Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier: aq8mEcwZ3/ALV1h5jfctP9R3uh4l1N3T7M+M2ycfJzk=
Subject key identifier: 50:B2:62:15:EF:85:1E:77:D3:2A:8B:97:33:BF:10:CD:40:93:F5:BC
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial: 019D37F76047F7CAC12960FB61994671BEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number: 17AB
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: +sIu60g7eVjzu/APO9ucYd0NB+m7Zi4+o5G59H0prBc=)
2: pqfPRJRXyOZ16sEictRnWg5paro.roa (hash: Iy8adOlkmCKzZcCemxuStClF7zRpOXHA9lf434dtvhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:60:47:f7:ca:c1:29:60:fb:61:99:46:71:be:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=50b26215ef851e77d32a8b9733bf10cd4093f5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:e8:0c:d7:c8:46:d5:e4:27:87:35:a5:c0:
98:b8:1b:94:d3:dd:b5:2d:c0:40:d3:5b:84:87:9d:
45:1f:fc:6b:a4:b6:4b:ec:cb:cf:49:fb:cf:b4:04:
d3:f1:57:7c:23:4b:3d:12:2f:f6:1b:b3:c1:7f:a1:
65:86:cc:92:d3:be:34:e0:ef:cb:98:9e:e5:84:12:
5f:c6:d4:dc:fc:1c:40:67:da:02:0a:b2:8d:02:fb:
fa:1b:07:97:4c:c2:93:2d:37:d8:ba:76:b3:9d:1d:
b2:e7:21:29:d1:2f:ac:64:97:61:73:a6:a6:1b:4f:
5c:38:78:07:0e:7c:57:1f:46:fb:20:a6:91:7d:7b:
e6:88:e0:36:f3:86:0c:dc:b3:0e:3c:6e:bb:09:b6:
68:82:c7:2c:da:1f:e1:68:b3:c1:bd:14:cd:00:8d:
97:42:e7:2b:54:57:38:52:b9:81:6c:ad:e8:0c:73:
2e:34:a7:f6:f5:b7:45:45:8b:62:fe:d7:f0:96:6b:
6f:c9:45:dc:63:95:95:88:0f:af:23:5f:09:31:f7:
d9:ed:ff:02:7e:32:a1:c9:7f:ff:43:bf:88:f2:66:
21:65:79:c9:84:4c:da:6b:94:fc:c4:49:62:cd:7f:
23:39:88:f0:07:d8:1b:b8:d5:9c:bb:86:d1:81:8d:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B2:62:15:EF:85:1E:77:D3:2A:8B:97:33:BF:10:CD:40:93:F5:BC
X509v3 Authority Key Identifier:
keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b4:71:27:b2:d6:54:e8:fc:15:83:ef:57:53:22:83:f8:47:
16:c5:72:7b:72:95:2b:bf:df:f9:4a:0b:b0:11:a4:0b:2e:48:
3b:73:cb:44:db:e3:1e:2c:d2:3f:96:aa:c9:ab:20:56:8b:94:
a7:20:9c:5c:fc:27:d4:05:67:b6:81:c3:d4:f6:9c:07:13:90:
46:6e:ea:29:27:70:cd:98:3e:d5:50:d8:73:ac:27:8e:06:87:
8a:53:83:23:25:24:15:18:91:8a:a7:27:9a:0f:d5:c8:85:e0:
3a:91:6e:ef:65:5a:47:f8:2d:07:82:fb:de:59:a1:02:65:54:
9e:f5:9c:7a:46:dd:df:ba:45:86:dc:b8:28:35:ff:04:24:20:
07:1f:89:38:2f:9f:b8:62:64:9a:c6:ef:cf:f9:03:a4:7a:2f:
d6:2a:20:44:51:07:92:1c:07:54:cc:57:4f:7f:8d:af:43:29:
fd:39:a8:c4:a6:cf:fb:f6:a8:22:ef:67:af:1a:4d:7a:35:59:
ea:5f:59:5c:b3:1b:f7:bb:65:47:68:75:7e:67:6e:c5:aa:ff:
7e:74:3d:47:f1:be:0b:c4:cd:a7:94:9f:61:2d:af:77:cf:18:
b3:a5:58:5a:b5:23:3b:bd:09:c5:14:1f:39:9f:e8:a0:bb:5f:
93:c6:91:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:16 2026 by rpki-client