Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
File: FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft (raw, json)
Hash identifier: 3Eh1DMulkORqx3gVJIMKP1J+PqY4LS0wX2iz+Om8BaE=
Subject key identifier: 4B:91:A9:93:25:CA:A5:11:C4:44:9C:56:F2:7E:64:5C:1C:33:B5:60
Authority key identifier: 16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
Certificate issuer: /CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Certificate serial: 019CE36C472BADC4955D8D7785CBD5CAA042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
Manifest number: 7B
Signing time: Thu 12 Mar 2026 19:00:49 +0000
Manifest this update: Thu 12 Mar 2026 19:00:49 +0000
Manifest next update: Fri 13 Mar 2026 19:00:49 +0000
Files and hashes: 1: EYbnkdsGi0cWbkFU3UiOzuHllwM.roa (hash: FBbq4acRcJHICFhiug0/npiuCo5RqLFSogoLF21zVfA=)
2: FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl (hash: OdeotXyxeJbSAFvH9kFVYVZK0M1XmmvxaDWquOYpvNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:47:2b:ad:c4:95:5d:8d:77:85:cb:d5:ca:a0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Validity
Not Before: Mar 12 19:00:49 2026 GMT
Not After : Mar 13 19:00:49 2026 GMT
Subject: CN=4b91a99325caa511c4449c56f27e645c1c33b560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:af:38:fd:38:ff:42:a2:86:94:f8:31:9e:
1d:56:90:44:c2:27:2a:8a:a5:b4:4e:31:0d:c6:1b:
a6:ef:75:56:bc:8c:91:a5:89:75:1a:09:36:57:32:
ac:39:1e:3b:54:32:3a:2c:39:7f:6d:ce:c3:24:28:
50:91:e4:9c:36:a9:1b:71:3a:7e:cc:ce:d9:d9:9d:
bb:05:62:9a:d9:dd:ea:af:78:27:e3:66:81:88:a6:
48:a2:eb:b5:c4:33:c5:f8:eb:ee:b8:80:b8:48:1f:
1d:57:dc:9d:e2:40:6b:cd:39:18:3e:f7:a9:07:1c:
07:fc:1f:84:3d:c3:07:b7:8d:a9:f2:52:75:e8:0e:
ed:0f:5c:24:80:05:f9:2e:b9:7e:cf:2e:f7:6d:92:
4f:92:ac:75:16:92:88:69:03:73:a1:77:7b:dd:fb:
83:2a:be:ac:53:91:1b:d1:da:5b:0e:0c:1c:27:d2:
7f:f7:e0:68:b3:91:6a:62:0c:e1:2d:40:3c:6a:64:
70:3d:9b:82:0f:44:7a:db:7f:33:7a:8c:58:70:f1:
48:0d:1c:99:5d:4b:8a:8d:9e:df:f8:ec:e2:a5:2f:
25:2e:88:2b:2e:c1:d4:4b:fe:db:98:82:79:a5:ea:
8e:44:c0:cc:a3:00:fe:e5:55:3f:11:1e:8d:67:fc:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:A9:93:25:CA:A5:11:C4:44:9C:56:F2:7E:64:5C:1C:33:B5:60
X509v3 Authority Key Identifier:
keyid:16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cf:9b:fa:4c:4a:5f:13:7d:23:10:12:2b:f9:df:63:a3:62:
83:85:a6:e8:18:e3:41:32:86:f4:96:d3:f9:6b:dc:70:ef:d1:
17:3d:97:81:3d:84:26:10:3c:a5:e4:14:e4:92:8c:b3:a4:b4:
93:c6:68:dd:a8:8b:72:53:d6:db:b8:72:b5:f2:bb:ca:fc:42:
da:de:28:78:06:83:6f:70:e9:69:32:3a:38:16:82:7f:c1:02:
6c:1f:0c:a4:d4:32:a1:f6:eb:07:54:f9:0b:32:22:d3:2a:5b:
20:d2:71:73:d6:85:03:80:c6:af:d1:bf:5d:96:a9:34:40:bb:
90:01:ea:0e:cc:1a:ec:5f:a3:4d:22:e3:b0:2c:f2:cb:fe:a8:
00:3e:ec:53:44:84:56:f4:bd:52:5e:8d:6c:c1:6e:59:f2:9f:
a9:4c:44:54:42:ca:0a:77:d6:ef:69:bc:11:5a:e5:12:25:b1:
80:57:cf:32:ea:c6:86:9b:55:1e:2d:5a:1d:87:40:00:6d:e8:
e8:b7:f0:d2:8b:64:51:cc:fe:de:29:11:0d:bc:4a:24:0a:73:
10:76:48:af:82:c2:af:56:7f:48:43:46:af:84:53:18:fa:18:
7b:ff:55:69:37:15:f2:e9:1c:9f:23:ff:e9:d2:a8:24:45:32:
26:a3:79:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:54:53 2026 by rpki-client