Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
File: FZjXXo4y1ehH30qho1wpNEyXbiY.mft (raw, json)
Hash identifier: ZDvPfnIAtkN3UvYRYJ3vQMgz3U2m6JhqT3JWWj069w0=
Subject key identifier: AE:6D:37:A8:D2:CB:BA:ED:3B:B4:A6:CA:B7:A6:D0:01:67:55:38:19
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial: 019D39E5D5902D7AF1DF0B975AE4651EA98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
Manifest number: 1263
Signing time: Sun 29 Mar 2026 14:00:56 +0000
Manifest this update: Sun 29 Mar 2026 14:00:56 +0000
Manifest next update: Mon 30 Mar 2026 14:00:56 +0000
Files and hashes: 1: 4mkQMrlyEA5ZWh8SOWOIHRbBVXg.roa (hash: QjIp1iiXD6vyZ0MdKvtInyszrVm18OrO8O3KBCQDfSQ=)
2: FZjXXo4y1ehH30qho1wpNEyXbiY.crl (hash: QzrjAEhTE2ibMTQdKsE1NeN7nBSAGmkvRyH1byNgfzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:d5:90:2d:7a:f1:df:0b:97:5a:e4:65:1e:a9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Validity
Not Before: Mar 29 14:00:56 2026 GMT
Not After : Mar 30 14:00:56 2026 GMT
Subject: CN=ae6d37a8d2cbbaed3bb4a6cab7a6d00167553819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:f3:0c:b0:e1:c4:cc:69:81:18:21:8e:78:
f9:75:27:51:89:f4:62:dd:52:d6:63:ed:9f:20:35:
26:8c:c7:d6:60:b3:3c:b9:19:02:3a:d1:b0:65:37:
60:06:16:1a:ed:9b:e0:f0:a5:c7:4d:18:32:25:cb:
f2:a6:64:1d:08:e0:c0:59:67:33:cb:b8:8d:4d:18:
55:4a:53:4f:b8:2c:01:8e:13:74:91:26:3c:ef:f9:
b3:6b:5b:e4:4d:69:c5:c7:e9:f1:2d:47:f0:b2:5b:
57:06:41:ea:d4:b9:14:1b:f8:71:d2:e5:17:93:c6:
79:a4:ed:74:2c:69:19:ba:db:e2:43:a3:e0:3e:e1:
2d:26:bd:4d:fd:bc:c9:73:50:7d:5d:2a:3a:e3:89:
a4:f8:f0:cd:a7:8e:04:24:df:fa:2f:ed:58:7c:b3:
8d:6b:19:42:c1:98:bf:55:a4:b4:32:99:9b:60:f0:
60:40:29:0f:c6:28:40:eb:fa:27:f2:71:ea:97:45:
df:f8:0e:c2:fa:0a:fa:f6:8f:53:6d:ac:63:ba:e8:
e0:09:50:80:ed:6b:52:36:6a:46:e5:8c:28:47:f8:
cb:2a:8d:f7:b8:c4:f0:d7:a3:9f:26:e9:d8:db:07:
d2:4c:f7:83:8c:7f:0a:31:78:dc:fc:22:e1:6a:d5:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6D:37:A8:D2:CB:BA:ED:3B:B4:A6:CA:B7:A6:D0:01:67:55:38:19
X509v3 Authority Key Identifier:
keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:41:6e:21:09:bc:c2:ba:76:d2:a2:0e:d6:55:a2:13:a9:0a:
79:da:c9:f8:59:8f:51:19:fd:1f:a3:3a:f9:78:8c:d9:26:0f:
27:79:35:8f:6b:02:ed:f2:0f:e4:82:a7:35:91:ae:19:f7:66:
df:2a:40:32:05:a7:a7:71:05:a2:75:55:d5:4a:c5:bb:4f:bd:
a1:69:17:e7:87:79:3d:29:f9:49:5e:99:29:5e:4a:3b:8b:3b:
6e:b4:2c:b3:6f:1d:bd:31:b4:50:a8:05:07:f3:71:3c:f3:33:
a6:1d:c5:2e:33:60:2f:dd:da:e6:41:0a:c4:7e:77:03:55:45:
70:f6:00:62:3a:37:0b:f7:9e:64:b9:e1:67:0b:a5:6f:38:7f:
aa:eb:37:57:11:f2:51:cd:eb:10:eb:db:ca:59:78:0a:1e:7f:
6b:17:b5:1d:88:4a:40:eb:8c:80:fa:3a:08:7f:1c:30:31:06:
10:80:59:29:7e:59:0f:9f:27:60:e6:d6:56:da:c1:b9:e7:aa:
be:aa:fa:55:82:9e:d7:58:20:18:1d:7a:68:fd:c3:74:b5:33:
4e:09:b7:a5:dc:d4:db:a6:c1:2b:24:c1:00:6d:64:42:bd:9c:
1f:d2:9b:68:db:de:12:ef:a3:f1:d4:ef:40:8a:b8:d0:71:50:
2a:ba:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:51 2026 by rpki-client