Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File: FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier: 5FI7k1X4VQT8kDyf4nb2ek/v3tqUYHzwSe+kNus3r2Q=
Subject key identifier: BF:80:B1:2A:21:AF:31:CD:65:88:42:3E:CA:01:90:1E:88:18:1C:C6
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer: /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial: 019D1FEF3583492C485BD37FAEF66E9AE9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number: 1884
Signing time: Tue 24 Mar 2026 13:01:03 +0000
Manifest this update: Tue 24 Mar 2026 13:01:03 +0000
Manifest next update: Wed 25 Mar 2026 13:01:03 +0000
Files and hashes: 1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: WYOyh/CpubEsv47/XypQDUwGJiRSYW2tBro0I+1YFBs=)
2: X9c9GMVeYaYQqH2XyexJIcOVd5Q.roa (hash: LMkSmQgBQGug0NOzVugCkxvy72yFENtMgmfAEYQ2z28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:ef:35:83:49:2c:48:5b:d3:7f:ae:f6:6e:9a:e9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
Validity
Not Before: Mar 24 13:01:03 2026 GMT
Not After : Mar 25 13:01:03 2026 GMT
Subject: CN=bf80b12a21af31cd6588423eca01901e88181cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8f:89:a7:10:bd:b4:52:cb:f5:77:d9:a5:a2:
11:6f:df:39:b2:c4:eb:da:49:ae:18:44:91:75:c4:
9b:5a:fb:4c:9e:11:13:92:c0:6c:b7:d1:e2:42:0c:
9e:92:87:be:cb:f9:cc:4d:ad:fb:85:6a:94:6c:a5:
4c:d5:6f:92:1b:06:ae:ab:32:e8:cc:ce:5c:ac:21:
66:8f:bb:ad:42:c7:2d:39:5f:ee:d1:13:e6:1d:1f:
7d:fa:0c:ba:fd:34:50:1a:a8:91:57:25:5b:20:1c:
a7:45:f8:ea:1e:08:03:a6:b9:8e:b5:cb:23:d0:0c:
8d:34:b7:cc:59:8e:98:73:8a:65:67:81:0d:0a:bf:
b4:d5:17:ab:7b:7b:4c:57:ef:4b:2b:bc:aa:da:be:
e2:c9:e4:2e:13:ad:c5:5e:0f:8b:62:d7:c4:ad:38:
03:6e:b1:62:29:54:c4:5d:ab:a5:4b:bf:33:b4:2b:
53:6c:d1:82:a2:24:96:67:e2:b8:9b:11:c5:77:4c:
ec:9e:c9:8b:b8:ea:61:b7:77:9c:59:8b:07:0e:48:
d6:03:95:17:17:eb:47:18:3f:1c:6c:61:2a:46:02:
02:7d:85:5e:82:44:67:9b:6f:26:bf:26:c3:f5:54:
54:79:14:78:95:8a:a5:6c:85:44:9a:c3:da:ee:cc:
61:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:80:B1:2A:21:AF:31:CD:65:88:42:3E:CA:01:90:1E:88:18:1C:C6
X509v3 Authority Key Identifier:
keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:0d:d6:fe:33:59:30:20:bf:61:f5:4c:21:23:f8:d0:ff:
a5:e9:0d:78:5b:1d:65:a9:13:5a:d7:37:7b:3a:48:ae:63:0c:
05:bc:60:53:c2:a5:d0:ef:48:8e:23:4f:85:03:43:8d:8f:1e:
a3:c2:4c:23:04:2e:e2:c9:08:b4:ef:4d:dc:92:49:81:eb:e5:
aa:18:c7:90:fa:f0:3e:97:55:7d:fd:57:44:66:36:d7:62:aa:
5d:fb:49:66:52:fd:84:71:fb:86:71:f3:30:db:bf:42:71:04:
7e:82:79:ad:55:bd:b1:2d:a2:19:ed:32:2f:79:2d:23:cf:18:
ae:f9:dd:de:85:ba:c1:d9:53:74:6e:b7:f5:6b:a8:72:5f:73:
e3:95:af:2b:ba:c6:93:71:91:13:7e:cd:42:3f:0c:59:30:06:
89:43:3d:bc:98:b6:5e:a9:e7:73:8e:10:32:56:4b:d3:c6:91:
fa:97:b2:3c:24:cf:be:16:6c:cc:c0:6b:5e:9b:09:81:bf:be:
55:41:25:11:7c:45:24:d8:7a:7f:c0:c1:4a:0a:20:3d:53:a0:
64:ad:f6:10:48:b0:f3:cf:53:0e:9e:28:f1:9e:38:88:af:8e:
17:12:fb:b2:83:14:67:b7:bd:93:10:c7:db:49:d0:4f:3b:f5:
9f:82:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:33:47 2026 by rpki-client