Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: YOBf85urEbKHwHTNMDuggE5s8aMqpfAlp2rDYijVLZc=
Subject key identifier: A1:CA:80:4F:35:60:F8:C5:CB:3C:1D:69:E1:F3:63:83:F3:4D:5C:AE
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 019CB8B8A78CCB4D8B0F53D742492A8B1622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 1854
Signing time: Wed 04 Mar 2026 12:00:35 +0000
Manifest this update: Wed 04 Mar 2026 12:00:35 +0000
Manifest next update: Thu 05 Mar 2026 12:00:35 +0000
Files and hashes: 1: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: wDl4DlMA81vqISkW6OShgNRwBygulNj/6GS73Z/qPEg=)
2: SZG8XeixTaqiVxW5rJUPZ8oUaFs.roa (hash: 1YSVd0Zexb+YYuPe7vCuTagdfSqZISFbptqFWf/HX9o=)
3: wpxxQF5AabypL-KTlSZ22CF0FgQ.roa (hash: LcmjGoMQfmQ0l8r/PAIze2pDnlI+sA44Nszwtlprn+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:b8:a7:8c:cb:4d:8b:0f:53:d7:42:49:2a:8b:16:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Mar 4 12:00:35 2026 GMT
Not After : Mar 5 12:00:35 2026 GMT
Subject: CN=a1ca804f3560f8c5cb3c1d69e1f36383f34d5cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:65:e3:96:e3:c2:84:de:5b:ff:5f:7a:be:
09:e4:56:67:30:dc:2c:5e:a7:6c:fc:8c:d4:31:94:
3d:e7:4e:89:52:2e:4d:6c:2d:1a:74:8b:15:ba:99:
be:af:90:2c:d3:a8:9b:8a:d7:91:e4:63:7d:04:da:
1c:91:b8:24:fa:a6:92:db:34:d4:87:b4:d4:9f:dd:
f6:67:73:80:8f:33:a6:57:4b:1e:b8:e7:b2:ff:28:
59:60:9c:c0:f0:a2:d4:46:60:4c:02:0c:f2:cf:75:
b1:5b:5b:9d:66:cc:26:92:62:16:f8:19:b4:54:93:
95:61:42:88:53:7b:76:23:0d:61:7c:7e:f8:dc:e9:
ee:66:c0:c5:16:8d:62:17:b2:a1:67:d3:13:1e:ce:
c5:94:0a:60:1b:4b:59:00:94:75:c4:1e:94:37:78:
13:5c:ac:ec:de:e2:2d:b6:f9:0f:2f:06:ec:c7:b7:
3b:4c:05:cf:be:11:ad:80:24:4e:35:d1:9f:c4:da:
28:bd:c6:40:db:66:50:ca:68:20:ec:fb:46:76:6b:
ef:bd:78:e5:12:e6:df:c7:73:36:71:76:90:af:b0:
30:d1:a3:89:e8:c2:dc:95:06:fd:99:41:33:24:60:
3f:d1:92:24:d0:c5:9d:e6:6c:df:4a:c7:24:fd:52:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CA:80:4F:35:60:F8:C5:CB:3C:1D:69:E1:F3:63:83:F3:4D:5C:AE
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e0:ce:99:da:e8:67:76:25:b1:6c:e1:4f:9b:6c:4a:58:e4:
e9:12:d3:d4:c4:12:c5:87:30:ed:6a:d4:ff:03:e1:23:bc:d3:
79:c2:ae:74:da:25:f6:5b:da:e4:27:20:8e:fd:92:14:f7:18:
45:5d:81:9e:e4:20:e9:8d:71:2f:66:cb:4e:bb:97:bf:fd:63:
28:be:07:87:ad:f0:1d:5b:42:c4:30:05:6a:9f:8f:c5:47:fd:
24:5a:0c:4c:a9:b5:7b:16:6e:b9:cb:71:d9:a5:ca:ef:bc:9a:
b1:60:cf:1b:de:0b:97:0e:29:80:5d:0a:05:94:5d:b6:f3:7f:
84:05:d7:52:4b:d5:6e:b8:e1:ea:ad:57:58:cb:83:50:18:d4:
e7:be:c3:ce:2b:7e:b4:e5:43:05:d4:48:4d:ec:a3:b9:42:d6:
0a:07:f4:f7:e1:49:f6:70:79:cd:53:df:d0:13:f7:dc:76:33:
15:76:9c:68:84:8e:0a:c5:09:37:22:a6:53:f2:94:3c:e4:b1:
6d:ad:94:ac:1e:09:5a:c7:7d:05:4f:11:61:bd:a3:45:23:1b:
72:17:0e:8b:60:62:17:53:56:5a:7e:dc:fd:5a:fa:91:95:8f:
26:d1:a7:9e:b2:80:8b:b1:2a:ef:a3:20:21:a4:3f:81:c6:32:
6e:59:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:48:30 2026 by rpki-client