Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
File: FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json)
Hash identifier: 5BRloHDVdE6GweHUpSjQACpPBkw2snFDWCW2PetuQes=
Subject key identifier: C9:6D:A6:3D:7E:A9:77:D2:34:8F:53:CA:33:05:32:8C:BB:9E:DB:7F
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Certificate issuer: /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial: 019D39AEB0CBDAA4FB41F010485A55528FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 13:00:42 +0000
Manifest this update: Sun 29 Mar 2026 13:00:42 +0000
Manifest next update: Mon 30 Mar 2026 13:00:42 +0000
Files and hashes: 1: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: 7UDB4e8hZ/6MpR/70i/To56axuhtx7GRRJEih7I/h9o=)
2: _zfrfxE4KY3Sz2qKZ9YX8YUP3Gc.roa (hash: WlQR46TcsvE8o+HLG0ehANtk2L9KYlzfKkIP64trfQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b0:cb:da:a4:fb:41:f0:10:48:5a:55:52:8f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Validity
Not Before: Mar 29 13:00:42 2026 GMT
Not After : Mar 30 13:00:42 2026 GMT
Subject: CN=c96da63d7ea977d2348f53ca3305328cbb9edb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:72:0a:76:e8:1d:c5:a5:f7:9a:94:b9:16:
88:18:74:45:5d:c3:1c:fa:1c:78:4f:85:17:ae:bb:
56:18:cd:44:1b:d6:14:ad:d5:6c:b3:2a:8d:56:4a:
38:2e:71:7b:ef:8b:99:f1:06:69:48:e3:cd:e0:40:
92:3c:d2:3b:c9:83:b4:c2:6f:79:02:ec:1e:39:24:
85:32:f1:9f:af:77:34:36:a3:67:e4:2f:c0:49:77:
91:d3:42:13:2d:b6:d2:5d:98:e4:28:16:fa:2a:29:
16:d1:cd:97:6c:b7:15:1d:a4:41:4e:47:c9:ee:f7:
9e:05:09:40:c0:d6:f4:ee:e2:1f:73:03:bc:88:9f:
91:74:e7:7c:92:18:c5:d9:a0:a4:da:e4:93:fc:62:
63:59:95:92:72:15:21:fd:d4:b9:7d:c6:3e:e5:f2:
2a:4e:b5:2b:f1:a0:50:27:39:e1:92:ed:3c:12:2a:
aa:92:c2:c5:f3:cb:e5:f3:ec:82:4f:26:de:09:c7:
07:75:bb:cd:83:45:53:1c:36:66:25:f2:4b:24:aa:
d6:89:94:c9:a9:11:cd:92:bf:b2:a1:7e:75:ed:d7:
84:15:8a:08:56:0e:5f:c1:f2:1b:0a:49:51:b0:29:
1c:f6:27:1c:6a:0a:c8:2b:92:88:db:61:cc:9c:2e:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6D:A6:3D:7E:A9:77:D2:34:8F:53:CA:33:05:32:8C:BB:9E:DB:7F
X509v3 Authority Key Identifier:
keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e2:a2:5e:94:8e:b7:c3:9a:64:05:f0:3c:57:b9:3d:a1:a0:
ab:05:c8:a5:07:92:eb:a1:67:38:ac:81:0e:97:df:ff:e0:ab:
da:ca:a9:38:72:e9:04:86:88:c7:fc:4c:65:4b:30:18:63:58:
cb:70:2e:b7:63:ed:3b:58:d4:09:1a:ad:be:25:a8:40:b3:43:
52:5f:bd:12:c1:8d:04:e2:1d:95:c9:46:fe:f5:8e:e2:1e:87:
72:56:c3:32:bb:13:1d:03:86:95:b8:b4:75:21:49:3c:7c:05:
6e:ae:8d:6e:d3:b1:eb:71:4d:45:54:a9:f2:b5:d1:82:cd:18:
25:72:22:b0:e5:21:fa:e4:8e:1c:c8:e1:7f:f5:38:2c:7a:bb:
57:98:0e:0c:ba:87:64:07:65:6e:cc:b4:ae:8e:ac:d8:dd:b0:
35:42:3b:a3:03:43:b4:2c:76:8d:89:4a:d8:86:db:e1:e3:b6:
0e:4a:77:d6:c7:f8:60:8a:74:50:42:97:ce:1a:61:6b:88:13:
78:b6:61:9d:e2:5e:2b:b3:8b:09:01:1d:73:8b:e1:29:c7:e7:
34:96:19:fa:81:96:e7:bf:35:a3:35:5f:86:1a:ec:b4:23:46:
55:af:22:5c:9f:84:2f:76:0b:b7:7e:45:bf:f2:08:ed:b1:e1:
94:2c:ae:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:26 2026 by rpki-client