Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: WeRhYCtXOFmBfPYDXJIABuE8HhwhQJ45I/cq/yZciFY=
Subject key identifier: E7:2B:8A:E6:5D:BB:BF:1C:4A:77:C4:D7:E6:C3:B9:86:32:61:C8:86
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 019D39E5A030CA7C6768DDCE6B74E5D0773A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 1205
Signing time: Sun 29 Mar 2026 14:00:43 +0000
Manifest this update: Sun 29 Mar 2026 14:00:43 +0000
Manifest next update: Mon 30 Mar 2026 14:00:43 +0000
Files and hashes: 1: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: XrZZ85hu62CyuosAz1vOesD5ZQCrmKlwfW8m1So4dpQ=)
2: ZYVhpFZbN06CUe59j1pMT24apfY.roa (hash: 9KVaBH7C5jrjUC4AJ6bt9vp9SMTJAC7tn9CsEVo1BYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:a0:30:ca:7c:67:68:dd:ce:6b:74:e5:d0:77:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Mar 29 14:00:43 2026 GMT
Not After : Mar 30 14:00:43 2026 GMT
Subject: CN=e72b8ae65dbbbf1c4a77c4d7e6c3b9863261c886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:ea:87:df:87:d0:5a:29:8d:2b:bb:64:0b:
d0:21:3c:9a:51:11:af:cb:4e:12:eb:a8:12:44:b0:
f0:8a:e0:5f:05:06:18:fd:61:1c:cd:43:6c:9b:85:
8d:5f:6e:ea:87:c4:e4:1c:cc:5a:b5:f9:22:6b:e9:
9c:10:8a:c3:3f:8e:3f:61:45:97:22:9d:02:7b:83:
1a:7e:da:e9:40:dc:c5:80:e3:b3:81:3c:32:b2:86:
2a:10:54:ca:c2:ac:79:e5:ec:d3:aa:e9:81:a9:3a:
b3:e4:a5:b8:5e:19:65:2f:26:e5:50:46:90:24:3e:
93:35:e5:2e:84:ca:8d:b1:99:28:10:ae:23:83:2b:
29:01:76:72:91:f9:6a:c5:16:bd:1c:4e:bd:0b:4e:
57:92:1c:8c:3d:ce:ef:2d:94:f2:97:32:ef:91:84:
59:ec:74:c6:09:ef:e8:93:30:a2:ce:16:f7:19:a1:
4f:b3:f0:0a:54:a2:1f:7a:eb:66:d6:31:3f:bd:83:
e9:62:03:29:36:02:a2:03:ee:dd:25:82:ab:31:6a:
c6:af:2c:8e:d4:90:7a:68:a0:5c:8b:60:a1:c1:a1:
13:a9:bd:36:b8:d8:ff:9b:07:17:8c:38:02:d3:6b:
a0:93:0b:0f:92:b7:63:f3:ce:1b:c5:f7:f5:5a:99:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2B:8A:E6:5D:BB:BF:1C:4A:77:C4:D7:E6:C3:B9:86:32:61:C8:86
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:58:34:13:e4:04:4a:80:d0:34:ec:3b:20:d1:ed:9b:14:ea:
70:c6:49:5b:0a:bd:4d:af:64:2a:a1:98:b1:87:17:13:ef:12:
2e:6c:20:39:1d:2a:8a:a4:94:1a:27:f3:b0:82:55:e5:52:2c:
be:e1:83:73:78:95:56:b8:eb:9e:e2:bf:b4:b2:b2:51:5a:56:
34:62:41:df:cc:39:fb:c4:69:b4:38:d6:a4:65:ea:23:14:9a:
00:13:21:33:74:91:57:0a:d0:44:7c:16:11:d8:26:0d:f3:74:
42:93:68:c0:a1:36:6c:fb:af:b7:e8:99:52:b4:15:38:8d:63:
d3:0c:89:ab:ad:49:42:0c:0f:56:6f:51:56:5f:36:d7:f9:c1:
4a:d3:c0:48:65:3c:c3:c6:36:5f:cb:fc:16:68:49:7f:de:08:
56:c7:32:ac:6a:99:9e:90:4d:d9:0b:30:d8:56:d5:b7:f5:6e:
0f:3a:78:01:1f:62:4f:99:d7:c8:19:c7:07:16:93:46:d3:d1:
c6:6c:14:77:27:90:94:f8:0f:35:14:ed:eb:96:71:7c:83:65:
f5:11:35:40:23:82:e9:6c:ce:88:59:88:63:55:63:b3:ac:0f:
62:16:e4:92:2b:31:cf:6c:eb:0e:90:22:46:f5:d2:23:f8:33:
39:b0:26:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:32 2026 by rpki-client