Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
File: FseIv2PBqcecEUVP45bScWqh03g.mft (raw, json)
Hash identifier: mrbsxLIcwdpu7qwJd1s0vTOas6CwckK8GCCDIQkIggM=
Subject key identifier: 1A:59:08:94:20:34:11:CD:F8:EF:8E:32:A5:66:32:C8:A3:39:7F:5E
Authority key identifier: 16:C7:88:BF:63:C1:A9:C7:9C:11:45:4F:E3:96:D2:71:6A:A1:D3:78
Certificate issuer: /CN=16c788bf63c1a9c79c11454fe396d2716aa1d378
Certificate serial: 01A0F267924E06AF13AAB7C43B8CE6B909D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
Manifest number: 022D
Signing time: Wed 30 Sep 2026 13:01:08 +0000
Manifest this update: Wed 30 Sep 2026 13:01:08 +0000
Manifest next update: Thu 01 Oct 2026 13:01:08 +0000
Files and hashes: 1: FseIv2PBqcecEUVP45bScWqh03g.crl (hash: sJLljoTuVZ7kddScZcwQovr4QRX2GJKyC0Lxtrh2NEo=)
2: nDmReaPTunv3rpuf20ug4JkPOgU.asa (hash: /CHUZ8GEsPydRB6nZOopJhNQ8frWrOhKD8Z1ZQifie8=)
3: r0ErFB9jCD4xbUhMnw9fU4li-3o.roa (hash: g57/KRcIS2omYrdJOqYvOIP4Higa58DGPvJrJE8+WvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:67:92:4e:06:af:13:aa:b7:c4:3b:8c:e6:b9:09:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c788bf63c1a9c79c11454fe396d2716aa1d378
Validity
Not Before: Sep 30 13:01:08 2026 GMT
Not After : Oct 1 13:01:08 2026 GMT
Subject: CN=1a590894203411cdf8ef8e32a56632c8a3397f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7f:60:54:0b:fe:04:f5:e7:89:8e:72:ce:8e:
71:b5:13:08:9d:db:fa:09:b9:92:27:18:b6:59:15:
b7:13:01:2f:09:d6:c5:b4:da:32:01:00:5f:80:9f:
54:cb:1a:bd:d0:c4:f5:58:ce:09:88:95:ce:0b:c0:
c1:ec:83:71:54:25:7c:a6:68:64:22:b8:86:76:56:
f9:eb:2d:6b:5f:53:9e:06:17:54:c0:3a:07:5e:6c:
80:ac:00:96:e8:66:a6:24:c8:a3:bf:25:9d:8d:77:
fa:eb:73:9f:a1:0f:05:d6:6c:3f:6a:99:d1:d2:17:
8b:56:ab:02:61:73:c9:11:82:d9:35:eb:16:d0:7e:
e8:72:c4:0c:66:35:03:cb:e7:7b:57:41:43:96:16:
c2:04:90:94:78:d2:d6:47:67:dc:51:90:57:52:21:
7d:db:ec:ce:3e:d3:8b:1d:f6:8b:32:29:e3:35:22:
73:7d:c7:84:0b:61:99:1b:73:47:c8:b1:ae:30:c9:
b2:b9:ce:34:37:40:5d:80:1f:0c:a8:38:a9:5c:7e:
49:7c:d0:bc:5a:93:93:51:66:57:1a:36:21:57:7d:
37:a2:c3:b3:bf:56:c1:d1:31:20:79:ea:50:3f:4f:
0f:7d:2e:f9:eb:47:f3:21:ef:55:01:0a:d5:4f:a3:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:59:08:94:20:34:11:CD:F8:EF:8E:32:A5:66:32:C8:A3:39:7F:5E
X509v3 Authority Key Identifier:
keyid:16:C7:88:BF:63:C1:A9:C7:9C:11:45:4F:E3:96:D2:71:6A:A1:D3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0b:94:25:33:12:23:58:7a:4d:c4:25:2c:1c:4b:5d:a6:69:
a5:bc:84:01:50:51:e2:37:69:1f:f4:b3:66:f1:98:01:c4:1a:
6f:c3:20:df:45:49:4e:86:ac:5c:b7:15:7a:18:b9:71:85:ef:
52:23:e2:f6:ec:5c:6b:2a:af:ee:b8:e4:63:5d:d1:a7:32:f0:
56:09:7e:33:a2:1d:ff:7a:c7:a0:00:b3:b3:95:66:56:05:cb:
c4:55:97:ff:c5:2f:64:5f:da:e3:7b:ed:84:ef:bd:79:0d:45:
6a:33:ff:bd:ca:1b:0e:ed:61:1e:f6:07:f8:b0:8f:6c:59:bb:
bf:8d:1f:42:dc:7e:fa:64:98:a2:a3:66:72:0a:56:ea:e5:3b:
0e:e2:d2:c4:a9:3d:d3:0e:b6:8d:f7:5e:da:3a:81:ff:b7:02:
df:00:ee:b7:5d:8d:35:d7:3a:71:fc:04:93:a5:8a:34:4d:0d:
1f:ae:a0:38:a7:bb:a3:f9:25:68:64:59:25:13:75:2c:53:ec:
97:32:d8:2c:9a:f5:94:bf:f5:4e:77:08:16:fe:72:38:95:2b:
b9:8d:fd:c6:60:d0:a9:79:08:51:b0:5e:62:59:00:b9:63:7b:
21:df:68:85:a6:23:98:87:6f:f9:fe:9d:ae:0b:9c:22:43:4d:
a2:0b:ff:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:02:48 2026 by rpki-client