Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: 86loBJTRpu3UDYg+TzZP8Dzpgz8RbLooZtrUaYZHFIg=
Subject key identifier: C2:E7:BB:8C:04:61:A4:EE:53:13:C1:E0:CE:3E:84:90:83:9C:6F:BA
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 019CE4B5FF684A511216FFCE0AF9A5D80B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 1868
Signing time: Fri 13 Mar 2026 01:00:58 +0000
Manifest this update: Fri 13 Mar 2026 01:00:58 +0000
Manifest next update: Sat 14 Mar 2026 01:00:58 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: 14VaS15aKaBFMGU278Ij9H0/q/y/FrjpOPjln63lvzI=)
2: YS_ybeFO-kBpHk4oOV6WmpXFmYQ.roa (hash: myHnrIBgh1OqNZnDZDrhs0mkn1s9VqCibLxchoW9EaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:ff:68:4a:51:12:16:ff:ce:0a:f9:a5:d8:0b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Mar 13 01:00:58 2026 GMT
Not After : Mar 14 01:00:58 2026 GMT
Subject: CN=c2e7bb8c0461a4ee5313c1e0ce3e8490839c6fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:02:f0:3d:83:18:88:06:9a:a5:57:92:68:
5c:ce:d5:b9:19:cb:cd:60:9a:5b:4a:f3:11:02:9b:
79:5a:3b:1d:82:60:db:68:b6:a1:b7:ff:2f:9e:e5:
08:f2:aa:ae:3a:57:91:d4:79:e1:80:03:9d:40:fa:
a6:27:13:32:46:0f:1f:40:80:1c:91:fd:7b:01:e5:
3a:67:49:6e:c8:b0:75:3b:2a:3d:2a:69:c0:f6:6e:
70:80:77:c4:2b:04:c0:c5:dd:44:f9:d0:2b:1c:c3:
1d:92:d9:e2:b9:e7:24:e4:30:d5:09:98:13:53:7f:
c9:b3:0b:bd:ba:ef:f1:68:a6:ce:22:d6:e8:26:06:
1f:25:b3:a1:6d:5a:a3:a2:bd:67:52:ad:4c:55:81:
d9:d4:d7:1e:6b:d6:f7:7b:b8:0e:b8:ec:50:f2:c9:
be:17:93:64:5f:a4:7c:fd:35:43:43:8a:ad:83:1a:
6b:4e:31:26:dd:64:dd:cc:a3:0d:4b:c4:0e:d3:8d:
65:a5:f5:89:99:5e:f6:e0:99:65:1a:67:09:43:ae:
0a:32:46:36:8e:2a:bb:6a:ce:fa:74:64:78:96:ca:
14:0b:f6:26:4e:c5:94:64:e9:27:f4:49:35:57:14:
56:26:fb:7e:c8:7d:22:ff:f7:4a:13:2e:ed:a4:ec:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E7:BB:8C:04:61:A4:EE:53:13:C1:E0:CE:3E:84:90:83:9C:6F:BA
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8d:02:cb:0f:46:27:50:af:d0:d7:fb:2c:3c:91:f7:5c:20:
d7:be:9f:fc:04:5f:cf:ad:f8:26:92:15:ba:90:96:7f:42:95:
16:62:f1:44:1f:38:c9:40:9f:be:be:2e:a2:78:70:35:12:df:
ad:61:b8:15:8b:fc:3a:f8:89:b5:97:64:5c:99:5b:ac:9b:e1:
05:c6:bd:ee:00:a3:22:34:ad:7c:ae:b2:fc:ed:55:1a:eb:26:
0b:68:95:c7:71:47:df:6f:d7:89:a8:2c:f9:a8:d6:55:2e:2f:
d6:f1:3a:e1:f6:e6:e2:b8:11:55:7f:27:00:05:93:e0:d4:12:
ab:5f:a1:c6:7a:57:15:3d:9d:da:f9:ec:15:df:48:76:3e:6b:
47:7c:67:e4:df:37:26:7f:99:c7:d6:91:3a:3b:b1:05:de:2d:
6c:4d:86:b5:05:63:d3:8b:1d:7b:85:bb:ce:99:46:59:35:8a:
1e:27:30:24:1f:5d:72:47:4a:91:f9:6b:71:93:70:a3:a3:3c:
d6:06:a0:fe:28:13:91:22:88:42:4d:bb:7d:37:97:a7:a4:f8:
82:65:94:0c:86:71:35:1e:bd:25:1b:d9:01:4b:00:e0:7b:19:
52:0b:a5:5c:d1:ac:08:0e:dc:67:36:39:f9:fe:d5:79:dc:87:
66:2e:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:36 2026 by rpki-client