Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier: IUOJy/ya3SXJSYRYiF+mWKYlhlMkFUHwvgv281crrzw=
Subject key identifier: 4A:E1:18:39:3A:31:23:62:0B:7C:E9:7B:81:7C:4B:8A:F2:DD:1D:22
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 019D390A5BCC838FDC8C2E135BDF8334C7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 10:01:13 +0000
Manifest this update: Sun 29 Mar 2026 10:01:13 +0000
Manifest next update: Mon 30 Mar 2026 10:01:13 +0000
Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: b+9xACBOQMhbFpwY54zmJwf8neFk5mIK0EVR10u1MXM=)
2: K_kctLzaNMQhFHN8joV117TaoeQ.roa (hash: vYf0k8T0+nNX++AoHAW2e73Jb3z/XutqucqoGOIMVv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:5b:cc:83:8f:dc:8c:2e:13:5b:df:83:34:c7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Mar 29 10:01:13 2026 GMT
Not After : Mar 30 10:01:13 2026 GMT
Subject: CN=4ae118393a3123620b7ce97b817c4b8af2dd1d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:e6:bd:4d:4e:4b:ea:94:40:42:a6:f0:9b:
cf:a7:aa:c0:bd:74:e7:af:1f:a9:2c:51:76:14:ba:
d4:0c:85:91:ae:50:f0:84:b9:b1:a8:17:0d:05:3d:
2f:79:72:8c:66:de:fe:47:9f:fd:c2:64:27:f8:1b:
87:09:c7:a1:85:c3:41:ba:61:ca:4c:eb:f1:e2:96:
a3:83:61:ef:72:28:f0:22:d0:a4:97:f1:be:d5:40:
94:1d:fd:97:cf:86:34:fa:02:e5:e0:dd:14:7e:06:
8a:95:1a:25:f3:d8:29:76:ab:4e:1b:a9:0d:1c:17:
dd:f7:0e:7f:b8:87:ee:15:ee:f1:cd:61:92:32:09:
83:e0:93:c6:cc:de:6f:79:98:d9:ed:3e:37:c4:38:
79:04:2a:85:44:bd:ca:ba:3d:0e:12:21:03:e0:81:
02:bd:94:f4:e3:af:f7:57:60:ee:9d:91:08:5a:08:
9a:2e:51:ef:7a:40:fb:94:25:a6:92:ea:88:e5:24:
6a:ae:73:9f:9a:9a:75:ad:7e:37:24:ae:f9:8c:4d:
56:8b:8e:30:ab:22:af:e8:49:31:33:22:58:8a:08:
f8:9a:1a:4f:5d:6a:17:41:84:07:8b:41:89:23:1a:
d1:1e:72:4c:94:6e:8e:b8:ac:8c:71:08:4a:1b:00:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E1:18:39:3A:31:23:62:0B:7C:E9:7B:81:7C:4B:8A:F2:DD:1D:22
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:19:8a:2b:28:dd:2e:5e:cf:24:56:03:fc:f7:a5:5d:2c:3d:
79:ba:f0:de:56:d8:38:9c:e2:61:73:06:0e:58:0c:86:d8:dd:
37:5e:c8:f0:1f:f8:ff:ae:b4:54:f6:11:4b:d0:13:6f:2d:db:
e4:36:5c:6d:df:e8:03:34:2d:93:8a:bc:d4:76:70:85:84:f6:
da:c0:f5:65:13:f6:94:a1:9e:ef:fa:e3:b8:71:e1:b7:6e:02:
9b:ad:aa:8b:de:26:79:29:6a:09:21:94:b8:8e:47:da:eb:d8:
f2:a1:85:ca:20:5d:c4:71:1d:5d:50:59:31:b1:12:94:0f:74:
89:59:6d:16:0d:c4:e5:27:84:25:0a:ef:96:02:96:76:ac:6e:
48:d8:cd:07:0b:fb:6b:b5:52:a7:7e:ce:83:28:93:70:04:2c:
7d:26:e2:93:b7:e0:76:f4:65:e4:43:34:fc:99:9a:c8:d2:6f:
45:5c:54:5a:19:1f:53:80:dc:6a:f3:bc:8d:22:0d:a8:5c:d8:
73:08:fa:16:29:1b:05:11:fe:67:34:2a:70:1c:43:31:e3:85:
97:6a:77:08:6c:dd:06:5b:d1:be:b5:7b:48:13:7b:57:d3:7d:
8d:cb:82:6d:46:f8:96:26:8f:24:57:2e:df:e4:f9:ef:bd:10:
72:0d:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:07 2026 by rpki-client