Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
File: FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft (raw, json)
Hash identifier: HBrcvy/sv/0wPKj0ruXku+EbmRlpdHkpOYShP7HnAVk=
Subject key identifier: 10:74:8D:92:71:1A:3F:77:8F:2A:99:4C:08:34:A1:1D:1B:FE:CA:75
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 019D382E1430F7BAE5ED0245AE91D3E75118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl (hash: gdIWb49RBK+NDjDcbxOG8dc3KJ0CgQiW19Z05ETG2qE=)
2: MSXpcFJVWmFpep-wCgsZin8BaSk.roa (hash: ohEFObEZLYffE/U4SG8i1ZIGAH9G0J/KB4GeYQmg95o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:14:30:f7:ba:e5:ed:02:45:ae:91:d3:e7:51:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=10748d92711a3f778f2a994c0834a11d1bfeca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:41:1a:55:0d:f9:30:bc:56:c7:f2:59:02:
c2:bf:59:1b:f4:25:8a:e7:93:1e:d8:5e:d9:e2:23:
36:1f:92:1e:57:58:0f:93:ca:36:82:86:a6:7c:86:
53:36:f3:a3:99:0e:e1:fb:73:f5:21:60:38:b8:b4:
e1:04:bc:73:d8:ac:1d:a7:9f:33:b1:f0:f8:ce:2a:
a2:2b:e8:ac:19:92:01:f9:8c:7a:67:2a:ae:19:b8:
64:58:b9:c4:6a:5f:36:4e:63:f6:13:fb:fd:2f:54:
82:4f:b5:88:fd:2a:71:d5:a3:0c:e4:6c:64:8d:ac:
b5:79:9d:6e:99:8e:23:c2:b7:b0:fa:81:22:b7:3a:
68:17:67:32:8e:9b:9f:51:47:31:a1:c9:b7:18:49:
a2:bf:c9:c1:f2:6e:4b:bd:3c:c4:29:40:38:dc:e8:
ed:d1:1f:bd:f7:b0:1a:24:9c:6b:4b:1e:be:eb:92:
ef:a3:bb:da:6c:e9:2a:af:e7:0f:76:59:49:31:12:
a6:6a:8c:2f:55:a9:46:1c:a9:40:82:d3:0c:4e:87:
8d:20:a2:ce:d3:fb:c9:76:6d:b3:72:4c:df:1b:49:
19:91:fe:88:84:b4:0e:38:d1:fd:6b:42:02:35:e4:
b0:dd:06:84:46:e7:e6:fd:39:92:e7:29:0a:c5:46:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:8D:92:71:1A:3F:77:8F:2A:99:4C:08:34:A1:1D:1B:FE:CA:75
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:32:35:a8:28:bd:2b:b4:47:ed:4c:00:89:e9:c8:b2:55:76:
3f:3e:f1:0f:73:72:5c:d5:dc:dd:7d:15:89:60:4f:70:d4:12:
26:d5:0d:98:36:44:ce:94:a4:0f:40:75:a3:2f:a5:d0:57:4f:
2b:ec:af:9c:a6:be:0e:62:f9:13:de:60:fc:4f:e8:6d:23:ac:
28:c8:a4:46:a9:b9:84:61:65:28:93:f3:dd:40:6e:30:f0:bd:
27:3b:11:11:ae:ac:dc:ed:39:04:e5:73:17:fc:b9:92:7a:45:
2e:a5:d2:69:4a:7d:c7:8d:66:a6:39:67:0c:ac:c7:c6:1b:65:
c2:43:06:9f:a4:16:39:35:7d:3a:3e:7c:46:15:c4:77:82:41:
cb:f7:fc:77:1c:4f:fa:56:c2:8a:af:c9:51:52:ad:e3:d1:4a:
1e:1f:b3:37:61:1b:51:ed:dc:7e:16:1a:5c:40:62:e1:3a:a8:
34:16:50:5a:72:a4:e6:7c:1a:63:3d:d3:32:92:69:56:8f:84:
54:67:73:c4:5f:39:c8:de:a0:36:cf:24:8e:e2:35:b8:7f:13:
4d:b0:2b:f3:e2:34:ab:d9:87:1a:3e:af:2a:47:a6:51:fa:f9:
71:bc:fb:56:11:0d:5a:33:8d:b8:c4:09:37:4c:89:db:47:f6:
6a:f8:14:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LhQw97rl7QJFrpHT51EYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTVjNmY4MTVjNzBlZjE5MTBkMzc0OTM5NjM0NDVhZjkx
OGFiNTkwHhcNMjYwMzI5MDYwMDM2WhcNMjYwMzMwMDYwMDM2WjAzMTEwLwYDVQQD
EygxMDc0OGQ5MjcxMWEzZjc3OGYyYTk5NGMwODM0YTExZDFiZmVjYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgBBGlUN+TC8VsfyWQLCv1kb9CWK
55Me2F7Z4iM2H5IeV1gPk8o2goamfIZTNvOjmQ7h+3P1IWA4uLThBLxz2Kwdp58z
sfD4ziqiK+isGZIB+Yx6ZyquGbhkWLnEal82TmP2E/v9L1SCT7WI/Spx1aMM5Gxk
jay1eZ1umY4jwrew+oEitzpoF2cyjpufUUcxocm3GEmiv8nB8m5LvTzEKUA43Ojt
0R+997AaJJxrSx6+65Lvo7vabOkqr+cPdllJMRKmaowvValGHKlAgtMMToeNIKLO
0/vJdm2zckzfG0kZkf6IhLQOONH9a0ICNeSw3QaERufm/TmS5ykKxUb2lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBB0jZJxGj93jyqZTAg0oR0b/sp1MB8GA1UdIwQY
MBaAFBSVxvgVxw7xkQ03STljRFr5GKtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYt
MjUwMDQyMDM2NmZiLzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zZWZkYTUtYmU4Zi00ODZkLWIwOGYtMjUwMDQyMDM2NmZi
LzEvRkpYRy1CWEhEdkdSRFRkSk9XTkVXdmtZcTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDI1qCi9
K7RH7UwAienIslV2Pz7xD3NyXNXc3X0ViWBPcNQSJtUNmDZEzpSkD0B1oy+l0FdP
K+yvnKa+DmL5E95g/E/obSOsKMikRqm5hGFlKJPz3UBuMPC9JzsREa6s3O05BOVz
F/y5knpFLqXSaUp9x41mpjlnDKzHxhtlwkMGn6QWOTV9Oj58RhXEd4JBy/f8dxxP
+lbCiq/JUVKt49FKHh+zN2EbUe3cfhYaXEBi4TqoNBZQWnKk5nwaYz3TMpJpVo+E
VGdzxF85yN6gNs8kjuI1uH8TTbAr8+I0q9mHGj6vKkemUfr5cbz7VhENWjONuMQJ
N0yJ20f2avgUZA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:49 2026 by rpki-client