Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier: Nm/IPRXThJrPU1ME4OWoloSfLF/iDogQxMgZvd27RBg=
Subject key identifier: 18:7E:66:93:4A:B5:9C:D1:88:DA:F8:C3:1E:F4:F9:30:57:18:9C:18
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 019D390991E39D0D066031D7200B8F94E11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number: 1612
Signing time: Sun 29 Mar 2026 10:00:21 +0000
Manifest this update: Sun 29 Mar 2026 10:00:21 +0000
Manifest next update: Mon 30 Mar 2026 10:00:21 +0000
Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: POXlObsDJJD3BM2SDsfxyoI+FRzYpasgJiozvZTODHk=)
2: jfn31bWoPt5u8J8dk_jaDuYtKVY.roa (hash: KodCP7xC+csniIon7z4178+lNkYaP00De8YC+4THaAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:91:e3:9d:0d:06:60:31:d7:20:0b:8f:94:e1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Mar 29 10:00:21 2026 GMT
Not After : Mar 30 10:00:21 2026 GMT
Subject: CN=187e66934ab59cd188daf8c31ef4f93057189c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:d0:45:68:ae:60:c7:19:85:d4:a2:01:3f:
f3:aa:c1:7b:67:96:82:18:7b:2a:68:d1:a7:3d:fa:
58:df:79:5c:a0:32:53:01:60:49:b5:3e:5a:fc:1c:
49:48:0f:cf:3a:a6:af:78:d2:1d:f0:13:6a:0b:44:
f1:12:c3:8c:5a:c7:88:34:8f:74:d0:9f:2a:17:e1:
46:38:be:37:66:b7:39:77:36:73:6f:a8:73:cf:91:
0a:70:bb:d1:ac:c7:43:32:71:a5:0a:a1:1f:fd:50:
11:37:e6:e0:1f:cd:44:76:d7:8e:db:8a:a4:0c:72:
c6:ed:9f:d3:03:a7:2c:2b:70:5b:cc:ce:c2:fd:cb:
ec:2f:f2:5f:47:e5:7e:ba:ca:b4:fc:ab:a0:0d:f5:
25:ae:c2:e4:e9:d5:ef:2d:ff:b3:12:75:d1:ce:7a:
40:37:e0:64:d5:bb:2b:dd:35:98:b3:b5:07:ef:8f:
b6:91:93:d2:95:b1:f9:46:93:f4:6b:ac:be:e0:8b:
dd:84:f5:fb:0a:56:97:9d:e2:99:33:56:29:e1:c1:
61:73:c3:bc:12:e3:70:27:53:a1:ee:45:ad:18:9e:
39:a9:8a:18:c9:f1:36:bc:45:10:1a:b5:7a:fd:62:
9a:b7:c5:bb:db:59:cc:6c:d4:f1:58:f9:88:82:9a:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7E:66:93:4A:B5:9C:D1:88:DA:F8:C3:1E:F4:F9:30:57:18:9C:18
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:13:00:2c:ec:ff:60:56:1a:e8:7f:9d:d6:51:2a:77:be:7c:
72:f2:e0:7e:c5:0b:c3:19:3a:83:bd:bf:17:d8:e0:8c:52:ed:
0a:73:88:43:94:6b:26:07:48:85:59:c6:b6:f8:0c:7c:76:47:
a6:99:90:f0:67:08:b7:ac:6f:a6:62:7c:eb:65:f6:ea:83:91:
ba:4a:16:83:24:e2:c5:89:b1:e9:2e:d6:a4:1e:0b:53:dd:2d:
c6:bf:d9:c3:69:54:5e:02:a6:50:12:e1:ff:c5:a5:58:14:1b:
93:f2:5c:2c:2f:50:a2:18:ae:f6:93:a0:85:09:12:1f:5d:a2:
01:b1:36:4e:9c:b6:20:41:3f:e3:9c:c4:85:f1:3a:87:10:d0:
8a:bc:37:5e:ec:03:a6:6a:3e:d0:0c:f1:f8:6b:a8:8f:f5:a4:
4a:b4:47:f2:9d:5b:fe:38:92:e0:a0:55:ee:28:aa:75:37:0c:
b9:ae:44:e1:58:de:66:89:e1:3e:bd:17:62:df:36:2b:25:0a:
36:9e:a9:3e:18:1d:28:73:86:33:b2:a6:0c:4a:12:cc:b1:1a:
7e:4d:ed:db:0b:b0:c6:44:9a:38:99:eb:c8:0a:85:73:bc:36:
a9:a6:7d:4a:92:5b:0e:db:fd:6c:da:fb:47:b5:3e:f0:2a:cd:
f9:93:10:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:05 2026 by rpki-client