Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: ZjKf1Eq7NqCSqcaNJUdE7wJxy9GiHqUGTQQ7pYxJDMQ=
Subject key identifier: E8:5A:30:A7:13:64:24:80:0F:A4:49:3F:F2:39:D3:84:AF:43:99:C7
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 019CF3BB1500876D87659E1153E431820779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 07AC
Signing time: Sun 15 Mar 2026 23:00:49 +0000
Manifest this update: Sun 15 Mar 2026 23:00:49 +0000
Manifest next update: Mon 16 Mar 2026 23:00:49 +0000
Files and hashes: 1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: CoJVMeQHY9TmSWEVKjM6d1PoTXMP7hXQIhy341fDZr0=)
2: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (hash: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:bb:15:00:87:6d:87:65:9e:11:53:e4:31:82:07:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Mar 15 23:00:49 2026 GMT
Not After : Mar 16 23:00:49 2026 GMT
Subject: CN=e85a30a7136424800fa4493ff239d384af4399c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:1c:c9:ac:0f:5e:79:9c:b9:43:b6:fd:b9:
bc:af:0b:eb:d9:c7:63:17:33:69:3a:2b:52:2e:21:
a9:c8:75:e9:43:cb:ab:45:5a:35:ac:8f:8e:a1:5d:
60:30:1e:a9:dd:0c:10:b6:3f:3b:e4:3e:be:b6:91:
92:44:88:fc:59:7b:3c:87:d7:5d:db:e4:23:06:57:
d7:30:a8:fb:0d:98:9d:e4:13:4d:97:a8:89:9b:38:
a4:77:fe:03:5d:f4:94:ce:6c:fb:fa:1e:e9:39:90:
4c:4f:be:75:52:d5:af:05:96:c4:c6:d9:99:cc:2c:
6f:7b:16:a3:5f:f6:29:73:ce:a6:a8:e3:57:4e:0f:
69:6f:65:b0:22:ee:c2:00:7c:79:1f:86:45:71:b4:
65:58:e9:71:65:9d:1e:1e:c0:17:c1:ec:05:8d:38:
5e:81:3c:8a:a3:0c:6f:4f:23:c2:24:e1:51:92:c1:
81:ed:e4:53:72:55:49:5e:51:c2:ff:2d:8b:cc:81:
0d:30:c2:c1:e6:6a:c5:18:a2:aa:36:af:30:80:ee:
dc:be:ab:ed:ab:d9:15:24:32:48:97:22:14:ce:d1:
e0:c7:63:e5:28:c6:8f:57:d0:7a:27:dd:0b:a1:77:
33:66:0d:30:36:14:45:ec:11:7c:07:27:75:bf:c5:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5A:30:A7:13:64:24:80:0F:A4:49:3F:F2:39:D3:84:AF:43:99:C7
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a5:85:94:dd:12:f5:36:d0:da:62:e3:a2:8f:50:72:d1:f0:
0d:79:cb:33:b7:3a:bf:c0:01:0f:d9:66:35:77:44:42:44:4b:
66:23:73:8e:6e:df:12:0b:6f:73:37:e7:0a:a3:60:39:57:9e:
bd:b7:dc:03:31:57:79:14:34:78:27:59:c6:00:d1:c8:9a:7d:
31:25:2e:2a:c7:09:8c:00:90:1b:81:cc:44:8c:f9:fc:b1:b9:
87:57:da:59:c1:7a:e2:d7:eb:c3:24:bd:12:ee:af:28:30:92:
cf:d6:f1:f0:f8:27:85:8b:dc:73:65:91:07:ea:86:34:c2:5b:
0b:f7:37:29:a3:06:bc:c1:3a:a4:89:78:16:e6:24:2c:a0:af:
18:7b:95:e5:1e:f8:6b:6c:5c:24:bb:71:72:26:b6:79:6a:f4:
d0:a9:e0:da:77:e2:00:84:74:1e:79:53:96:d4:12:13:15:a4:
c0:e9:81:98:68:5f:6f:2f:63:f0:34:01:c8:2e:08:34:92:9e:
20:f5:c5:8f:7b:d9:98:74:23:2d:4b:31:dc:38:b7:e2:93:cb:
b9:f5:2e:72:3b:11:65:75:bd:8b:c3:77:a7:80:96:05:83:6f:
85:e2:df:a3:d8:9a:0f:46:bc:20:b0:b2:4a:ce:84:23:73:b7:
11:66:e3:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzzuxUAh22HZZ4RU+Qxggd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MWRhNzUxMjhkYTc1ODJlMTBmNmE0YmYyMmI5MzkxMzQ5
YmE5ZjEwHhcNMjYwMzE1MjMwMDQ5WhcNMjYwMzE2MjMwMDQ5WjAzMTEwLwYDVQQD
EyhlODVhMzBhNzEzNjQyNDgwMGZhNDQ5M2ZmMjM5ZDM4NGFmNDM5OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5scyawPXnmcuUO2/bm8rwvr2cdj
FzNpOitSLiGpyHXpQ8urRVo1rI+OoV1gMB6p3QwQtj875D6+tpGSRIj8WXs8h9dd
2+QjBlfXMKj7DZid5BNNl6iJmzikd/4DXfSUzmz7+h7pOZBMT751UtWvBZbExtmZ
zCxvexajX/Ypc86mqONXTg9pb2WwIu7CAHx5H4ZFcbRlWOlxZZ0eHsAXwewFjThe
gTyKowxvTyPCJOFRksGB7eRTclVJXlHC/y2LzIENMMLB5mrFGKKqNq8wgO7cvqvt
q9kVJDJIlyIUztHgx2PlKMaPV9B6J90LoXczZg0wNhRF7BF8Byd1v8Xx2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhaMKcTZCSAD6RJP/I504SvQ5nHMB8GA1UdIwQY
MBaAFBcdp1Eo2nWC4Q9qS/Irk5E0m6nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2Mt
NjFkZWFhNTYzMWIyLzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2MtNjFkZWFhNTYzMWIy
LzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqWFlN0S
9TbQ2mLjoo9QctHwDXnLM7c6v8ABD9lmNXdEQkRLZiNzjm7fEgtvczfnCqNgOVee
vbfcAzFXeRQ0eCdZxgDRyJp9MSUuKscJjACQG4HMRIz5/LG5h1faWcF64tfrwyS9
Eu6vKDCSz9bx8PgnhYvcc2WRB+qGNMJbC/c3KaMGvME6pIl4FuYkLKCvGHuV5R74
a2xcJLtxcia2eWr00Kng2nfiAIR0HnlTltQSExWkwOmBmGhfby9j8DQByC4INJKe
IPXFj3vZmHQjLUsx3Di34pPLufUucjsRZXW9i8N3p4CWBYNvheLfo9iaD0a8ILCy
Ss6EI3O3EWbjWw==
-----END CERTIFICATE-----
Generated at Mon Mar 16 00:51:31 2026 by rpki-client