Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier: 6qhg2P5GPH01V2+R9c5yTZBNstt3dAaaYA9oXl0NCS0=
Subject key identifier: 2F:FC:EB:A4:F8:36:EB:72:2A:B3:D0:3A:D0:28:8C:97:B7:0F:BD:2A
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 019D3941B9A84B3D8B07CA7AA42D0C5F19C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number: 08EC
Signing time: Sun 29 Mar 2026 11:01:41 +0000
Manifest this update: Sun 29 Mar 2026 11:01:41 +0000
Manifest next update: Mon 30 Mar 2026 11:01:41 +0000
Files and hashes: 1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: izdS8hJQDfRhrN/rPADYJlJKmxhTUkx8xl++rm92SiE=)
2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=)
3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=)
4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=)
5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=)
6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=)
7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:b9:a8:4b:3d:8b:07:ca:7a:a4:2d:0c:5f:19:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Mar 29 11:01:41 2026 GMT
Not After : Mar 30 11:01:41 2026 GMT
Subject: CN=2ffceba4f836eb722ab3d03ad0288c97b70fbd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:4e:3c:6e:8e:58:b3:79:32:a1:0e:fa:33:
28:37:a0:13:e8:8c:66:20:94:2c:bc:e3:6f:23:16:
a7:69:f6:f4:2d:00:e5:d7:5e:33:a0:70:58:5e:48:
5c:03:5c:98:3f:e4:ad:5c:7c:4f:9c:93:f7:b6:4b:
a5:21:98:10:e4:b2:6f:c3:d0:75:f6:38:c8:52:38:
6c:61:23:d3:7a:db:8b:96:87:13:ee:2a:d0:b3:98:
27:f2:a9:28:a7:22:da:9c:f6:2e:05:90:4a:fb:fc:
87:de:1f:d2:f3:bc:b2:ac:54:6b:fa:49:49:58:76:
10:f8:94:e1:6f:b8:cc:24:61:c9:71:a5:9d:16:61:
b2:4b:2b:5f:84:84:c4:ba:50:95:68:a7:6c:92:a8:
cf:d0:b1:90:4c:02:dc:00:c7:65:55:13:67:83:03:
7e:4a:a5:49:af:2f:77:bd:8b:1a:6a:4b:d2:b7:12:
bc:9a:0f:09:1b:15:06:70:99:c0:07:84:4e:10:70:
e7:b1:c1:ba:de:f7:4c:e9:d6:a6:ea:af:89:da:37:
73:ef:b5:bd:ed:3a:27:5c:64:68:5e:af:f6:95:19:
66:94:b0:da:d6:52:f7:d8:fa:52:92:74:18:d5:6d:
eb:20:3f:84:34:56:64:9e:dc:0f:54:fc:f4:3c:e8:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FC:EB:A4:F8:36:EB:72:2A:B3:D0:3A:D0:28:8C:97:B7:0F:BD:2A
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:10:16:7c:bc:3a:3a:3b:19:26:5d:97:05:f9:8e:91:4a:b4:
cb:d0:d4:24:90:5e:b7:12:85:52:5c:db:70:2b:81:42:c7:c4:
bb:85:51:b4:00:9c:1c:d9:e1:a8:84:20:04:17:04:6e:6c:f6:
bc:71:dd:7a:8a:4e:25:2e:c1:e2:ae:02:70:80:81:f1:b6:33:
d8:cd:7c:1c:74:00:c0:c8:ca:ac:f1:ba:57:c6:82:7b:bc:65:
42:3c:de:c8:37:d3:3c:fa:d8:46:bb:1b:28:71:9c:19:e5:41:
7a:55:40:c0:11:8c:22:9f:b4:a4:db:40:b0:4d:61:44:b7:17:
15:89:49:05:76:3d:0b:08:0f:5d:a8:09:cb:04:75:da:fd:a1:
1b:a4:73:51:6b:10:73:3a:ee:47:0e:59:c3:1e:a2:59:c6:7a:
03:ca:5a:7f:5c:8a:56:f9:ed:e7:d3:3d:7f:03:45:10:86:bf:
9c:20:aa:cf:a2:c9:6a:06:fc:46:a6:f0:0b:7a:15:b6:d1:0a:
da:08:67:dc:03:f2:f2:fd:4b:66:72:c8:99:ab:44:0c:c1:7e:
5a:e9:d9:4d:d3:c4:51:9a:d6:da:57:d7:f4:ab:e4:0c:39:88:
20:e7:e1:2b:ab:5d:c3:81:3f:f0:23:52:00:23:18:e0:a4:8a:
84:83:09:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:19 2026 by rpki-client