Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File: FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier: mbCAadFHqCJQCLn07AwMXZmv17SHtvgHdkh9BxqNIqI=
Subject key identifier: 88:28:0A:14:AF:17:1F:A7:19:89:B2:22:1C:85:02:CB:08:DD:65:B6
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial: 019CBF5F86C6426F58E470459F851945B226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number: 1852
Signing time: Thu 05 Mar 2026 19:00:34 +0000
Manifest this update: Thu 05 Mar 2026 19:00:34 +0000
Manifest next update: Fri 06 Mar 2026 19:00:34 +0000
Files and hashes: 1: 6MT8gBwfYHWN7Sq2KVrJZlNQ-Ps.roa (hash: DvaijMExSYKtFCkDw2S7VYWVS8RZwCohsUuXaIZZ+u0=)
2: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: +BlbvK8Gey2n4lPB6jFzhgw8RP1F3jn4h6QjeFi/aVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:5f:86:c6:42:6f:58:e4:70:45:9f:85:19:45:b2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
Validity
Not Before: Mar 5 19:00:34 2026 GMT
Not After : Mar 6 19:00:34 2026 GMT
Subject: CN=88280a14af171fa71989b2221c8502cb08dd65b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:57:77:29:58:33:f0:e4:bd:ed:56:64:b7:0e:
9c:cb:81:3b:94:f8:50:ca:91:89:ff:bc:d2:7f:63:
29:91:e4:b2:fb:57:bd:31:22:90:18:65:7d:47:30:
6e:61:49:77:af:e1:f9:56:82:ed:3f:e5:2c:df:e1:
fc:cf:d6:49:a3:fd:89:72:51:7b:17:5b:e1:30:ee:
a8:75:bb:91:8f:c5:d1:60:6d:60:55:d3:ff:4f:b2:
19:be:0d:42:27:e0:4d:c4:8c:4c:3c:91:40:09:e5:
08:75:a8:f9:73:35:47:30:39:80:f5:3f:f4:a9:5e:
12:2b:f0:d7:72:b1:ff:1a:bc:c6:86:77:93:22:a0:
0c:c5:d6:e0:a9:88:21:c2:86:d8:46:43:cd:07:18:
cf:49:69:34:c3:81:e5:3a:e7:0d:97:25:3f:8a:12:
94:a2:e0:36:17:31:ab:4f:66:0c:40:54:17:1c:2f:
fa:21:87:a1:59:1f:42:14:11:a2:e7:37:a8:db:e3:
52:91:4c:41:d8:a3:56:0a:1c:95:7d:f6:d0:32:08:
0d:25:c7:69:78:e7:e3:70:72:15:b2:5d:1f:6b:ed:
37:e0:94:da:27:c2:9d:d5:0b:89:67:72:74:a5:ee:
60:b2:af:f3:b2:e8:b6:94:cb:b9:b3:ac:2b:42:9b:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:0A:14:AF:17:1F:A7:19:89:B2:22:1C:85:02:CB:08:DD:65:B6
X509v3 Authority Key Identifier:
keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:68:cd:10:44:91:4d:ce:e5:83:3b:3a:8b:a9:c1:60:ae:3f:
a5:cf:c2:de:b4:81:77:23:57:ba:83:09:90:f8:6c:3a:08:ba:
db:42:95:ce:b1:b4:c8:ca:5b:a2:01:26:fd:86:9c:d0:aa:b2:
0d:a7:68:24:e0:62:a2:f5:9c:44:e7:6c:7a:26:e7:dd:53:cc:
13:74:eb:ea:73:db:90:ec:a2:b8:01:26:bb:16:60:6e:95:82:
74:ba:ab:47:44:7b:f1:a7:84:63:38:66:ec:e5:68:b5:89:1f:
1c:ee:f1:63:eb:f0:eb:5c:3a:16:82:8a:01:97:b8:a1:ea:38:
58:9b:86:81:bd:d0:b9:6f:90:44:d7:62:8f:a9:62:38:8a:88:
d4:b5:65:12:4c:ce:3c:ea:7c:8d:4d:c4:83:22:3a:85:ca:30:
7e:47:f0:96:29:12:64:f6:b6:a1:ee:31:f5:d6:74:7f:65:49:
51:bc:53:f6:c0:9d:ab:3e:04:69:36:ad:56:59:1b:0d:df:18:
1a:e0:bb:da:e2:12:8b:1e:0a:62:d6:9f:ba:11:d1:bf:fe:56:
7d:7e:6d:bb:e0:f3:c3:54:06:b8:6f:77:7b:d7:bb:1b:51:96:
1a:3e:bd:78:74:ca:34:9c:b8:fb:4d:d2:8a:ff:30:c4:f6:ee:
10:f5:9a:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy/X4bGQm9Y5HBFn4UZRbImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NjE3MGNiOTA2ZWY0MmQwOTdjNjQwMmQ4M2VlYzNkOTI2
NzdhNjgwHhcNMjYwMzA1MTkwMDM0WhcNMjYwMzA2MTkwMDM0WjAzMTEwLwYDVQQD
Eyg4ODI4MGExNGFmMTcxZmE3MTk4OWIyMjIxYzg1MDJjYjA4ZGQ2NWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Fd3KVgz8OS97VZktw6cy4E7lPhQ
ypGJ/7zSf2MpkeSy+1e9MSKQGGV9RzBuYUl3r+H5VoLtP+Us3+H8z9ZJo/2JclF7
F1vhMO6odbuRj8XRYG1gVdP/T7IZvg1CJ+BNxIxMPJFACeUIdaj5czVHMDmA9T/0
qV4SK/DXcrH/GrzGhneTIqAMxdbgqYghwobYRkPNBxjPSWk0w4HlOucNlyU/ihKU
ouA2FzGrT2YMQFQXHC/6IYehWR9CFBGi5zeo2+NSkUxB2KNWChyVffbQMggNJcdp
eOfjcHIVsl0fa+034JTaJ8Kd1QuJZ3J0pe5gsq/zsui2lMu5s6wrQpua/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgoChSvFx+nGYmyIhyFAssI3WW2MB8GA1UdIwQY
MBaAFBRhcMuQbvQtCXxkAtg+7D2SZ3poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkdGd3k1QnU5QzBKZkdRQzJEN3NQWkpuZW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MDJhNzItMzExMi00ZDlmLWJiYTkt
ODAzNGUyZDA1ZDM5LzEvRkdGd3k1QnU5QzBKZkdRQzJEN3NQWkpuZW1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MDJhNzItMzExMi00ZDlmLWJiYTktODAzNGUyZDA1ZDM5
LzEvRkdGd3k1QnU5QzBKZkdRQzJEN3NQWkpuZW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2jNEESR
Tc7lgzs6i6nBYK4/pc/C3rSBdyNXuoMJkPhsOgi620KVzrG0yMpbogEm/Yac0Kqy
DadoJOBiovWcROdseibn3VPME3Tr6nPbkOyiuAEmuxZgbpWCdLqrR0R78aeEYzhm
7OVotYkfHO7xY+vw61w6FoKKAZe4oeo4WJuGgb3QuW+QRNdij6liOIqI1LVlEkzO
POp8jU3EgyI6hcowfkfwlikSZPa2oe4x9dZ0f2VJUbxT9sCdqz4EaTatVlkbDd8Y
GuC72uISix4KYtafuhHRv/5WfX5tu+Dzw1QGuG93e9e7G1GWGj69eHTKNJy4+03S
iv8wxPbuEPWa6A==
-----END CERTIFICATE-----
Generated at Thu Mar 5 23:44:05 2026 by rpki-client