Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
File: FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft (raw, json)
Hash identifier: /tpiNLlnb32V/sPWNl1Rv287diyDHXgzR9oIHM9Oy2I=
Subject key identifier: 6D:2E:99:05:79:DA:65:05:7D:7D:EC:F6:9A:AE:B6:04:7D:A9:B8:E1
Authority key identifier: 14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
Certificate issuer: /CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Certificate serial: 019D37C0E8CD088EB039868A883BC0C6C13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
Manifest number: 06C4
Signing time: Sun 29 Mar 2026 04:01:22 +0000
Manifest this update: Sun 29 Mar 2026 04:01:22 +0000
Manifest next update: Mon 30 Mar 2026 04:01:22 +0000
Files and hashes: 1: FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl (hash: GFrd5xpRh3VWWyHhQFxEFJZbGgZVyIFBKv+NUdqlxik=)
2: mE4gEFE8H9rF7W6JWQAwOeLazZU.roa (hash: i7rQ4LKM4wDGAKDMgvP7khSLa1cSADizdSi/LHDMiE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e8:cd:08:8e:b0:39:86:8a:88:3b:c0:c6:c1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Validity
Not Before: Mar 29 04:01:22 2026 GMT
Not After : Mar 30 04:01:22 2026 GMT
Subject: CN=6d2e990579da65057d7decf69aaeb6047da9b8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:52:c1:11:7e:f6:09:93:f3:07:af:61:94:
69:6c:9e:88:a4:a6:f7:40:85:2f:25:cd:73:3c:bc:
be:77:92:33:d8:47:0c:a5:3f:38:b7:18:9d:7f:36:
f7:ac:4d:f1:79:08:18:43:18:c6:4f:23:10:d4:b1:
48:7f:3c:f4:73:d3:03:bd:92:80:5d:87:b4:c2:4b:
5c:f2:7d:17:f3:b8:10:f4:a5:55:d8:40:44:28:f1:
2d:b9:db:ab:55:97:f3:2e:cd:0e:14:82:25:11:46:
30:50:93:9d:69:b9:91:80:2e:76:81:71:4d:c4:3b:
d2:b7:b0:a6:61:81:54:d7:05:0b:f7:07:c3:cc:a5:
f8:c9:90:4c:a5:71:3f:3b:4c:01:9c:02:90:2a:f8:
f7:7b:05:b5:b0:ae:6b:81:bf:bf:7e:74:07:25:da:
77:60:58:35:49:f0:3d:2a:ed:28:c6:95:0c:f0:14:
3b:cf:28:e6:c3:e0:dd:be:61:ca:fb:1c:f7:6b:39:
0f:dc:f1:13:15:05:d9:34:dd:6d:1b:de:00:3a:83:
39:c2:08:a0:9c:34:f8:73:b7:d0:fb:e6:74:60:ca:
4c:bc:20:f2:0b:38:a0:e5:83:82:45:88:cc:9d:b8:
d0:4f:f6:de:63:ce:82:de:2d:75:65:56:1a:aa:70:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2E:99:05:79:DA:65:05:7D:7D:EC:F6:9A:AE:B6:04:7D:A9:B8:E1
X509v3 Authority Key Identifier:
keyid:14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ba:cc:4f:49:40:bc:17:b2:88:51:4e:09:73:37:af:71:28:
e9:b5:13:80:37:38:e8:83:73:16:f5:06:1c:ea:63:cc:a4:98:
fd:a0:f9:2f:e8:5f:9e:6e:fb:d6:77:53:88:65:3e:0d:c0:c0:
5e:62:d0:9e:e9:4a:1e:1c:0f:55:31:85:f4:c9:6a:d0:2a:5e:
47:7a:68:50:14:f6:d5:94:c8:b6:ea:af:02:22:ed:16:27:30:
82:16:8d:bf:24:a1:6a:60:1c:e6:cc:6d:f0:77:c3:09:63:7d:
d1:bc:ca:2a:72:b4:cd:7a:fa:13:9f:51:80:ec:29:9c:3d:7d:
d8:c9:01:f7:63:ce:4d:d1:e8:27:fe:a9:a4:a6:06:5d:a9:e9:
1e:a3:db:52:92:56:88:55:4d:ce:13:46:e9:ab:86:14:f2:66:
ca:32:65:aa:f9:76:33:34:e6:ad:08:00:7d:cd:30:b7:63:48:
e4:8a:ce:7e:f2:bb:ff:43:82:59:a1:74:d1:b0:35:02:7f:b4:
2c:83:17:e9:75:3a:97:00:30:38:c1:a3:bf:56:24:ae:92:22:
5d:f8:c1:5f:09:f2:69:5d:6e:9f:25:dc:b7:0a:7e:bd:0c:28:
b8:b9:ce:40:4d:c2:5a:e2:cb:12:c8:f5:b7:33:a9:46:b1:6c:
ed:76:a1:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wOjNCI6wOYaKiDvAxsE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OWZhNmQ0ZmUwZWQwZTAxMmViM2JjZmZkZjJiZjllMWY3
NDc5NzIwHhcNMjYwMzI5MDQwMTIyWhcNMjYwMzMwMDQwMTIyWjAzMTEwLwYDVQQD
Eyg2ZDJlOTkwNTc5ZGE2NTA1N2Q3ZGVjZjY5YWFlYjYwNDdkYTliOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3ZSwRF+9gmT8wevYZRpbJ6IpKb3
QIUvJc1zPLy+d5Iz2EcMpT84txidfzb3rE3xeQgYQxjGTyMQ1LFIfzz0c9MDvZKA
XYe0wktc8n0X87gQ9KVV2EBEKPEtudurVZfzLs0OFIIlEUYwUJOdabmRgC52gXFN
xDvSt7CmYYFU1wUL9wfDzKX4yZBMpXE/O0wBnAKQKvj3ewW1sK5rgb+/fnQHJdp3
YFg1SfA9Ku0oxpUM8BQ7zyjmw+DdvmHK+xz3azkP3PETFQXZNN1tG94AOoM5wgig
nDT4c7fQ++Z0YMpMvCDyCzig5YOCRYjMnbjQT/beY86C3i11ZVYaqnD16wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0umQV52mUFfX3s9pqutgR9qbjhMB8GA1UdIwQY
MBaAFBSfptT+DtDgEus7z/3yv54fdHlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEt
NzM3ODQwZTI3ZWE2LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEtNzM3ODQwZTI3ZWE2
LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx7rMT0lA
vBeyiFFOCXM3r3Eo6bUTgDc46INzFvUGHOpjzKSY/aD5L+hfnm771ndTiGU+DcDA
XmLQnulKHhwPVTGF9Mlq0CpeR3poUBT21ZTItuqvAiLtFicwghaNvyShamAc5sxt
8HfDCWN90bzKKnK0zXr6E59RgOwpnD192MkB92POTdHoJ/6ppKYGXanpHqPbUpJW
iFVNzhNG6auGFPJmyjJlqvl2MzTmrQgAfc0wt2NI5IrOfvK7/0OCWaF00bA1An+0
LIMX6XU6lwAwOMGjv1YkrpIiXfjBXwnyaV1unyXctwp+vQwouLnOQE3CWuLLEsj1
tzOpRrFs7XahRQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:45 2026 by rpki-client