Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: TeFvyz7QyunNAgcRzLxrI1NAhdCh0lPTRtWc4FFhwL8=
Subject key identifier: D8:05:D0:BE:9A:52:69:12:FD:E8:B1:07:0C:21:6D:CB:06:9E:F5:88
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 019CF5050227C1ACAE425B51766BE414E5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 181A
Signing time: Mon 16 Mar 2026 05:01:11 +0000
Manifest this update: Mon 16 Mar 2026 05:01:11 +0000
Manifest next update: Tue 17 Mar 2026 05:01:11 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: dFBX8dG8VvXSQOCCrIh/7u7Pe2kiwRIbRBgv27CAZsg=)
2: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (hash: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298=)
3: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (hash: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:05:02:27:c1:ac:ae:42:5b:51:76:6b:e4:14:e5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Mar 16 05:01:11 2026 GMT
Not After : Mar 17 05:01:11 2026 GMT
Subject: CN=d805d0be9a526912fde8b1070c216dcb069ef588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:1b:c2:08:5d:e3:84:a3:00:b6:6f:76:93:
ca:5e:b0:43:1e:a8:64:bd:07:75:49:6f:d9:c1:dc:
9a:c3:69:4e:d5:9a:5c:3e:f6:44:1b:f4:e9:5c:b6:
dd:b5:a5:5a:bf:d0:9c:f3:3e:6c:f0:3a:56:a2:94:
df:42:92:fe:aa:23:be:ce:5e:d5:5b:12:59:35:eb:
45:66:7f:b8:44:11:23:ae:7d:f8:54:91:e8:f1:71:
69:e4:a1:67:57:49:fd:38:c9:02:b3:9d:a3:14:f3:
03:7c:ee:99:c5:b4:34:1f:45:5b:02:cc:93:94:51:
93:73:40:ef:ea:39:11:cc:c9:57:79:2a:ac:66:f3:
14:c4:44:69:fb:74:b3:b7:5d:1c:b7:7c:3a:62:e5:
d3:06:24:16:a4:20:79:fd:e2:0a:81:0f:d8:71:3c:
e5:fc:0d:df:22:16:c8:b5:cf:85:da:6e:a3:e3:2d:
b1:e3:c4:5d:3b:30:10:66:26:c3:69:49:59:69:1f:
5e:ea:76:4e:e0:3b:2b:95:ed:8a:12:ca:c4:94:cf:
cf:7d:8a:0f:92:28:59:73:f2:4d:53:38:d6:10:08:
fb:78:d0:4f:21:ab:f4:5d:ee:29:94:3e:76:e7:c3:
5a:ce:c2:a4:01:1b:0d:4c:dc:ec:58:eb:6a:bb:ae:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:05:D0:BE:9A:52:69:12:FD:E8:B1:07:0C:21:6D:CB:06:9E:F5:88
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b0:10:6a:60:53:39:f9:63:2c:5a:e2:07:f3:e3:3a:d2:8f:
6f:dd:db:cb:a6:15:dd:c9:f2:6f:5d:be:be:93:28:98:52:06:
36:30:20:cb:45:62:f2:2c:92:24:a8:49:d4:e6:f4:a4:b6:0f:
7b:24:cf:fe:84:2d:34:ed:6e:6b:91:e9:77:53:49:b0:8a:fa:
9e:00:50:d6:38:8a:88:05:27:15:76:be:fe:84:5d:70:e2:20:
f1:e9:62:0d:86:fd:13:e8:7b:ff:ee:eb:04:d4:07:70:9f:77:
67:26:72:dd:19:4c:b8:21:6e:6c:8e:00:ca:78:b5:55:45:e2:
15:b5:d9:12:c0:bc:c5:38:2f:19:66:16:35:f6:be:bb:7a:fc:
86:20:2a:00:36:53:fc:a5:ed:cb:ff:c2:8e:ed:9a:ab:ce:57:
cd:9d:3a:84:e8:15:23:b7:78:e9:6c:33:e7:20:af:eb:a3:e3:
8b:f6:27:78:c1:cb:67:2c:37:a6:81:9f:59:39:0c:d9:10:68:
9d:03:f4:93:bd:ba:12:b0:b1:ff:32:48:50:cc:0c:bd:0e:66:
21:04:2c:9f:08:e1:18:5c:1f:49:30:86:d0:45:aa:4d:f3:e8:
bf:36:81:7b:d9:b0:c3:a0:9c:fc:7c:6c:d5:58:83:2e:b4:51:
52:f9:64:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 15:51:21 2026 by rpki-client