Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
File: FXM_-CvgC0GpkN7WtysEy3v1gNc.mft (raw, json)
Hash identifier: 3EZPpaIcfcYquDbKTSTBmLEPLDdnq/8zYoGXENObuyY=
Subject key identifier: 0B:8D:A0:DD:62:E0:ED:7D:AD:81:D6:94:76:DB:69:16:0F:8C:73:84
Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
Certificate issuer: /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Certificate serial: 019D37C0E6E90C0C7BC492B448DEA2E2EDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:01:22 +0000
Manifest this update: Sun 29 Mar 2026 04:01:22 +0000
Manifest next update: Mon 30 Mar 2026 04:01:22 +0000
Files and hashes: 1: FXM_-CvgC0GpkN7WtysEy3v1gNc.crl (hash: TGBmf0/P9ZCLe7vz+N3G7IC7mu8ioz7Jpg9FE+7I814=)
2: ZLCaZarmOydzUn6rnPA4DARgtdI.roa (hash: bWM+rtJ+nDproyFIfZ+Rzfa6rbod9ZVtKztR7u7HeaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e6:e9:0c:0c:7b:c4:92:b4:48:de:a2:e2:ed:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Validity
Not Before: Mar 29 04:01:22 2026 GMT
Not After : Mar 30 04:01:22 2026 GMT
Subject: CN=0b8da0dd62e0ed7dad81d69476db69160f8c7384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:e9:3e:94:06:6d:94:c2:f9:18:18:ac:46:
65:9f:65:28:1a:72:a5:8b:c3:0d:df:99:ee:4b:18:
39:27:cd:ac:dc:84:4e:bc:e9:e1:06:a7:17:79:57:
b9:ec:bb:92:cc:28:10:6a:94:be:70:b9:86:b0:d7:
8e:06:12:3a:17:db:4b:7a:a6:89:ca:a1:bf:91:c4:
43:01:bd:f0:21:9b:54:ae:de:55:8b:38:86:70:41:
33:e0:8e:14:04:24:8d:52:ec:3a:5c:a1:5a:d0:85:
f7:11:5e:43:8d:c6:6b:bd:96:02:23:a0:85:16:29:
2e:3c:e3:eb:cf:f7:c6:71:a5:bc:07:aa:54:1e:23:
84:8e:37:c5:bd:94:1c:2d:9c:e7:7f:37:e2:9d:3a:
6f:ed:c9:cf:e8:b5:42:49:fb:d5:70:9e:88:68:e5:
31:ad:9e:9b:89:d6:47:a1:e6:c0:b2:35:49:63:eb:
47:6d:38:3e:ad:00:7f:4d:3f:46:5c:88:b3:3f:1e:
bd:27:c7:11:d0:d9:45:d1:ae:ad:8a:cf:18:ca:d0:
bd:60:da:0a:18:09:99:f6:58:1a:e7:59:2b:12:67:
5a:4d:7d:13:c7:75:66:cc:72:4a:3c:11:02:cf:b9:
de:3c:23:2b:13:c5:f3:60:e8:40:62:f9:c5:85:07:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8D:A0:DD:62:E0:ED:7D:AD:81:D6:94:76:DB:69:16:0F:8C:73:84
X509v3 Authority Key Identifier:
keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0b:58:4c:2a:d2:3a:d5:a5:75:17:f0:39:a9:b1:a4:1b:56:
0c:27:25:4f:85:ce:fb:f6:89:28:0b:4e:9e:3b:7f:33:fa:4a:
75:b7:f8:70:74:3c:ec:dc:b4:8e:3e:42:03:08:ec:3f:d7:f2:
4b:4d:5a:4c:23:96:ec:fd:4e:d6:26:33:e0:22:4d:98:c3:5d:
ed:07:4d:fd:38:e5:3a:de:7f:9a:60:76:93:e4:a5:83:e0:ba:
02:90:17:16:89:bb:50:6a:2e:00:b1:ac:47:c1:4b:62:77:42:
16:fe:36:4e:9a:cf:2b:a0:4a:e6:32:a7:0e:0c:87:cb:45:1a:
bb:c0:ab:de:23:87:fb:1d:78:0d:c8:82:7e:a0:fd:15:6e:98:
aa:27:1d:ad:38:df:33:2e:50:bd:7c:fc:e9:e8:eb:88:9d:11:
59:7e:71:38:7b:4d:1c:c6:d6:5a:ce:68:03:98:1c:17:0f:f5:
b7:39:f7:69:c1:4e:25:bd:0f:c1:e2:73:0c:0d:a6:35:c2:bd:
f1:6c:5f:1e:c7:4e:53:6e:55:5d:22:c3:22:36:88:81:5c:f0:
16:18:1a:a8:2f:36:2f:f5:5d:52:ba:1b:45:da:e7:10:36:67:
d8:f5:72:1b:77:99:a2:54:d5:24:a3:d2:7c:72:85:63:18:cd:
19:63:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:20 2026 by rpki-client