Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File: FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier: CK1OTo/UM441lNG2ZU70dmPXMk2C6sP0MAgIEwXNDbk=
Subject key identifier: 86:39:75:B8:5C:CB:B8:E1:03:07:3E:FB:9C:F3:BF:BF:89:3D:CE:9E
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial: 019D389C5AC4ED9A2F7711A314B8F5C36E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number: 0B33
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: 1uN-f7Pe3Yoax_Gy67R47bHTZtU.roa (hash: MsQhz6+if76h/AmIW7u+uBAwg92G7zeCMFsByKAoJ9g=)
2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: g3tpvNY+tiH2793O8fepo06m9q6LqY4NuNVBaiwfkX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5a:c4:ed:9a:2f:77:11:a3:14:b8:f5:c3:6e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=863975b85ccbb8e103073efb9cf3bfbf893dce9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:d9:a7:55:2f:d5:91:2a:d3:b7:db:6a:76:
af:54:74:ba:68:d5:7f:cb:71:df:b1:ac:f2:cf:25:
b0:a4:c7:3a:e7:88:ad:f8:27:38:b6:ce:19:c3:d2:
06:14:aa:28:58:1d:9e:b1:dc:4f:ab:2d:d1:a4:15:
f3:62:32:5d:9f:93:8e:25:ee:b2:0c:b0:73:3c:a8:
e6:6d:0b:30:2d:20:7a:58:dc:01:e5:59:40:19:96:
bf:ec:1b:1b:05:52:1f:de:57:b3:91:d5:c3:83:f2:
ea:74:98:7f:ed:6f:21:3b:d0:21:47:e9:dd:90:5e:
23:f6:53:7c:6d:01:48:dc:86:90:8f:6c:5d:af:61:
83:67:11:40:37:6c:94:93:14:10:75:de:ca:59:24:
08:30:e1:a0:be:83:2a:4d:7c:88:1a:c2:71:bf:6d:
df:0f:4a:33:8a:89:f3:9b:72:51:84:7a:9c:95:58:
97:b7:c0:36:a0:9d:3c:59:61:75:a0:8c:e3:a2:57:
d5:db:e2:dc:7e:a4:f6:bd:fb:d1:a4:fd:d7:be:61:
3b:db:37:a2:91:cd:ac:70:f8:5d:d4:f8:c9:ae:fb:
33:7f:6e:43:e6:f0:8b:b1:eb:7d:6c:42:51:f1:5d:
59:55:f6:97:67:b8:13:3b:6c:4f:1b:a7:a2:d6:28:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:75:B8:5C:CB:B8:E1:03:07:3E:FB:9C:F3:BF:BF:89:3D:CE:9E
X509v3 Authority Key Identifier:
keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5b:c0:99:5d:66:21:3c:32:5a:74:f8:ba:ad:02:ac:f2:b2:
ec:88:48:67:53:58:8f:f5:5c:05:8a:e8:ca:fc:d1:5f:7a:ad:
3c:fa:47:e0:63:4d:2b:a7:4f:3c:7d:6f:55:dc:12:36:92:6d:
70:49:e2:30:62:3c:94:e9:a2:ad:40:04:34:2b:63:36:58:95:
58:3e:e2:0a:06:c8:98:3f:b3:0b:8f:7e:bf:03:37:e3:c3:27:
7e:91:ea:3f:e7:f1:b3:b1:5c:c4:95:19:51:a2:45:9c:3f:f9:
bf:94:b0:3b:72:e6:c3:af:c6:b3:fe:9f:80:ab:fc:52:78:f3:
a9:f6:59:de:9c:f2:3f:16:41:e9:fd:de:d0:b4:b2:7e:27:52:
62:78:80:b5:7c:13:e4:98:dd:f7:83:b3:90:c8:11:09:c0:bc:
47:82:9c:be:56:f9:44:41:af:44:ed:e4:2f:1d:4d:b1:8a:65:
97:60:51:3c:e6:db:c2:22:01:64:23:6a:fc:a1:78:51:fc:ac:
86:33:8e:12:79:0a:d7:4a:89:d3:65:0b:c5:6b:ae:a1:e5:bb:
de:13:3f:49:1a:ef:65:ba:54:9b:53:3e:1c:f9:3f:fb:a4:ec:
da:9a:ed:e5:87:b5:79:e6:56:b4:fa:9f:5c:4a:cf:05:f6:e1:
50:b0:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:52 2026 by rpki-client