Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File: FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier: EEIqJ0ITMsN6FpJZsZKXzAg/pMRmsdGXDxdi9aKySd8=
Subject key identifier: BE:BF:AC:84:52:CE:03:4A:22:E2:0B:90:89:03:4A:DB:ED:F2:19:CD
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 019D3909C7F81E853C3EC62E1B2230C6A638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number: 1766
Signing time: Sun 29 Mar 2026 10:00:35 +0000
Manifest this update: Sun 29 Mar 2026 10:00:35 +0000
Manifest next update: Mon 30 Mar 2026 10:00:35 +0000
Files and hashes: 1: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: Dh7HZPPyfrQpcSQZMolRX6Ynjj68tlo+jcWdN0iiymU=)
2: xd3jG3HbjtG0MuzuTRaYxtTyNcw.roa (hash: zkFlgvRz6cw1Fnc2wE2R8kAE+e+wpIfkz9Qvftstx7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c7:f8:1e:85:3c:3e:c6:2e:1b:22:30:c6:a6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Mar 29 10:00:35 2026 GMT
Not After : Mar 30 10:00:35 2026 GMT
Subject: CN=bebfac8452ce034a22e20b9089034adbedf219cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:87:2a:8b:6c:91:62:ad:e2:2c:ef:e8:ab:63:
c3:24:29:7a:f1:ff:aa:f1:03:75:69:1d:0d:5d:32:
af:b7:14:b5:8a:b2:48:6e:77:70:4d:4e:4f:ad:ce:
d2:9c:f7:21:6d:a8:2f:c8:5c:44:03:fd:0b:28:7f:
4d:71:ce:eb:e4:8e:e9:67:cb:50:e7:ba:3c:c4:97:
23:33:74:5d:c9:4c:81:8d:81:8d:9d:18:11:3a:ba:
6c:f3:51:91:1f:0a:d8:7f:be:d7:6e:2d:0e:b8:b4:
10:26:0c:d4:85:f6:3e:2f:3d:3a:25:aa:01:54:5c:
ae:b8:bf:4c:bb:66:e2:ae:88:2f:7e:e9:2e:39:e5:
cb:6f:7a:44:1a:67:9d:c6:4c:0d:7d:94:9b:8d:d8:
3c:e4:0f:25:b5:e9:2c:9b:1f:98:85:99:64:18:78:
40:5f:8f:2e:c3:79:ab:91:46:6c:a6:53:14:55:b7:
c4:7d:5a:19:72:85:0c:08:a9:79:7e:6c:fc:cc:f6:
0a:dc:e2:d6:35:03:c8:d1:ed:94:49:29:33:c7:74:
87:65:88:9b:1d:00:cc:42:43:1b:a5:2a:4f:0d:86:
bd:1a:b3:75:67:ce:75:9a:39:a4:3b:ac:c1:00:f3:
21:fd:df:3d:50:3e:f0:5f:c2:f8:f5:43:4f:20:31:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BF:AC:84:52:CE:03:4A:22:E2:0B:90:89:03:4A:DB:ED:F2:19:CD
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:03:a9:ac:1c:d1:39:ea:dd:cf:03:7a:05:02:4c:e6:dd:46:
e4:f1:f9:82:88:04:a8:1e:b7:d1:53:a8:10:fc:b9:a2:35:b5:
ff:67:71:ed:6b:ae:0b:01:ee:46:57:d5:e9:d4:08:45:50:41:
99:ec:c0:9e:fd:1f:b0:d5:6d:cc:b5:a4:60:9d:75:80:ca:c6:
a8:a5:ce:6d:f9:0b:1b:99:ff:e2:9a:5f:e0:4b:fe:76:a0:f7:
89:ce:d8:d0:cb:1e:93:01:94:c8:7f:74:6b:d5:eb:9d:1d:de:
5e:66:28:d3:21:21:d2:c6:8d:01:83:75:7c:e8:ec:41:87:c6:
48:ba:29:8a:6a:78:a8:bd:08:48:7b:5c:91:65:5f:c7:bb:42:
c3:8e:49:a7:35:b2:66:ec:4b:32:40:00:18:40:0f:56:4c:d8:
ad:f7:b4:79:47:78:7f:4c:56:0f:17:08:90:a8:f2:25:37:b3:
0e:dc:a8:04:d2:68:28:89:89:e2:c0:3d:d6:8a:59:6e:bd:0d:
60:70:3d:b2:db:52:a9:e6:4c:af:8a:72:a3:9f:12:b7:38:c7:
3c:05:18:eb:a7:eb:4b:6f:71:74:26:53:49:9b:4d:b6:b5:27:
3c:5c:5d:c0:16:76:77:11:1d:4c:e5:a5:e6:63:3f:05:0c:1b:
86:96:29:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Ccf4HoU8PsYuGyIwxqY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDljMjRkYWUzZWVmZmNiZWZhMzdhNjg4NjY0YWM5MzMw
MGVmNTgwHhcNMjYwMzI5MTAwMDM1WhcNMjYwMzMwMTAwMDM1WjAzMTEwLwYDVQQD
EyhiZWJmYWM4NDUyY2UwMzRhMjJlMjBiOTA4OTAzNGFkYmVkZjIxOWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIcqi2yRYq3iLO/oq2PDJCl68f+q
8QN1aR0NXTKvtxS1irJIbndwTU5Prc7SnPchbagvyFxEA/0LKH9Ncc7r5I7pZ8tQ
57o8xJcjM3RdyUyBjYGNnRgROrps81GRHwrYf77Xbi0OuLQQJgzUhfY+Lz06JaoB
VFyuuL9Mu2birogvfukuOeXLb3pEGmedxkwNfZSbjdg85A8lteksmx+YhZlkGHhA
X48uw3mrkUZsplMUVbfEfVoZcoUMCKl5fmz8zPYK3OLWNQPI0e2USSkzx3SHZYib
HQDMQkMbpSpPDYa9GrN1Z851mjmkO6zBAPMh/d89UD7wX8L49UNPIDEmTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6/rIRSzgNKIuILkIkDStvt8hnNMB8GA1UdIwQY
MBaAFBYJwk2uPu/8vvo3pohmSskzAO9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjIt
YmY0Yjc1ZTIwMGE3LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjItYmY0Yjc1ZTIwMGE3
LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQOprBzR
OerdzwN6BQJM5t1G5PH5gogEqB630VOoEPy5ojW1/2dx7WuuCwHuRlfV6dQIRVBB
mezAnv0fsNVtzLWkYJ11gMrGqKXObfkLG5n/4ppf4Ev+dqD3ic7Y0MsekwGUyH90
a9XrnR3eXmYo0yEh0saNAYN1fOjsQYfGSLopimp4qL0ISHtckWVfx7tCw45JpzWy
ZuxLMkAAGEAPVkzYrfe0eUd4f0xWDxcIkKjyJTezDtyoBNJoKImJ4sA91opZbr0N
YHA9sttSqeZMr4pyo58StzjHPAUY66frS29xdCZTSZtNtrUnPFxdwBZ2dxEdTOWl
5mM/BQwbhpYp2w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:52 2026 by rpki-client