Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
File: FPt8Mzas1BidP6xjmigNmwAg8pg.mft (raw, json)
Hash identifier: H6/S7ECS5iN6u2SKgOyREAgS3ot2Fq+5G5s8kE6h4m0=
Subject key identifier: 12:24:A3:BB:FC:0C:F6:9B:67:F5:A1:30:91:36:13:81:18:3E:94:84
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Certificate serial: 019D38665521176A688437E18C5332C3159E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
Manifest number: 17D4
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: FPt8Mzas1BidP6xjmigNmwAg8pg.crl (hash: mzkuZUdWSCES+a8mZrpEOp7EC8qglS+2zSsVpHQRYFk=)
2: MD2PWTqpDDGEMux-2kxi3Hd8PQM.roa (hash: Pu3fjnw+yegdjONecUUu8p5b5PIQ+jy3LKoUoEMvgbg=)
3: V50bPPxe9__9PdVaWrp4pIj1_3U.roa (hash: IVLdcVsUqYG9MQEXxQ1iKoQ3JRljtxzT2Wh5hJYRUuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:55:21:17:6a:68:84:37:e1:8c:53:32:c3:15:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=1224a3bbfc0cf69b67f5a13091361381183e9484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:be:bf:92:47:ac:28:2a:3f:a5:e7:ee:43:
f6:78:7b:47:fe:b4:74:b2:03:16:09:93:2c:42:69:
6c:f7:19:2f:d7:a9:79:a0:64:a3:e4:77:49:e0:d9:
c9:38:85:49:3d:ee:e3:76:89:60:3a:45:50:c2:5f:
c1:cc:bb:ea:da:d1:5d:8d:c8:e2:40:fb:d7:ed:99:
09:fe:d4:77:04:f4:79:89:6c:af:19:44:36:78:88:
b0:58:47:d8:a0:50:37:d1:2f:7e:66:e9:e4:ab:bd:
40:49:a1:5d:b9:ff:1d:3c:55:15:c1:52:91:86:aa:
4f:0e:45:09:fe:63:57:eb:be:68:90:59:01:df:8e:
81:60:ff:ed:44:99:46:56:71:05:36:ee:12:01:41:
07:18:33:0c:f7:f5:ce:d4:fd:8f:c1:4c:ba:dd:6f:
60:b3:64:30:35:68:92:1e:2e:4a:e3:8e:c1:e8:16:
f7:02:82:a9:a0:0a:e1:fc:95:08:d2:23:57:33:93:
84:ad:ee:b8:e6:8c:7f:1b:29:81:cc:de:59:82:c8:
57:07:b2:ef:b4:e4:44:89:5b:c0:51:ff:a2:50:fb:
4e:3c:f3:ad:50:7f:b6:f7:7f:97:ef:ba:07:52:03:
a6:de:eb:f8:42:f0:65:36:d9:e6:f1:fe:d5:90:5a:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:24:A3:BB:FC:0C:F6:9B:67:F5:A1:30:91:36:13:81:18:3E:94:84
X509v3 Authority Key Identifier:
keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:72:e4:15:d9:af:ec:ab:af:11:ef:6a:7d:0e:da:34:f2:a3:
09:52:b9:c5:af:d8:e3:46:f3:82:46:bb:4c:cd:9e:ce:82:ad:
07:f8:11:87:37:37:9e:b9:d8:04:99:b9:40:aa:55:f5:c0:e1:
fa:59:33:2a:7f:1a:32:8b:f6:5f:eb:19:f8:a8:65:22:ce:ca:
c2:6f:8a:e0:79:31:97:17:ac:a4:4d:cc:b9:0c:87:fc:74:58:
c9:79:be:c3:17:51:48:a6:94:82:ca:7a:c5:b0:1e:46:cf:a2:
68:00:9b:63:3e:21:18:ec:74:94:1e:56:98:96:a0:87:76:26:
58:d9:a5:94:3a:c2:8d:40:34:e3:bc:ee:a6:cc:6c:95:e6:69:
ae:9e:9b:b6:6c:df:ab:db:a0:41:dc:f9:c7:85:a6:91:e3:02:
a3:6e:01:bd:0f:07:3d:11:71:7d:54:b1:b9:2a:ee:f0:ab:6f:
ec:91:21:46:7b:9b:9b:d5:11:f1:df:4c:ab:ea:68:71:19:1e:
aa:ce:92:2b:85:49:cc:bf:2d:45:9b:cb:0a:e7:34:f1:1a:af:
9c:c7:b9:db:65:aa:b2:2d:49:bc:5e:8a:5f:a3:63:36:af:d6:
96:89:70:35:0a:4f:7b:cc:f2:87:be:8e:0c:95:1c:fe:62:4a:
5b:f2:fa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:39 2026 by rpki-client