Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
File: Fas-cvc0DahW6T1i7o0CPx18juc.mft (raw, json)
Hash identifier: Tn1f7/UZ5C8bMmdCydtZrX8cO93BOEi2CjN6GES6yQg=
Subject key identifier: BE:EB:F4:A6:02:47:E2:21:59:EF:EA:D8:00:3F:77:49:34:43:5E:DD
Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
Certificate issuer: /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Certificate serial: 019D38D2E71555A242FE833012DD1E938BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
Manifest number: 0DD5
Signing time: Sun 29 Mar 2026 09:00:38 +0000
Manifest this update: Sun 29 Mar 2026 09:00:38 +0000
Manifest next update: Mon 30 Mar 2026 09:00:38 +0000
Files and hashes: 1: 3qA4FQIUtzDs5t_mEHhNZORgMfU.roa (hash: GH+TqQvh17FK/3T+3gQp0M00LakHIoZrhZmY+Sn7jQw=)
2: Fas-cvc0DahW6T1i7o0CPx18juc.crl (hash: q1MRkpnkN1tLHLqKc7ZIzclZ1wI6qXkiWjcrv1veNSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e7:15:55:a2:42:fe:83:30:12:dd:1e:93:8b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Validity
Not Before: Mar 29 09:00:38 2026 GMT
Not After : Mar 30 09:00:38 2026 GMT
Subject: CN=beebf4a60247e22159efead8003f774934435edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:7b:8d:1f:1e:7a:e6:1b:cd:aa:2c:bf:df:
29:09:d1:f3:fd:06:d1:05:2f:f2:50:96:55:43:25:
1f:65:be:5a:62:78:3c:74:1d:d3:96:c8:f3:88:65:
8a:b9:33:d4:60:d4:bc:8f:45:29:aa:df:95:5f:9e:
3b:88:de:4f:29:ec:12:94:ee:db:1b:97:61:b0:f6:
c2:1c:16:1f:5f:3f:3d:7c:d7:77:a0:b3:f3:c8:cc:
f1:dc:0a:4b:bd:dc:26:d8:42:92:bf:01:65:88:8c:
2f:d7:d2:03:93:26:0f:66:ee:49:e7:83:2a:b2:04:
33:7c:30:62:29:45:de:18:0b:70:41:1e:a3:ce:65:
e4:64:5b:a8:89:e3:20:e1:52:d9:48:ea:0d:25:cf:
4c:1d:00:6f:bd:57:6a:c4:05:92:27:87:34:5a:0c:
5c:fe:a3:31:3f:01:0e:2b:4c:de:4e:9c:2a:42:f3:
5d:d2:43:da:88:64:24:2d:5f:b4:d1:50:f2:ba:26:
19:5c:ca:f9:e6:f7:af:a9:a4:ca:56:f2:86:db:60:
05:32:e8:8f:22:7a:6f:30:09:06:6f:6d:cf:00:55:
da:bc:c1:0e:d0:a5:e4:09:73:03:a5:6a:32:85:da:
d8:9a:59:67:ac:e0:7b:d2:0c:41:14:4f:a1:bf:b0:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EB:F4:A6:02:47:E2:21:59:EF:EA:D8:00:3F:77:49:34:43:5E:DD
X509v3 Authority Key Identifier:
keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2d:24:68:2f:a8:a2:bd:95:ed:d5:3c:f3:51:77:63:c5:c3:
e2:f4:af:df:50:f2:d0:0a:09:ca:1e:a8:b8:15:15:68:21:1b:
f0:c9:49:4f:ff:c5:46:58:86:ba:37:12:99:84:f9:f0:1d:f3:
c1:b4:df:99:9b:09:9a:02:e0:34:b9:49:a7:59:d3:1d:ee:dc:
79:17:73:1f:a1:94:dd:8f:5a:4f:49:89:d2:8d:6d:02:8d:e0:
8a:d5:d2:1c:1e:15:8b:f9:94:9e:a9:63:d8:70:25:80:57:44:
d4:f2:32:ea:eb:37:cc:de:f2:be:f5:d3:19:0b:7d:d6:27:54:
41:4f:10:b5:f9:9a:5a:e1:d1:06:e5:eb:02:bd:f3:9e:c6:df:
0f:db:d8:de:05:58:8f:c4:67:e0:1e:1d:45:89:a2:54:24:b8:
ab:41:6c:45:08:35:a1:70:07:21:c4:42:6e:90:c8:d3:b4:7e:
aa:b8:27:30:91:ea:3e:90:08:b6:15:4f:82:9a:00:d2:5e:dc:
75:ae:8a:8a:94:1c:9c:71:68:fc:04:cf:59:83:63:62:f8:11:
33:f3:fc:8d:52:21:38:44:11:c1:38:80:92:1c:cf:13:f0:11:
6b:45:d7:68:de:4a:32:41:c6:45:90:f3:04:a0:88:d1:3b:25:
e0:2d:90:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:45 2026 by rpki-client