Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier: zeNP5+/sJel5Pv02O1OEYHvXi89Wkr/D4oLmGxAcnOQ=
Subject key identifier: A4:A8:6B:43:04:A4:28:56:01:0E:03:A0:76:64:B2:8B:31:D2:86:95
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 019D3752D507FC2C2CF054EFE61EDBD71051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number: 15A3
Signing time: Sun 29 Mar 2026 02:01:08 +0000
Manifest this update: Sun 29 Mar 2026 02:01:08 +0000
Manifest next update: Mon 30 Mar 2026 02:01:08 +0000
Files and hashes: 1: 4KVFT5rfCFpQJiwyphxd1Ug6J-g.roa (hash: H9IZSHKQQb+XSiam4n6FXPX7X+NUo4iyE9Bfz0ZsuCI=)
2: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: +/qHsdERm/HWemFnU02vLvMAsJLy02W2uEMSNXcscVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d5:07:fc:2c:2c:f0:54:ef:e6:1e:db:d7:10:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Mar 29 02:01:08 2026 GMT
Not After : Mar 30 02:01:08 2026 GMT
Subject: CN=a4a86b4304a42856010e03a07664b28b31d28695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:a8:1b:bc:9a:a9:ce:8f:48:a4:ee:72:43:
f7:b9:95:22:b9:2a:21:9a:d6:ab:b4:9a:8a:49:23:
22:14:68:b4:7b:a8:07:76:08:19:31:81:6c:7b:f8:
8e:ff:53:06:15:c0:f8:e7:d0:e1:af:be:c7:7f:e5:
79:66:11:bd:de:25:fc:95:fd:cd:1c:52:87:7f:a3:
82:77:c1:ca:b9:2d:d7:a6:76:71:3a:66:b6:26:a0:
37:e7:57:94:54:9d:19:2c:e8:96:0e:5b:2d:9a:a4:
59:a0:51:98:af:e1:d4:7d:6d:ea:e1:37:24:73:12:
ce:89:ee:68:1d:cd:8a:94:80:89:c1:14:59:84:a7:
bd:4f:0c:be:d1:8b:0c:4b:2d:ad:12:1d:0b:f2:10:
40:78:0c:fc:42:dd:1c:9d:65:ea:6e:56:08:ca:4a:
cb:c2:3f:d9:99:90:a6:8b:9d:27:1c:77:5e:19:4d:
c5:51:29:6e:9e:4d:43:41:2f:5b:84:c4:c6:02:89:
7e:8c:35:a5:19:a4:9b:44:ad:69:02:6c:96:05:c3:
c0:af:24:f4:ce:de:78:f6:8c:8b:69:04:b4:35:84:
62:38:f5:e0:98:e4:b8:da:02:86:49:a5:62:9a:a7:
a3:c0:a3:b8:d2:33:e9:06:61:52:72:8e:44:45:fb:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A8:6B:43:04:A4:28:56:01:0E:03:A0:76:64:B2:8B:31:D2:86:95
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:10:2f:a4:86:fc:29:f9:75:8b:60:c6:00:e5:12:09:a6:c7:
dc:38:2f:39:49:f1:98:71:e2:2e:d3:38:f8:ae:77:3f:5c:55:
cd:3d:1b:b0:50:9c:d8:f2:16:7b:1a:33:71:9b:67:59:45:74:
c9:70:0d:2b:c0:40:02:65:e8:57:cc:e7:ad:00:17:52:a0:9c:
50:c5:86:23:38:52:27:7b:52:92:12:ba:09:1d:43:89:e6:7e:
66:ec:39:d3:66:fd:e7:1a:3a:5b:90:24:39:af:f7:b0:c6:19:
d5:c9:6b:06:af:e8:2a:65:c7:51:07:82:e9:c3:db:34:3d:74:
32:57:13:5b:aa:15:8a:97:d1:2a:12:e5:3f:0e:e5:1a:e8:26:
d9:7a:25:cf:f4:33:68:24:e0:aa:52:4a:d1:89:df:c0:89:77:
01:9b:ec:d7:42:3a:fc:51:de:cb:ec:ab:77:ef:b9:97:f3:82:
57:f0:c3:de:2f:97:ae:37:0e:92:3f:b7:04:28:57:5b:7e:cc:
a4:21:bd:a2:92:f8:f1:83:90:4d:d6:f1:fa:5c:e8:2d:0a:eb:
4b:d5:fa:dd:dc:32:eb:4e:0d:89:93:2e:16:29:26:cf:f3:f0:
45:17:55:c5:c2:7f:d3:b2:fd:e3:fc:2a:b8:a7:59:12:23:14:
29:d0:e8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:19 2026 by rpki-client