Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
File: FgRPZYu8kicHhfe7ByrJNolfSTM.mft (raw, json)
Hash identifier: WzQFuCzXCW/XJpmHzaiStY19q2n0VU7lZH7EovyPyQM=
Subject key identifier: E9:D6:BA:8C:D2:15:13:23:81:BE:AA:BA:49:4E:81:1E:C1:6E:8B:22
Authority key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
Certificate issuer: /CN=16044f658bbc92270785f7bb072ac936895f4933
Certificate serial: 019D38D2F54910A24EB4306B9430603FEF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
Manifest number: 0124
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: FgRPZYu8kicHhfe7ByrJNolfSTM.crl (hash: 4zyy5ojXXducK0JxXC7pvpc3m6BAMeEbaBnU1kKLbr0=)
2: WatKg_0MoVqhZNrvrktjemd-kkU.roa (hash: HB6mZ1x55io1eH3g2s4HymshoqNX8HC4t8plzzNViRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f5:49:10:a2:4e:b4:30:6b:94:30:60:3f:ef:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16044f658bbc92270785f7bb072ac936895f4933
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=e9d6ba8cd215132381beaaba494e811ec16e8b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:01:d2:17:3e:7a:70:5a:2b:c3:2d:04:e9:
5a:9f:b6:08:80:b7:34:a6:1d:75:53:6e:bb:85:4d:
fe:c9:73:95:f8:23:7e:0e:27:fa:33:10:1d:5d:d4:
04:8f:d8:c0:6a:32:bf:89:26:45:5b:8e:bc:1a:32:
e9:2e:fc:5b:4e:c3:ee:5a:7d:47:f9:d5:48:92:01:
7b:ae:63:6e:72:e2:a8:86:ca:44:fa:03:0b:f8:c2:
52:64:58:9b:01:97:04:cf:e8:86:8b:cd:a5:bd:1b:
d3:ed:aa:4c:c8:f4:19:af:8f:ec:84:49:32:96:c6:
ac:c8:ce:78:ba:31:fe:2c:0f:f8:6c:e5:25:c1:0b:
17:35:5a:0f:78:07:d8:fa:52:45:22:cf:f5:c5:6e:
57:e5:2d:fd:dd:42:65:cf:f7:8d:7c:bd:f9:55:34:
f7:5f:39:fc:b5:cd:88:14:c8:9c:b8:c9:a0:cb:be:
55:24:e2:62:bd:16:34:e4:1a:d6:b4:dd:8d:b0:2b:
9f:98:4e:06:73:9a:d9:6c:d0:26:3c:59:b7:14:cd:
f8:b6:f2:db:04:41:84:ed:62:55:8b:68:b9:c0:ee:
a3:a8:61:4a:72:69:d7:ad:b8:cf:07:1d:cb:8f:a2:
4a:b5:8c:b1:7b:00:a4:f0:57:73:f6:79:c0:09:75:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D6:BA:8C:D2:15:13:23:81:BE:AA:BA:49:4E:81:1E:C1:6E:8B:22
X509v3 Authority Key Identifier:
keyid:16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:a9:bd:1d:b3:23:0a:ff:ce:8f:3c:c0:f4:ff:a2:ee:29:e1:
4f:98:09:a2:63:e6:9e:e6:4e:d7:d9:04:7b:82:55:70:10:7a:
f0:c2:ad:bf:fe:71:2a:50:48:2f:72:32:11:16:62:f9:03:af:
43:4b:4e:4d:be:0c:83:64:5a:33:ff:8a:fe:5e:5a:90:80:17:
a8:f9:77:34:b6:c3:1d:67:05:2d:84:db:b3:02:37:03:35:97:
f0:a8:37:f4:eb:40:c9:2f:9e:e2:75:b6:ed:e0:79:37:d2:01:
85:8f:41:a7:e7:04:0c:4a:92:fe:98:44:84:e7:0c:87:43:6c:
98:02:a5:38:73:de:ea:d8:93:7d:aa:be:be:92:38:7a:95:f5:
f7:fc:b2:d1:16:a2:29:f4:96:e1:c8:4c:50:60:6d:8d:98:2e:
46:b9:7d:6b:85:5a:6e:b0:86:02:2d:9f:95:09:1b:50:69:ba:
b4:a4:36:80:da:fa:2e:c7:4a:51:02:ef:45:e1:05:6e:d3:68:
05:47:42:42:09:3a:ad:10:f2:a4:75:6e:3c:37:de:35:29:54:
74:0f:02:5d:69:f2:96:9c:e3:fe:32:35:db:f1:22:d7:bc:87:
d9:9d:67:3f:3b:88:16:ab:0b:ef:fe:b6:7f:9d:e8:b6:95:c3:
1a:e5:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:52 2026 by rpki-client