Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
File: FpNzegFGnJUBHWlzklZZFgRdOiA.mft (raw, json)
Hash identifier: n92os6ClSd1K+mwwC+JFYOicA9fanTFUEtgpM5rsDyk=
Subject key identifier: 8A:FF:6C:86:3F:63:D4:8E:7C:70:3D:F0:AE:C5:81:F5:F9:38:6F:8B
Authority key identifier: 16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
Certificate issuer: /CN=1693737a01469c95011d697392565916045d3a20
Certificate serial: 019D37F7669B877C4C7D5004721015D400A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
Manifest number: 0575
Signing time: Sun 29 Mar 2026 05:00:53 +0000
Manifest this update: Sun 29 Mar 2026 05:00:53 +0000
Manifest next update: Mon 30 Mar 2026 05:00:53 +0000
Files and hashes: 1: FpNzegFGnJUBHWlzklZZFgRdOiA.crl (hash: AxgIhEb5an4AY8+I/ZhqO9EQh4DEymK7yQ1thaIngVc=)
2: r49ZEDE6WWxNrXEhESIxvZobJt4.roa (hash: DK7S0gOLstB9fTfPHhimalpV0TB0R2sQM6XVh6ZJuu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:66:9b:87:7c:4c:7d:50:04:72:10:15:d4:00:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1693737a01469c95011d697392565916045d3a20
Validity
Not Before: Mar 29 05:00:53 2026 GMT
Not After : Mar 30 05:00:53 2026 GMT
Subject: CN=8aff6c863f63d48e7c703df0aec581f5f9386f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:b7:ed:a6:c2:ce:f8:d3:35:69:4e:10:c8:
58:be:32:68:69:91:dc:2e:19:73:90:dc:74:5d:e9:
f8:d1:41:04:a0:46:aa:10:fd:8a:ab:6a:5f:b8:0d:
8b:07:68:1b:37:a0:b3:ae:4b:58:07:17:ad:dc:b8:
35:d7:de:f4:d9:69:7c:a3:e6:98:f7:b6:87:8e:32:
e1:26:07:e9:be:75:07:a2:89:ae:16:09:de:33:0e:
04:63:fc:60:3d:f5:0e:c0:84:23:45:cc:10:2b:cc:
fb:68:1a:52:eb:a9:61:53:65:96:a3:f0:c6:65:b7:
0b:17:c1:55:b6:b6:79:dd:13:a0:02:3d:bc:ad:33:
2b:4b:6b:15:ac:f5:d3:f9:eb:d4:25:0c:e0:19:09:
e3:46:18:0d:df:36:2c:61:eb:a6:6f:06:96:43:3b:
d4:ee:5d:9b:e1:1b:95:aa:c3:5a:69:71:ad:9f:54:
52:76:53:74:70:86:45:5e:28:5d:18:3a:05:a8:93:
ba:98:1f:9c:ec:27:82:d2:f6:3a:dd:37:57:45:2d:
89:81:92:fd:02:61:48:53:5a:35:bf:4c:fd:c5:bd:
a4:35:13:35:d3:b8:1d:f4:a7:10:f6:62:3b:93:a6:
85:0a:45:5e:5f:0b:5d:8f:6c:70:a9:3e:c3:ae:98:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:6C:86:3F:63:D4:8E:7C:70:3D:F0:AE:C5:81:F5:F9:38:6F:8B
X509v3 Authority Key Identifier:
keyid:16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:05:16:db:05:20:63:41:a7:1b:dc:13:64:25:bd:a3:9e:15:
c4:7b:ca:e1:43:53:86:f3:29:34:5f:5b:fe:70:60:fc:dd:1b:
c9:3a:8e:6b:a0:82:f4:86:6f:f9:d9:9d:f6:87:12:96:18:8a:
66:e3:16:0b:7f:b1:6c:18:2d:a6:1e:3b:09:28:f6:71:0b:a3:
bf:f2:a6:47:50:d1:c4:6a:0d:23:e5:15:3e:1d:d2:f5:be:b8:
80:06:bf:a6:dc:6b:ae:69:0b:8d:5a:83:d2:df:31:e2:ef:3a:
1b:53:9d:65:f5:a0:f1:d4:3a:df:9b:df:b2:4c:ae:7e:a2:17:
8a:94:ba:49:4d:12:89:b2:ac:73:02:59:2e:78:f7:f7:97:ff:
5c:d7:b0:11:06:58:2f:92:5a:7a:3d:20:af:9e:0c:11:3b:05:
67:8c:c7:41:34:43:3c:83:98:c4:8d:40:bc:11:6b:28:a0:25:
51:33:24:f4:46:c8:81:da:8f:68:8d:cb:09:35:11:1f:d8:8c:
9e:67:88:b1:c1:b7:a0:ca:e9:11:60:f7:44:ff:0d:58:46:83:
ca:11:30:84:61:8c:39:c6:d9:07:6e:1e:4a:1e:6e:c9:76:7d:
d8:ee:08:29:a3:6a:78:d2:7a:a4:73:0f:41:d7:eb:f6:92:c2:
5d:81:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:49 2026 by rpki-client