Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File: FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier: nwvr0/4NYnIsccdvbWja8ScFvP4rjRTAXiSgZq2mLV4=
Subject key identifier: 16:42:D8:C0:83:99:E7:C7:DB:07:74:E9:44:3E:C4:A2:B3:62:8F:38
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 019D37F6EBCBBA7BD1E4AB3E125524A802BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: /3qglU8tz/sJcc8bJFyB32pNePQkBg6Mb+Lk/D/7aj8=)
2: vp0UDxTRbXOKDx0P7pG927dMuNw.roa (hash: a6PCE7KRbdt4SopfZX0xNsbWLBfdbr17il681AbH0vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:eb:cb:ba:7b:d1:e4:ab:3e:12:55:24:a8:02:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=1642d8c08399e7c7db0774e9443ec4a2b3628f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:e6:75:2f:51:3b:9d:5f:33:da:eb:62:e2:
9b:1e:21:30:97:c2:e0:c6:2a:8b:6f:58:9f:62:08:
7f:37:82:a7:2e:fd:78:43:dd:1e:2e:12:8b:57:07:
84:2f:57:d4:99:91:87:bb:5e:eb:87:5d:28:7c:61:
f4:3a:e6:f2:a3:6e:74:59:74:d0:22:34:9f:b9:96:
13:7a:8b:b5:cd:6d:78:a0:bb:8b:98:e2:6c:c7:b9:
3a:1f:ad:39:fd:5c:c3:48:7e:99:31:f8:37:9f:2b:
cd:11:91:31:90:78:b7:7b:c5:b1:46:b4:d6:bc:43:
ee:30:5b:e8:16:f7:7f:1f:43:d9:f6:09:0d:50:d1:
47:ba:fe:3d:16:57:48:91:4b:2b:b3:dc:63:31:6b:
f2:b0:5e:08:64:36:8c:26:e8:64:49:3d:77:4c:cb:
d7:4b:85:ef:ec:e0:1d:ba:5a:92:aa:1f:94:fb:69:
47:57:64:4b:1f:94:8c:43:4d:44:f9:e3:67:bf:29:
b9:9b:83:ce:c2:86:6c:87:ee:d7:d2:48:99:55:5e:
b5:eb:a2:31:c3:f2:0f:84:e9:5e:64:47:31:34:d2:
71:72:32:71:8b:8f:92:63:cf:ea:ea:7b:99:27:c5:
eb:47:30:1e:d0:76:1f:44:f5:b8:7e:fe:3f:f6:f0:
c5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:42:D8:C0:83:99:E7:C7:DB:07:74:E9:44:3E:C4:A2:B3:62:8F:38
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:33:54:cb:2c:c9:fa:1f:c6:47:5d:1c:ea:a1:78:ce:68:7e:
ef:40:e1:92:15:ca:c9:d9:4a:e3:74:cd:ab:c4:de:73:1d:cc:
61:38:82:50:63:e4:de:c6:3d:21:da:bd:f7:08:2b:a8:2b:39:
fe:3a:37:d4:85:bd:2f:52:11:56:a7:c1:11:46:e0:d8:55:ef:
1a:a9:a3:b6:1d:2f:ae:44:3b:7e:ff:7f:d0:f7:ac:9f:8d:b8:
0c:19:ce:44:34:86:c2:cb:7c:a2:c1:b3:65:0c:0f:d3:17:96:
2a:71:d9:a1:52:26:b1:87:f8:de:5c:8a:19:d4:f4:d5:ca:48:
16:92:f5:cc:b9:33:f9:cf:07:66:66:81:3d:9e:10:18:d7:f6:
d1:38:43:6b:f8:ff:a3:ce:19:e9:63:b8:a3:76:83:71:ff:0c:
35:f2:b6:41:c4:40:c6:13:6c:0c:7b:c3:ce:6f:0b:08:1f:87:
1a:e9:97:53:11:6c:a1:e0:6c:79:c6:1f:c8:38:45:70:e3:f6:
44:b3:ac:78:c9:ec:d0:6e:10:c7:db:dc:69:c1:24:ca:8a:87:
e0:fc:cf:79:51:a9:f8:e9:22:69:9a:6c:48:1b:0f:55:5d:87:
d4:c9:e9:c7:1e:e5:29:c1:1c:99:af:76:42:37:84:6f:d9:96:
e3:2e:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:45 2026 by rpki-client