Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier: AOjfRzR1y4mOz6MdG+WNdek0SG6qf9+MrTl7p/7q80M=
Subject key identifier: AA:98:D9:BC:60:B7:7C:CD:A4:46:1A:D9:0E:CA:5B:74:C2:F9:64:62
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial: 019CE523A4F947D60972F37DE779A7F284E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number: 1863
Signing time: Fri 13 Mar 2026 03:00:44 +0000
Manifest this update: Fri 13 Mar 2026 03:00:44 +0000
Manifest next update: Sat 14 Mar 2026 03:00:44 +0000
Files and hashes: 1: VN6UE1yUAoIOdq7FN7_6LWg0xFQ.roa (hash: i1/itHXENkjfqquOuYnqwae8exirw7XvZQTu+xWF/aw=)
2: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: aPOzBABonbUiVXpnEOnuojoFazfxU+j+ifcik/ujXl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:a4:f9:47:d6:09:72:f3:7d:e7:79:a7:f2:84:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Validity
Not Before: Mar 13 03:00:44 2026 GMT
Not After : Mar 14 03:00:44 2026 GMT
Subject: CN=aa98d9bc60b77ccda4461ad90eca5b74c2f96462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:56:9f:39:d0:df:be:69:f2:ba:30:c5:d0:
95:f3:a0:f4:d0:3b:e2:8e:af:59:7b:25:a5:31:2e:
6a:53:89:4d:7c:ce:c7:cb:c3:b9:5f:66:b2:20:51:
1f:8f:fe:c3:d9:75:86:91:92:97:4f:1f:6c:0d:31:
88:31:3b:a4:db:3a:13:cf:91:ba:4c:2f:ed:3d:e5:
48:e9:73:38:99:8d:58:57:42:82:cf:3d:64:2a:01:
16:d8:de:f2:db:94:51:9c:64:f1:63:2d:49:87:0f:
54:3a:45:19:ea:12:b0:41:3e:a9:fc:55:10:36:5c:
40:57:1d:18:96:f0:32:cd:a4:fb:1f:74:1d:5b:f8:
62:8c:cc:a8:4e:37:f3:46:9a:4d:bc:eb:f9:2d:17:
66:16:1b:19:0d:d1:5b:b8:8e:c7:f1:a6:9e:6c:58:
cd:c0:ac:c7:46:2c:48:ed:48:82:cc:e6:e3:b8:b0:
cd:aa:29:d7:f9:a2:32:cd:31:22:14:80:a3:77:25:
e1:a7:e0:09:9f:4c:76:bf:4b:05:f8:06:ab:ab:ef:
66:d1:ca:49:ed:a6:c6:13:56:80:fa:0d:6c:ac:32:
5a:4d:15:ad:9a:b4:d7:c6:b8:8c:20:d5:ed:75:5a:
db:b1:8e:55:e3:b0:89:27:74:c1:d2:1b:c2:d4:3a:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:98:D9:BC:60:B7:7C:CD:A4:46:1A:D9:0E:CA:5B:74:C2:F9:64:62
X509v3 Authority Key Identifier:
keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:81:56:de:3d:c8:f7:86:62:d6:7d:4f:ee:71:28:7c:94:3a:
4f:03:e9:c1:98:21:49:3f:8e:ce:83:c5:ec:64:59:4c:7e:5e:
3c:bc:1b:09:b4:a0:56:6b:94:5b:96:b6:9b:8a:16:00:2f:ad:
71:c6:87:4d:09:f8:d8:1d:21:ea:da:f0:4c:b9:88:8f:73:01:
de:59:3c:c5:ab:66:09:49:87:9a:f4:96:6c:1d:44:7b:12:d6:
3a:13:16:1a:44:38:26:ee:45:88:7a:39:49:63:d4:38:c3:86:
0c:56:a4:01:ef:87:79:7d:7a:c9:83:d4:8b:0a:a7:ce:58:fb:
e1:32:55:78:c8:4d:8d:b0:9b:47:23:b7:bc:a7:98:cf:49:98:
af:11:07:e5:2d:03:55:b6:a1:45:69:38:b8:57:41:27:38:15:
a9:a0:8f:51:30:7a:55:f5:ae:de:0d:50:91:f8:f3:f7:51:9e:
f8:ed:f0:e6:c6:c7:b4:76:d1:26:ca:99:25:45:9d:de:65:de:
2e:08:c2:93:4f:85:80:86:d8:bf:54:55:64:5a:45:7c:d5:13:
da:e6:d9:8a:eb:e9:05:41:2b:4f:6a:8f:5d:a7:55:8a:2d:ac:
b2:5d:47:63:57:5d:e0:96:0f:09:86:02:84:8f:8f:44:3a:73:
7c:43:f6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:50:43 2026 by rpki-client