Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: QWXnentVXH5g1aOS8GYxXj+9omrmV2CuoinEFWt3JwM=
Subject key identifier: 43:DA:20:D0:4D:D0:6D:A3:EE:27:80:07:C6:6A:2A:8B:BF:27:33:06
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 019D3752758EBE45AC082963442AC129C03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 071E
Signing time: Sun 29 Mar 2026 02:00:43 +0000
Manifest this update: Sun 29 Mar 2026 02:00:43 +0000
Manifest next update: Mon 30 Mar 2026 02:00:43 +0000
Files and hashes: 1: F79BFzYAIPfw1eLFSox-1us1fgY.roa (hash: s5iDlh7My+Xt6LXot7o7pK46v+NmJUoCkuMmTCQ3Xe8=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: TqbbqMPeWL2HIi5Sz3VAhLDLL8CvI18bQtt2SBozfLQ=)
3: Xm7CSatgWoiFWFoLjdzPyqLwt4Y.roa (hash: ljTW1e8jbhPOBJuEbeNSNc8GJIV6MJTPAjrHkhEAZP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:75:8e:be:45:ac:08:29:63:44:2a:c1:29:c0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Mar 29 02:00:43 2026 GMT
Not After : Mar 30 02:00:43 2026 GMT
Subject: CN=43da20d04dd06da3ee278007c66a2a8bbf273306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:26:17:d6:6e:e4:99:1e:03:e5:1d:dd:50:
f1:bb:02:45:5e:97:47:d2:7f:52:1c:55:86:4b:35:
b2:35:b2:68:31:31:0e:52:9f:f0:2d:d6:d9:1f:fc:
48:5d:aa:ec:24:0c:9a:8b:9a:2a:d4:60:a3:a8:0b:
41:44:9e:10:6f:39:93:36:98:c6:b2:c5:07:b5:b6:
29:2d:ba:9c:ca:aa:ff:52:10:1e:6f:ff:8f:d9:51:
73:e0:9f:ad:69:38:a4:1c:d8:d9:27:0a:71:8e:d6:
88:1b:e2:5d:94:b8:ed:01:26:24:58:d1:86:e8:16:
ab:af:1f:84:19:86:d3:b0:db:3e:0c:43:11:1e:e4:
82:ed:36:cc:00:43:93:b2:f4:f9:80:37:2b:27:48:
5a:d2:b7:8f:9a:40:6b:af:21:a2:60:e2:9e:87:d4:
63:c5:3b:5d:09:a1:73:25:fb:30:dc:d1:78:d5:b7:
8e:71:c0:dc:19:77:79:11:2a:e2:a3:1c:4e:26:6f:
af:c0:b5:69:53:32:a1:14:f5:1e:7a:db:39:6a:5c:
57:e8:c7:bd:65:fd:a5:31:ca:7d:c5:ce:83:35:e7:
67:a7:73:39:d6:f1:fa:8c:02:26:2b:c8:9b:45:17:
93:af:d6:84:5e:b9:be:c6:73:6d:f2:0e:78:21:e1:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DA:20:D0:4D:D0:6D:A3:EE:27:80:07:C6:6A:2A:8B:BF:27:33:06
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:22:0e:7d:32:32:26:a8:f6:7f:d9:c7:17:11:46:f2:53:b6:
12:77:b5:f9:5a:ee:8c:16:d8:c6:91:96:b0:07:83:6f:7a:07:
a0:cf:19:e6:67:d7:e4:bc:4d:a5:5f:04:52:07:38:29:91:e9:
b0:00:98:2b:52:8b:94:a3:d0:e1:93:ab:99:81:13:9a:c0:35:
b5:0e:6d:9f:df:fe:d8:d8:09:00:85:7b:73:b1:cf:17:b6:d9:
7f:bf:03:f9:a3:84:c9:70:b5:76:d1:ec:3f:4c:0c:3a:74:03:
2a:95:7b:f3:82:f9:26:85:4c:83:c5:62:8c:a3:35:fa:49:5d:
9b:bc:08:8b:1c:1d:c1:2b:b7:fc:35:bf:2a:db:d9:f0:8c:a0:
d7:6f:c0:ab:0e:3e:60:52:61:89:de:42:1f:78:97:97:aa:ff:
aa:59:44:37:39:66:72:4a:92:1e:5e:56:a9:f0:b2:7a:36:60:
3f:ef:39:d1:fc:95:0f:92:46:cd:2c:3e:9f:1e:e1:52:31:8a:
a2:73:de:dd:ec:d7:49:70:df:34:d7:c3:43:07:1b:62:86:c5:
5c:c5:63:f8:53:bd:65:3e:39:67:d8:60:50:00:62:b1:09:53:
66:46:6b:85:45:6f:ce:7d:4b:ef:eb:15:36:7e:60:54:6f:78:
05:c5:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:04 2026 by rpki-client