Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier: 5+epDPVVlsQXTfyqNpSKGmDoK/YF+T5VAzE24TRGIg8=
Subject key identifier: 3A:53:2C:AE:8E:E4:DD:20:55:AB:64:A4:BD:1F:FA:8A:EA:51:38:67
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial: 019D389C2A433A4BF16F25DC75375D7F148C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:51 +0000
Manifest this update: Sun 29 Mar 2026 08:00:51 +0000
Manifest next update: Mon 30 Mar 2026 08:00:51 +0000
Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: b/NT5VtGtW1uodw9JppZTm/USCxNl6bol837aPqyvo4=)
2: Q9sYeL9y1OznxnC50ohiHoXs8Uc.roa (hash: aIxNkhwpmyzmF/3GFcRmbZ6fKr+QG1YWTaNKfwYICV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2a:43:3a:4b:f1:6f:25:dc:75:37:5d:7f:14:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Validity
Not Before: Mar 29 08:00:51 2026 GMT
Not After : Mar 30 08:00:51 2026 GMT
Subject: CN=3a532cae8ee4dd2055ab64a4bd1ffa8aea513867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:9c:c8:60:b5:2a:82:43:7b:4f:1e:90:4c:
50:15:44:1c:04:ee:ad:96:6b:3a:01:03:d0:6a:d6:
75:ab:3c:a7:66:62:90:b7:12:96:09:2a:be:8b:77:
49:83:25:13:08:8a:f3:10:bb:0a:43:c5:19:46:6a:
91:de:14:e3:32:bd:c2:da:02:53:f7:69:be:8d:83:
e6:c0:9c:66:c2:52:33:cd:48:85:e5:17:23:e7:07:
26:c2:44:e2:ea:22:a6:13:30:1f:53:fb:a5:d3:54:
2e:45:0a:e8:85:9f:d0:b3:4f:ed:6e:09:58:2f:5f:
b4:a5:3a:53:42:30:dd:e3:69:4d:83:df:80:8f:46:
de:26:80:9b:e1:4c:94:71:22:92:9d:16:ee:4d:c5:
7c:21:2f:7a:4d:33:d7:30:ac:5c:c5:1e:60:bf:3e:
75:77:89:94:dd:ad:28:09:b9:4a:52:86:4f:ae:36:
c1:79:aa:6f:c7:22:62:d9:3f:e5:93:2e:cb:25:69:
f6:d4:98:73:a1:35:50:42:37:58:6c:8f:50:1c:55:
49:ec:4b:86:df:56:e2:52:bd:6d:9f:e5:05:52:e5:
97:12:bb:ef:69:eb:be:2a:4f:45:4a:a4:8b:b2:01:
71:54:27:ca:71:be:37:44:12:14:cf:32:1a:1b:38:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:53:2C:AE:8E:E4:DD:20:55:AB:64:A4:BD:1F:FA:8A:EA:51:38:67
X509v3 Authority Key Identifier:
keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:eb:c4:60:d8:85:e2:15:13:e9:d0:ef:d3:45:07:24:e9:a4:
40:a8:22:f4:bd:62:84:b0:5f:0a:1a:1b:d4:76:c0:83:ee:a2:
36:b0:2b:56:a1:c4:a0:a9:0b:80:fd:84:16:cb:da:49:ab:21:
54:59:ff:ce:7e:6d:5c:e7:d2:01:fa:a1:35:ad:80:ad:b7:eb:
b7:58:3c:49:b1:80:a7:1e:a5:b7:23:77:4b:d0:5b:f0:4e:20:
56:3e:68:0c:b2:28:5a:a0:1e:ce:5a:44:14:16:bc:3f:80:cc:
f6:9c:d8:96:ea:9e:20:b0:1e:d2:44:95:26:b0:bc:83:04:70:
28:89:13:1d:d6:59:99:9a:4d:84:3a:13:9d:55:ba:57:09:bb:
5a:d2:21:5a:f9:eb:dc:84:37:4d:56:79:8e:83:39:56:7a:7b:
89:cf:84:0e:06:e6:07:18:63:2d:d4:47:b6:4a:2f:b6:88:a8:
01:1f:d8:1f:ee:ce:46:00:ea:b6:79:ed:0f:5f:73:a1:83:78:
1d:61:7b:3a:96:ca:1d:ee:55:b7:ff:4e:48:1b:74:ee:44:f1:
19:ac:1c:c9:2d:c3:c9:00:36:92:03:df:1c:78:0f:3e:8e:24:
d4:9f:44:c4:47:c6:87:94:3a:c4:1c:69:ec:86:6c:76:6f:46:
bc:88:3e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:37 2026 by rpki-client