Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File: Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier: +0f8KW/u3vb8RpICnNS93uWJLIUpercgUAK7T+YcZBA=
Subject key identifier: 05:7D:94:72:B7:0F:D7:C6:1D:01:CD:E0:0A:A4:9C:4D:F4:C7:9E:38
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial: 019D25F110CE7E4F36D9F45C16200DEB74CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number: 06B8
Signing time: Wed 25 Mar 2026 17:00:48 +0000
Manifest this update: Wed 25 Mar 2026 17:00:48 +0000
Manifest next update: Thu 26 Mar 2026 17:00:48 +0000
Files and hashes: 1: Bv7qdIynKdZMI-P6-xF9VWllpNs.roa (hash: bLK9TvfWN2sH1qp924dJMpWvZP4Q59J3E6kgUjRdOMk=)
2: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: 6zPFt5++vPtt1g9Cca+EeappK9t1uv/m/6rQHAaMEZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:10:ce:7e:4f:36:d9:f4:5c:16:20:0d:eb:74:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Validity
Not Before: Mar 25 17:00:48 2026 GMT
Not After : Mar 26 17:00:48 2026 GMT
Subject: CN=057d9472b70fd7c61d01cde00aa49c4df4c79e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:e4:c1:78:87:4c:56:7f:9e:77:be:31:65:
f8:01:a0:ae:ab:a1:f1:d9:c3:69:fb:e5:70:aa:77:
74:f4:16:04:d0:32:e2:45:64:06:41:11:85:04:30:
27:71:36:01:0e:93:5a:fc:50:8d:92:99:f1:9c:84:
8f:b8:a4:28:77:34:47:20:01:24:10:77:51:6a:3f:
1d:74:ff:a7:2d:a2:b4:0f:83:5d:a0:e5:9f:e3:bc:
5d:bc:b0:29:fb:fc:1b:ef:a8:a6:9f:11:7a:1a:9a:
ae:c3:b8:e0:53:c6:19:4a:41:fe:21:0e:d0:f6:49:
1b:f7:f7:60:55:3b:ed:c1:9e:91:d7:6d:c8:e8:6e:
a9:06:06:12:5d:22:05:26:ff:38:90:74:72:7f:25:
8f:b8:0d:62:1f:c3:cd:e9:01:c2:7c:4d:eb:97:85:
a5:9e:cc:b3:c3:db:d6:7a:b3:50:9d:8b:e4:e1:af:
c7:ec:de:9a:84:a4:ed:39:7b:c1:0a:93:60:c4:4a:
46:f2:f4:54:65:86:6f:aa:f2:a7:08:73:91:a1:4c:
98:e8:0c:37:4b:75:36:d6:d6:5e:4b:40:65:cb:d0:
f5:3e:38:55:ec:13:76:0b:1f:dc:76:8f:d0:6f:93:
8b:f6:97:3b:ca:00:b2:40:44:6e:6a:41:77:5b:f7:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7D:94:72:B7:0F:D7:C6:1D:01:CD:E0:0A:A4:9C:4D:F4:C7:9E:38
X509v3 Authority Key Identifier:
keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:61:b8:07:32:6d:0c:9c:05:3b:74:8e:ba:f0:b6:fa:50:ae:
75:77:50:d9:98:2f:73:fa:81:07:42:f7:65:9c:80:6f:e2:cf:
81:fb:66:b2:d0:cf:89:43:b8:c1:c5:bb:05:f6:ef:91:7b:37:
48:23:ad:79:f9:0b:08:85:5e:a7:57:90:81:2e:53:a4:0d:b3:
08:79:d2:7c:d5:ac:fc:fd:71:4b:ed:bc:f4:c8:5e:e4:37:fb:
3e:c0:33:4b:a9:1b:18:75:b7:d8:44:46:0e:6c:d1:98:78:a0:
aa:33:e0:8a:7e:95:9d:73:15:e4:b7:16:8a:ce:40:75:88:3a:
09:f4:8b:41:21:f7:ff:f5:9c:5a:39:bc:07:29:af:e2:67:ac:
d9:80:f0:ee:83:16:b0:93:80:f7:c5:1d:f4:74:4b:fe:d1:29:
c3:24:0f:af:b7:cd:43:07:d9:55:52:8a:6b:21:de:43:46:98:
9b:7b:5b:30:f9:dc:34:b6:7d:32:4b:38:a2:27:92:93:01:52:
44:c4:b7:d7:c8:06:2e:81:5b:43:db:68:96:6a:c0:2e:3c:55:
c8:63:59:af:b6:19:7d:ad:df:5e:aa:c5:b0:cc:23:52:2e:1a:
79:3e:0d:dd:c6:98:13:7e:02:a5:ad:fe:28:92:02:2d:95:14:
7e:37:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 19:20:33 2026 by rpki-client