Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
File: FxMSnvT6RU4PCsQH4AjpV6G3laA.mft (raw, json)
Hash identifier: 6xf3WctSfyEMuUgJjFkXPXeVKnmiCRjzVwFWqJc8L0M=
Subject key identifier: 11:9C:07:39:71:4B:52:D5:D7:19:AA:DB:F1:0A:B9:0A:8E:09:E2:4A
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 019D37532782163047033D5C5F2FCB85015C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:01:29 +0000
Manifest this update: Sun 29 Mar 2026 02:01:29 +0000
Manifest next update: Mon 30 Mar 2026 02:01:29 +0000
Files and hashes: 1: 2Yztgl1JDQiHLbJTugznfEzk5Qc.roa (hash: jSITK3S0lez0+624vvcXLxi93dFSIlVEaD28cVt/Qe0=)
2: FxMSnvT6RU4PCsQH4AjpV6G3laA.crl (hash: 3nSEA2MOHupYlw4/F6/uBx8mieIEpPhKl2G8lK9vD9Q=)
3: c0s191T9M-PjiRKEaUw3Sv51WuI.roa (hash: HMekVBw+h+CR9Vb7bu+DywUuyLHvbFqFC7IFjxkwPss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:27:82:16:30:47:03:3d:5c:5f:2f:cb:85:01:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: Mar 29 02:01:29 2026 GMT
Not After : Mar 30 02:01:29 2026 GMT
Subject: CN=119c0739714b52d5d719aadbf10ab90a8e09e24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:5b:ac:aa:8a:04:9f:29:41:e2:11:00:71:
16:23:bc:2d:20:8f:a7:70:f1:3f:20:43:25:6e:d3:
0a:a4:d8:a9:f4:38:f8:4a:39:97:ac:e1:32:a8:41:
ff:17:40:2f:68:32:50:0a:24:f0:bd:ed:44:3a:ff:
3c:db:5e:d1:ce:bb:31:2a:d2:4f:4f:f0:f4:a1:3b:
5c:ce:75:5f:fc:ca:b0:07:41:2e:b9:3e:d2:19:d9:
05:96:c4:ba:19:b8:22:95:9f:55:34:62:f5:93:ec:
71:58:8d:bb:d8:12:16:5c:07:da:ef:a4:73:06:94:
12:fc:9c:d0:9c:fd:dd:33:fa:55:f8:15:8f:d4:cf:
e2:0c:05:78:43:25:10:e9:7d:b8:92:b2:0f:41:d8:
1d:57:64:33:29:4f:b1:52:e7:b5:07:37:d7:c9:db:
31:33:d8:b1:b1:46:9b:b6:54:7a:da:29:f7:ae:e4:
64:96:a5:cc:c7:2a:72:eb:10:e7:e7:6e:a6:c9:3d:
f5:f3:cf:b5:62:52:d5:b9:45:fa:14:00:05:d4:73:
45:2c:24:41:14:7d:73:df:1e:80:36:dc:9b:79:54:
ba:d0:89:97:76:8a:7e:d3:1f:13:79:fa:3c:f2:ec:
25:e3:74:19:5b:6f:c2:b2:e2:38:33:7d:c8:c7:04:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9C:07:39:71:4B:52:D5:D7:19:AA:DB:F1:0A:B9:0A:8E:09:E2:4A
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:14:22:58:4b:69:7d:07:c8:d9:c6:ec:be:57:ca:bb:ec:72:
90:d7:a7:20:98:ae:b0:57:59:a9:45:68:0b:c8:08:47:ee:d5:
b1:17:71:1e:b4:13:44:55:a1:a2:89:73:22:5e:4c:11:90:4c:
46:a9:db:03:71:bf:2b:5c:15:45:22:95:af:39:23:8a:43:e2:
39:e3:f3:ee:8f:bf:51:01:39:61:3f:a2:89:0d:31:ea:35:de:
d2:5a:58:ba:33:22:99:7f:77:e2:c2:b5:fa:94:6d:3b:28:8d:
74:03:1f:91:c0:ad:21:6e:e6:8e:62:b4:f4:61:37:7f:61:16:
f2:34:8f:66:0c:16:b4:c0:a2:fa:6a:a9:59:ac:60:49:19:14:
9d:3b:0a:9f:54:ec:84:c5:48:bc:f7:3d:a4:fc:ed:90:45:7d:
2e:13:13:dc:6c:cc:98:44:9f:b9:5a:21:7e:a1:28:f9:50:01:
c1:f4:e6:5c:9d:1f:04:d7:6d:26:6c:43:cd:2c:0c:66:c7:5e:
ac:e2:58:d2:d0:fe:7d:71:38:5f:db:f0:6f:84:ea:f2:51:c0:
20:95:01:4d:94:41:90:25:9a:e4:87:9c:c8:d2:d3:ef:d1:ec:
18:61:17:13:fe:cb:e5:83:3d:6c:0b:00:cd:58:01:f9:46:cf:
4f:f1:97:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:41 2026 by rpki-client