Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: g2gjxPcrZEk6Ora0JcZWmFj13ohv5dZXQ+yaf0HqUwg=
Subject key identifier: 3F:95:7E:0F:F9:1C:6E:CA:57:35:B2:D6:2A:56:F0:42:04:1F:B9:94
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 019CB65C918177AB002DA0584466B5921BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 1162
Signing time: Wed 04 Mar 2026 01:00:45 +0000
Manifest this update: Wed 04 Mar 2026 01:00:45 +0000
Manifest next update: Thu 05 Mar 2026 01:00:45 +0000
Files and hashes: 1: 9EY388q_8N1ByylpLUNJcoEQmNc.roa (hash: swwp7NtGKddr8ryZRv2cyRO8Q2e4qDuv+717NcJsQ10=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: +2M7pgUmENOhyymdkMbhG7oPtZe4tcS0OpudMzM32hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 22:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b6:5c:91:81:77:ab:00:2d:a0:58:44:66:b5:92:1b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Mar 4 01:00:45 2026 GMT
Not After : Mar 5 01:00:45 2026 GMT
Subject: CN=3f957e0ff91c6eca5735b2d62a56f042041fb994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4c:1d:c5:eb:74:a4:02:fa:b9:a9:2b:1c:0e:
d9:d2:4e:8f:fa:b6:73:5c:2d:31:df:04:b0:d9:b0:
26:ec:79:83:4c:2b:32:50:11:c9:08:e5:78:5e:9f:
9b:7f:26:39:ef:e4:32:40:70:81:1b:5e:9a:15:6b:
6d:ab:42:43:9e:91:a3:e7:84:ce:dd:f0:53:19:1f:
04:98:09:79:a0:23:25:06:45:65:0b:9f:17:11:ff:
61:b9:be:a6:80:10:23:13:7d:e9:e4:8a:b0:0d:cc:
44:73:02:77:88:5d:56:46:d3:40:42:b0:b1:77:f4:
b8:ae:d6:a8:3f:d6:5b:e4:9b:68:51:3b:eb:72:df:
1d:94:f4:c8:92:f8:bb:86:d4:dd:cd:7a:c8:84:e4:
f3:ec:88:54:24:36:cb:bf:a9:08:95:20:89:0d:46:
37:13:03:96:12:07:66:1a:4b:c8:71:5e:c0:1b:52:
2a:30:94:6c:fd:08:69:29:a1:e8:83:9f:c8:9a:d8:
27:cf:cf:29:3b:ac:4c:d9:b8:1c:6c:ea:7d:05:1c:
7e:34:92:fa:e9:cf:50:da:96:da:a6:bc:03:7a:53:
93:f7:27:b8:c8:7a:4c:fa:57:c5:dc:1c:1c:6b:fa:
4c:71:89:04:b6:7f:e8:16:9a:47:fa:29:ac:c3:da:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:95:7E:0F:F9:1C:6E:CA:57:35:B2:D6:2A:56:F0:42:04:1F:B9:94
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:21:a6:d6:b5:02:2e:0d:19:93:ea:47:14:aa:df:9c:14:9f:
6a:be:45:88:13:53:a9:82:d0:36:6b:57:68:16:a4:85:ce:d4:
c1:e2:72:dd:8f:2a:32:cc:37:c3:0a:a4:9a:a8:e1:aa:0e:c2:
57:48:67:f1:e0:65:0b:66:cd:e8:07:b1:9f:60:16:80:7c:0e:
19:7f:1e:3a:f4:06:9a:d2:c3:60:9d:d0:9b:79:d3:dc:36:77:
dd:6a:37:7a:9f:1a:1c:53:08:b8:33:69:a4:12:0a:b1:14:70:
c0:e9:e6:6c:5a:e0:69:61:c2:6e:7b:f9:81:39:08:77:1c:f9:
64:a5:90:37:86:cf:cf:20:df:22:2a:cd:ed:a7:94:06:33:14:
e2:0a:ab:8f:c2:e9:5b:61:a7:0f:53:ba:ee:ba:9c:b3:a1:5d:
08:d4:c2:3d:56:8f:9b:82:28:49:68:ca:51:35:17:44:19:77:
5f:bc:12:a4:f1:5a:ed:64:6e:a1:20:3e:7c:0e:86:79:24:a0:
bf:0c:12:6a:2f:7c:6b:4a:51:f5:9b:50:96:38:eb:c1:c1:3d:
9b:c8:a7:a9:95:45:b9:53:88:10:ec:b0:07:92:db:8f:76:29:
56:92:c4:dd:ed:3d:c2:af:5a:05:d2:b2:0a:15:e4:e8:3c:b0:
28:5f:2d:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy2XJGBd6sALaBYRGa1khvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NjU1ZTU1OTVmNWEzYzA3MWMxMmIxNzlkYjkyNzlkYzdk
YjA5MTMwHhcNMjYwMzA0MDEwMDQ1WhcNMjYwMzA1MDEwMDQ1WjAzMTEwLwYDVQQD
EygzZjk1N2UwZmY5MWM2ZWNhNTczNWIyZDYyYTU2ZjA0MjA0MWZiOTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Uwdxet0pAL6uakrHA7Z0k6P+rZz
XC0x3wSw2bAm7HmDTCsyUBHJCOV4Xp+bfyY57+QyQHCBG16aFWttq0JDnpGj54TO
3fBTGR8EmAl5oCMlBkVlC58XEf9hub6mgBAjE33p5IqwDcxEcwJ3iF1WRtNAQrCx
d/S4rtaoP9Zb5JtoUTvrct8dlPTIkvi7htTdzXrIhOTz7IhUJDbLv6kIlSCJDUY3
EwOWEgdmGkvIcV7AG1IqMJRs/QhpKaHog5/Imtgnz88pO6xM2bgcbOp9BRx+NJL6
6c9Q2pbaprwDelOT9ye4yHpM+lfF3Bwca/pMcYkEtn/oFppH+imsw9pXnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+Vfg/5HG7KVzWy1ipW8EIEH7mUMB8GA1UdIwQY
MBaAFBZlXlWV9aPAccErF525J53H2wkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYt
ZGQ0ODA0ODQwZGQ2LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYtZGQ0ODA0ODQwZGQ2
LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiGm1rUC
Lg0Zk+pHFKrfnBSfar5FiBNTqYLQNmtXaBakhc7UweJy3Y8qMsw3wwqkmqjhqg7C
V0hn8eBlC2bN6Aexn2AWgHwOGX8eOvQGmtLDYJ3Qm3nT3DZ33Wo3ep8aHFMIuDNp
pBIKsRRwwOnmbFrgaWHCbnv5gTkIdxz5ZKWQN4bPzyDfIirN7aeUBjMU4gqrj8Lp
W2GnD1O67rqcs6FdCNTCPVaPm4IoSWjKUTUXRBl3X7wSpPFa7WRuoSA+fA6GeSSg
vwwSai98a0pR9ZtQljjrwcE9m8inqZVFuVOIEOywB5Lbj3YpVpLE3e09wq9aBdKy
ChXk6DywKF8tPA==
-----END CERTIFICATE-----
Generated at Wed Mar 4 06:32:27 2026 by rpki-client