Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier: j4ne3UaCquDtBubdVC0hr01tsGtAlPYwKOOosRZWKww=
Subject key identifier: 4A:E2:29:D2:64:10:44:ED:E3:EA:F4:CE:C0:6A:6E:3D:3A:96:17:31
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial: 019D04AEC007F1EBA11CC73904747696A9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number: 113A
Signing time: Thu 19 Mar 2026 06:00:54 +0000
Manifest this update: Thu 19 Mar 2026 06:00:54 +0000
Manifest next update: Fri 20 Mar 2026 06:00:54 +0000
Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: 8H8v3zdK4Is4jbCKOPoltVkNb71xudQMg1VwUT0x6S4=)
2: jDnrlpzju9hJvaoQu4OXwOXPSyA.roa (hash: 5ssODwVsvynqY+E+xEJbdKWKWIk6XsrizpcJBHs3DN8=)
3: uxvdRH3Lx7ZudvJAlNDH4WnIMb8.roa (hash: 7H1SzU9/jyjG63PZcxwjrSZgzIIH3ECkB+OiPPAHQwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:ae:c0:07:f1:eb:a1:1c:c7:39:04:74:76:96:a9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
Validity
Not Before: Mar 19 06:00:54 2026 GMT
Not After : Mar 20 06:00:54 2026 GMT
Subject: CN=4ae229d2641044ede3eaf4cec06a6e3d3a961731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:f3:8f:81:40:de:5b:b7:b0:02:4f:2a:71:
58:88:5c:3d:53:50:e5:17:5f:9f:03:12:16:3f:90:
78:8b:14:b0:3c:b1:7e:4f:47:66:a0:db:a6:1f:5d:
ef:39:92:cc:72:49:d4:d4:36:1f:6d:81:c1:35:47:
69:74:a2:e3:0b:d9:fb:2e:93:e1:f8:97:b9:72:33:
de:ba:bc:05:81:57:7a:99:90:d6:69:6b:11:1f:7e:
94:fd:ca:cf:42:72:45:dc:3c:b4:de:d0:69:6d:a2:
46:8c:bc:84:43:b9:8b:8a:b2:3a:05:0a:a0:59:e2:
e5:03:0f:5b:b5:25:5d:d2:b5:09:aa:d3:83:e4:ba:
4e:f2:54:94:bf:43:a8:ea:33:41:86:59:c3:14:4d:
1d:25:d3:d3:5f:73:03:c5:3a:75:cc:f3:99:c5:eb:
6c:8e:19:06:84:e5:b3:e1:ab:bc:52:6d:56:52:bc:
06:57:d2:c2:63:af:0d:41:90:82:8e:4e:c7:29:21:
18:d4:53:b4:db:e9:e7:e6:ef:27:7d:55:39:68:df:
9a:bb:a7:09:ba:d5:af:09:b0:0f:ed:b1:39:7c:a8:
ae:9b:26:39:fc:67:d1:3e:9d:18:d6:1c:8d:08:f0:
4e:9b:fa:a2:98:14:cd:d4:d2:21:38:d7:91:38:01:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E2:29:D2:64:10:44:ED:E3:EA:F4:CE:C0:6A:6E:3D:3A:96:17:31
X509v3 Authority Key Identifier:
keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:20:c4:5d:ac:6d:3d:79:f9:4c:db:84:72:f5:c8:ff:09:5a:
12:e5:a1:c3:8c:03:77:02:65:e0:c2:53:29:75:42:5b:a3:2d:
18:c3:7a:6c:bd:ca:a1:1a:5b:af:e6:c7:89:98:c3:42:66:7c:
cb:06:d9:32:e9:1b:63:7e:d3:03:e5:2b:50:a4:c2:20:37:98:
85:7b:25:ad:02:a2:06:90:ae:60:6e:c2:4a:24:0a:09:06:b0:
3c:05:6b:d0:35:3d:11:6a:32:ae:8c:d6:cc:84:44:b4:08:58:
be:aa:3f:28:40:0a:0a:4d:e5:4c:cc:65:0a:4e:2b:c1:41:1d:
d0:cc:e4:d1:31:30:cf:0c:ff:e7:f3:33:96:6d:52:b2:db:45:
c9:d7:12:62:58:a5:2a:1a:4a:a8:48:91:66:aa:9a:b7:bf:d9:
56:1f:18:c3:01:3d:9b:37:cb:3b:5a:32:c9:03:b6:32:8a:a8:
a7:14:06:eb:45:e6:57:f8:5f:e5:80:71:34:01:be:87:44:4b:
d2:38:26:ad:e4:53:fd:06:99:d2:4e:a4:b0:ce:fd:fc:b2:96:
2c:f1:cc:3e:9b:02:25:77:f0:06:31:cd:1b:43:ba:96:46:77:
b9:19:e0:8c:20:7f:c1:01:34:5b:40:94:76:bc:9b:f2:93:f0:
87:55:92:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:03:20 2026 by rpki-client