Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
File: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft (raw, json)
Hash identifier: PLPfyIjvxsVU0YSqJtwOJNd50Og8hZ+D8QlMVValAy8=
Subject key identifier: CA:0A:78:26:E1:60:FF:71:82:CF:48:75:F1:4B:D4:2D:01:24:A0:C6
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 019D3941132B053804CCE12F3B75AEF7D01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:00:59 +0000
Manifest this update: Sun 29 Mar 2026 11:00:59 +0000
Manifest next update: Mon 30 Mar 2026 11:00:59 +0000
Files and hashes: 1: 8msB_pW-2uX67lJFvxygplmiAYM.roa (hash: MdKHF0c5oREJJjw35mtLasbrxg7HAjIQzXUDf6T975M=)
2: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl (hash: qrEU4GMpyEzi14JhD4lYNxlk9AANuda51WIrSG5WrAE=)
3: IajAPDXFrm4cByKhe7ThnZfhW3I.roa (hash: vevJj6ucu/ojjyycSHmCWDRHZV5C3N0NfeV2mJqpgMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:13:2b:05:38:04:cc:e1:2f:3b:75:ae:f7:d0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Mar 29 11:00:59 2026 GMT
Not After : Mar 30 11:00:59 2026 GMT
Subject: CN=ca0a7826e160ff7182cf4875f14bd42d0124a0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:d8:44:58:27:3b:b9:b2:35:1a:52:7c:0d:
54:8d:e7:4f:44:7b:84:49:ef:15:bf:da:92:d8:3d:
6d:98:b9:a8:a7:d7:02:ff:77:25:c5:2b:08:2b:46:
77:3b:c1:5e:1e:61:74:5f:53:13:b6:93:dc:73:89:
25:97:99:31:7d:12:62:ef:0d:05:78:52:67:e0:c0:
78:98:6c:ec:7b:c3:da:ec:70:42:a6:7e:b9:5f:b0:
b3:fa:5a:2c:e0:94:80:c5:11:8f:3b:97:ac:39:f9:
0b:89:34:c4:1a:ae:d6:6f:5c:98:05:f9:8b:36:f8:
0a:e1:eb:90:ab:71:78:48:6f:f8:74:15:d1:38:b2:
21:23:96:49:2a:d3:29:81:4e:b5:35:01:03:1b:81:
de:53:dc:04:b3:44:55:87:c3:0e:b9:21:86:71:fd:
d3:5c:a7:3b:9f:d0:f3:46:35:5a:d2:97:7c:cf:6b:
e2:00:1b:30:61:dc:29:e8:40:dc:fd:6a:c1:09:1c:
03:87:52:10:94:cd:0e:57:a7:d7:4e:da:a8:88:e3:
76:8e:21:ff:d0:8e:2e:a5:98:4b:95:f6:81:60:a6:
40:26:05:c1:f2:03:74:c0:90:66:6a:f3:1c:24:81:
d2:57:07:22:b2:cf:ca:2f:e5:f0:d2:cc:e0:15:8b:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0A:78:26:E1:60:FF:71:82:CF:48:75:F1:4B:D4:2D:01:24:A0:C6
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:14:c1:6e:7e:ad:de:96:cf:d7:53:c1:55:94:90:05:a1:b2:
c7:6e:0b:a3:93:0d:07:d5:d3:70:f8:cd:d0:24:49:7e:95:70:
57:50:97:9b:c1:b6:3f:4d:f5:99:a8:b7:3b:22:a4:51:58:59:
2e:2c:ef:82:73:fc:08:5c:5c:08:47:81:9b:cb:dc:13:28:46:
3d:93:be:9e:ae:5b:ce:d6:c4:49:10:c4:5e:b5:13:20:ff:28:
d2:a8:97:97:f0:40:dc:65:10:20:c1:69:1d:15:7f:0c:0d:79:
4c:11:9b:d0:ac:d6:9f:ab:d2:0a:b1:80:b1:01:4e:11:2c:08:
8e:fd:bc:aa:5d:8d:f2:26:3d:4d:ef:de:97:fc:a3:bd:2f:38:
ba:b0:2c:79:db:63:24:c5:e8:83:a7:bd:59:83:92:13:b4:e0:
f2:ad:83:35:e6:cc:12:a8:f9:59:42:c9:55:ea:c9:11:38:d5:
b7:bc:35:cd:13:a7:d9:2b:ff:51:c9:ba:8d:79:2a:89:5d:a8:
6d:00:df:b7:5d:4d:75:85:40:8c:a2:52:24:49:da:71:26:36:
b2:fd:35:2e:ee:d4:7b:12:05:bf:17:a2:cd:a6:f7:5a:ad:57:
6f:97:e9:2a:a1:8c:1a:2b:23:41:99:c3:7a:f7:59:d0:26:20:
d9:1f:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:57 2026 by rpki-client