Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: 3ig/03ZRDjcuxQCGyjb5xpTvXLbqp/9WfczcSF6itvs=
Subject key identifier: 58:6C:B1:9C:EB:49:0C:6F:23:92:F9:41:F8:1A:3F:4F:97:F6:0B:00
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 019D3940E0B175248A55822A26D250F66812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: Kt4ZhSxy2AcLS3SgbHvn5BFArdA2niewVUjV4s3QiiM=)
2: lJvVKRd6xYXkH3w4sqIr9ELeD6o.roa (hash: misofyoI9rt+yQi6weZU/F8kwAPhAeP1MXdYFSxncAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e0:b1:75:24:8a:55:82:2a:26:d2:50:f6:68:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=586cb19ceb490c6f2392f941f81a3f4f97f60b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:90:af:6e:5c:99:d3:ab:fa:f2:3b:f1:79:
41:4d:69:45:d5:5a:5b:c3:5d:52:2d:ed:1d:a5:3f:
53:3b:f8:ce:df:0b:ed:6f:e8:e2:98:a3:33:1d:c9:
96:8e:58:07:f1:43:c2:71:35:79:f0:ba:c0:d5:2d:
01:59:ff:5d:4f:ba:83:b4:65:9a:eb:4b:87:be:c3:
d1:48:f0:e3:09:7d:b1:5f:1e:18:92:69:3d:2f:ad:
97:76:1b:34:ad:a5:ce:95:ee:63:f4:22:15:7c:07:
68:c6:d5:cd:fd:3c:17:53:98:73:f5:06:4b:80:c2:
a8:1d:a8:58:df:2e:62:1f:fe:0a:12:82:8c:fd:58:
13:f0:e5:93:b3:87:8c:b2:0f:08:42:0e:a9:e0:d6:
03:b2:ea:ee:c9:4a:7a:b7:03:ab:c6:95:c2:00:40:
e3:27:7b:ec:d4:25:1e:6d:32:b1:ce:bd:be:4f:97:
50:5e:52:de:55:20:69:05:f8:c8:c3:8c:50:b2:25:
c0:46:45:c5:85:99:39:a3:2a:bd:03:dc:a7:db:68:
ce:bd:3e:e6:b1:67:4a:49:ec:c5:56:97:bd:b8:38:
20:5a:4b:6f:8a:19:a4:e8:41:ad:7f:03:eb:ce:81:
73:61:53:a3:65:7a:c4:82:44:32:5c:88:1b:00:8e:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6C:B1:9C:EB:49:0C:6F:23:92:F9:41:F8:1A:3F:4F:97:F6:0B:00
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e0:aa:f9:cb:4e:38:a0:5b:50:ed:54:94:a5:17:1e:79:d8:
e1:1e:97:23:18:0c:6e:30:ad:71:8e:d5:d4:02:da:09:65:8e:
d6:60:f9:8e:3d:24:59:66:06:82:83:f1:14:6e:55:ca:94:5c:
53:96:04:dc:e5:c1:6b:e5:80:e4:2c:5f:e7:1f:7a:d5:fa:b2:
8d:db:8b:47:ae:ca:dd:9e:4a:82:5a:f5:81:c2:8d:3e:55:28:
ef:67:41:09:71:53:dd:d1:e9:d6:45:14:df:9d:5d:77:cc:60:
fc:35:ca:07:9e:35:98:7f:51:b0:7a:88:b8:d7:07:cd:5a:58:
c7:d8:85:b2:ee:88:d1:d3:1c:c1:5a:a2:9e:6f:05:9b:52:b8:
55:32:87:18:3a:e1:22:f3:fd:40:96:a1:52:16:2e:ef:37:d5:
04:fb:86:ba:a7:93:ec:d5:ef:7e:3c:4b:cf:18:25:81:e2:18:
2c:c9:1f:c5:4f:16:f4:bc:8b:db:be:27:e1:3c:af:75:03:f9:
fb:ff:e0:6b:13:97:4a:a2:57:78:1c:73:27:a5:2a:e9:46:01:
de:9e:3d:d0:5a:ff:97:be:95:be:60:30:ef:21:5f:c4:d8:9f:
e6:1f:a3:4a:3f:f8:9e:dc:22:9c:2b:a9:4f:bd:40:c6:6c:4e:
82:09:3f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:18 2026 by rpki-client