:18:9A:78:B4:E5:3F:33:87:8D
X509v3 Authority Key Identifier:
keyid:16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:53:4a:a2:f1:92:15:64:b6:3f:90:48:c8:47:60:0b:a4:4e:
a3:ea:0b:44:c4:de:7d:62:0d:e6:c8:af:31:98:59:bd:9c:61:
70:a0:a6:c9:72:c5:6f:dc:ae:99:3c:9d:8d:fc:dd:6e:de:9b:
23:7a:d7:20:fd:d5:28:7b:1b:6b:9e:23:9d:31:95:eb:e1:04:
0f:c7:e2:74:63:20:0c:13:88:2c:95:ff:53:5c:19:7e:18:94:
b8:f5:d5:b1:a9:d9:10:0b:e4:be:2a:0e:48:9e:c5:95:da:0a:
1c:c3:94:01:81:ad:de:22:b7:29:a0:e0:3b:01:b7:f9:04:78:
c7:b7:29:e4:41:94:fa:5c:ad:43:4f:63:87:25:21:5f:86:f6:
20:5d:e6:30:7d:85:ec:00:ce:29:ee:f4:50:75:d7:61:38:4e:
8a:8f:98:65:09:0c:ba:cf:14:1b:32:b6:c8:80:94:fb:79:00:
5a:26:7e:9e:7c:67:69:74:de:92:94:25:0e:a2:3a:58:70:47:
31:d4:45:db:53:37:25:43:bb:b6:89:cf:a3:d4:2e:86:96:a2:
cc:9e:fe:fd:c6:79:f6:c6:c9:0e:88:50:56:a4:94:0d:b1:73:
0b:7f:98:11:51:c5:b6:83:a3:6f:c9:b2:f5:3b:78:14:ff:29:
25:40:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:26:47 2026 by rpki-client