Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
File: FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json)
Hash identifier: 5lGeCVYWcsxtP2+MhVErZ0WTp4RrslEGfITIhnVMwJ8=
Subject key identifier: 22:51:00:BA:C6:6C:6F:25:DB:B1:46:69:A4:46:EA:81:13:3A:57:47
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial: 019D38D39F942CA4EA97F7D63D92159F113B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
Manifest number: 0594
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: Dry5_ZM0-5UWueV3Xh-0UF6oy_8.roa (hash: loIcYvo+tpFSssRwcMc7jqSuMGlvbkxXG14SU3atHhw=)
2: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: UpwFLoVElUb0Ph8jTZAUkXDrLrMfORjdjsoAwhPa5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9f:94:2c:a4:ea:97:f7:d6:3d:92:15:9f:11:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=225100bac66c6f25dbb14669a446ea81133a5747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:e1:60:56:2c:4d:57:41:b2:e4:f0:49:6e:
f0:9a:3b:91:7c:c0:48:3b:78:e0:f2:d6:f2:c6:ce:
0d:60:8b:71:d0:b1:b0:c3:c8:7f:3e:b8:2b:ed:a2:
52:85:a1:28:ab:08:4b:f7:79:c8:9a:a0:67:66:2b:
30:ec:be:b7:90:f0:44:18:ec:a9:02:06:24:e8:39:
67:f9:84:2e:4f:69:74:a8:e3:a5:f5:59:d1:37:d2:
9e:0a:8a:69:b7:fd:ef:19:11:85:14:f5:23:74:28:
55:10:93:d1:b9:28:c9:dc:a9:fe:a2:6c:19:ba:5f:
c8:fa:52:60:0c:3c:ea:b0:0a:00:03:8a:13:4f:d9:
6f:f6:ba:bd:ad:e3:a2:d2:6a:5f:97:77:8f:3a:45:
14:84:3d:95:9f:be:0f:d5:ea:f6:36:ad:52:bf:ac:
84:7c:71:0b:95:d6:6c:b6:af:22:60:1c:e4:b4:a9:
57:34:17:b5:9a:83:fb:d9:29:f9:01:ea:8a:40:8b:
19:92:b5:c7:f2:5b:9a:fe:60:71:9e:d2:1d:31:47:
70:92:29:92:65:b4:47:6e:44:86:7d:ab:cc:54:25:
a5:ce:68:da:46:ac:f3:df:57:ef:40:bf:5f:e0:e0:
f0:68:bf:58:3a:15:99:cc:a8:2e:18:2e:5c:e2:a2:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:51:00:BA:C6:6C:6F:25:DB:B1:46:69:A4:46:EA:81:13:3A:57:47
X509v3 Authority Key Identifier:
keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:75:48:6c:08:42:9b:7a:92:33:88:06:45:dd:1e:53:10:df:
17:09:22:b0:73:d1:e1:03:af:4c:10:9b:6c:64:74:b3:07:d7:
c2:38:1c:ef:21:82:c6:91:84:b9:af:a0:da:ec:ad:a0:f3:33:
25:4e:f5:ad:b8:12:09:04:c2:7c:ae:07:d9:2d:bf:1f:3f:9e:
82:91:c7:e5:2c:08:f6:b7:97:51:36:2f:81:29:be:39:f2:7e:
d0:46:8e:3d:3a:b4:c0:a7:de:da:cc:c4:65:96:35:d0:c2:11:
ca:4a:ae:f0:91:03:a8:27:d0:fe:51:7c:d9:82:dd:57:db:be:
95:59:67:5e:c8:70:eb:74:0d:98:53:d9:83:9f:8f:3a:8f:09:
7a:7a:2c:f8:29:d6:42:01:0e:f6:7a:f9:1d:8a:ac:13:5c:9b:
97:36:f5:10:d6:d7:f6:f6:5d:e5:6c:69:85:46:75:57:23:12:
cc:15:63:b6:eb:1c:fd:b6:2b:65:80:40:4f:62:e5:ff:53:6e:
07:c0:c6:e6:ee:b9:45:88:e9:60:b3:7c:07:8d:50:dc:61:2a:
12:c4:32:ab:5d:44:b7:15:ae:08:f8:02:4a:d4:9b:58:20:31:
3b:9e:14:fa:7d:5e:bf:4f:e3:e5:fb:26:20:0c:b2:93:e5:17:
0d:fe:80:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:14 2026 by rpki-client