
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File: FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier: n7udtuLgNf/MRYqkhU3qhLYTsUtAiYX2fyMvpYVUSG4=
Subject key identifier: D0:23:DC:69:5A:F5:0B:A5:C9:CB:E5:D5:F5:38:3C:F6:09:63:9B:7C
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial: 019D37890620D681652A02AD78A131107381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number: 02B6
Signing time: Sun 29 Mar 2026 03:00:19 +0000
Manifest this update: Sun 29 Mar 2026 03:00:19 +0000
Manifest next update: Mon 30 Mar 2026 03:00:19 +0000
Files and hashes: 1: 14moTVCPRDZ_u1h30FOe4lYZ_Uo.roa (hash: wcUkVN7ia2xJx1oMg8zn/LuYUzAy2xjBnV4ceG0F+9o=)
2: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: JfkGHzOtxK7UbFbB5YfN8cSroQfmQPB5VkEyR38Ex3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:06:20:d6:81:65:2a:02:ad:78:a1:31:10:73:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Validity
Not Before: Mar 29 03:00:19 2026 GMT
Not After : Mar 30 03:00:19 2026 GMT
Subject: CN=d023dc695af50ba5c9cbe5d5f5383cf609639b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:ee:3f:45:99:f3:66:9b:04:73:45:91:7f:
b5:b4:7e:13:a3:65:34:b5:ca:bb:92:8d:eb:65:65:
64:c2:9c:f4:64:8d:f9:e3:d9:87:0c:ed:7f:46:c5:
7a:89:01:6b:8f:c0:03:61:d7:39:49:7c:2f:b8:01:
d4:fb:cd:c4:62:f3:0b:b3:09:ad:4b:17:08:50:0d:
59:f3:51:4b:3a:10:0e:46:98:9a:62:13:f0:b6:20:
b4:55:f3:12:84:04:c1:40:0d:8c:55:b7:77:46:ff:
8e:7e:be:fc:f2:fe:38:b3:02:07:4d:47:06:75:ce:
55:f6:f0:b2:ec:e7:8d:87:5f:7c:14:da:b7:50:36:
4c:6b:0f:86:44:46:27:ae:6f:29:69:ae:c1:8c:12:
3f:22:34:26:8a:a5:53:c6:e7:c2:71:fd:53:74:19:
c8:0e:b3:0c:04:82:c5:d9:75:ed:88:7a:f4:57:40:
bd:be:1a:0a:e8:27:fb:9d:e1:cb:3f:5f:e7:fc:46:
a5:b8:75:7f:07:ae:e4:e1:9a:49:9e:0e:7c:b9:4f:
17:4a:aa:ac:ed:4f:af:af:ce:eb:31:5b:e9:8f:41:
fe:d5:14:bd:c2:db:51:6f:02:3a:4f:b3:68:4e:e0:
9b:b9:22:ee:21:6a:e7:a7:ce:7c:4d:97:7b:bf:c3:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:23:DC:69:5A:F5:0B:A5:C9:CB:E5:D5:F5:38:3C:F6:09:63:9B:7C
X509v3 Authority Key Identifier:
keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cb:2e:dd:dd:db:d0:0d:ac:d2:c0:98:34:7e:39:ee:a5:8c:
cc:37:99:e1:e6:d4:af:a2:d4:ce:e2:0d:fb:37:fa:a0:4c:98:
fc:1c:92:22:a8:3d:02:77:95:47:9f:c5:b3:8b:22:61:4b:7e:
94:c9:41:2b:03:58:22:cf:2a:0e:49:10:4f:0e:42:5a:77:a6:
62:d1:d6:a4:94:47:7d:91:bc:4b:09:a0:50:88:8b:fa:65:b6:
f5:db:09:14:0e:71:11:72:48:b4:c3:8c:d7:da:23:b5:f0:0d:
23:18:07:c8:a5:eb:15:97:62:3d:17:3c:ac:df:7c:d2:cb:27:
8e:16:76:0c:da:3e:ea:db:6a:90:ee:f3:70:a0:cf:9c:69:8c:
9d:31:70:6d:94:d3:9a:72:b0:2a:fd:9c:99:e4:36:c8:5f:ae:
43:e0:57:5d:22:bc:06:51:fa:b2:6c:69:c6:d5:c7:db:12:f7:
3b:8b:6c:cd:8c:0d:d9:8d:c7:ee:46:d3:52:1f:f7:a7:59:25:
2f:c0:5b:61:6a:81:6b:0d:f6:7f:52:b9:bc:8d:39:8f:3a:77:
23:89:36:57:4c:13:c7:3f:7b:4a:7d:d5:f0:f2:8f:4a:c9:1d:
be:6d:9b:a1:d4:87:7f:8f:28:ee:1f:33:6c:6b:ee:35:b7:62:
ae:e1:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:48 2026 by rpki-client