Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
File: FcGBcG9hxLc3zX63j3Iw40zfwUw.mft (raw, json)
Hash identifier: C/lswjiD8dZ1i397rX5gf5YOD1m0w281k221CkkZUaw=
Subject key identifier: D0:E6:FD:F5:B8:BC:C1:AF:8A:16:4F:E8:F3:B8:32:E2:DB:B5:65:D2
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 019D055379974F2A799F3150E61794DCB2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
Manifest number: 02A3
Signing time: Thu 19 Mar 2026 09:00:49 +0000
Manifest this update: Thu 19 Mar 2026 09:00:49 +0000
Manifest next update: Fri 20 Mar 2026 09:00:49 +0000
Files and hashes: 1: 9gJCDoefYLTOALLR7m3uY4ZFTrs.roa (hash: rDMT0XfW0LmY8GbUzIJRZiwWfpYyUk7Ld0WUStlDnJo=)
2: FcGBcG9hxLc3zX63j3Iw40zfwUw.crl (hash: dux++070r+uy49YNcMVPFeNm80YXi2j7mI8rq8Se/FI=)
3: JudSUCOqbrtWbahpUSi_qKz1NTU.roa (hash: bQyJrY/9C3LHftNvfMRZW3PNS7iigGqzrsnlBjeZ04o=)
4: ZqWsPERsYnrsqCSaYTYQS_tw1uY.roa (hash: ey3Sif7k3v1Kz3BRtrxCLM84dh6fPOogRHH2kMK+y6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:53:79:97:4f:2a:79:9f:31:50:e6:17:94:dc:b2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Mar 19 09:00:49 2026 GMT
Not After : Mar 20 09:00:49 2026 GMT
Subject: CN=d0e6fdf5b8bcc1af8a164fe8f3b832e2dbb565d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:dd:2e:26:27:00:99:5c:ea:21:f5:46:3c:
b0:2b:83:a7:c1:d1:68:91:3b:c1:a2:bf:66:2f:f7:
41:2f:fe:08:db:38:3a:49:ec:7e:bb:b7:a0:19:ab:
3e:62:e9:34:ce:ae:10:d1:f3:08:4c:82:0c:b2:b7:
df:17:27:ee:26:34:5a:51:7f:d5:08:ed:0e:40:44:
1b:df:5e:ae:ae:1c:84:78:4b:d6:3a:8b:af:b8:b8:
00:9d:e4:c3:c8:fe:b8:b3:90:e0:3a:66:b1:34:45:
ce:dd:8b:d9:13:3a:ce:62:3b:e2:e0:26:75:8a:16:
49:87:17:72:4a:ee:5d:48:50:23:8e:84:f3:23:91:
fc:84:a1:18:d3:48:8d:9a:f0:46:a1:d5:2f:24:10:
85:18:c8:f0:70:1b:ac:9d:a5:01:c8:87:0b:be:fd:
50:d8:7c:17:c5:d9:a4:52:8e:d1:d9:60:ec:15:a7:
0e:0f:1f:61:ff:05:dd:c1:02:0c:53:35:6a:5d:80:
27:6b:82:93:a4:4f:1f:30:6a:da:82:fe:fb:25:7e:
7c:e1:c0:6b:60:89:b4:a3:67:43:e6:6d:4f:67:05:
8f:e1:46:41:5c:7b:9d:ca:2d:18:73:78:4e:a7:6a:
2b:3d:0c:c9:d1:be:31:61:d9:2d:5a:e2:4c:80:bd:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:FD:F5:B8:BC:C1:AF:8A:16:4F:E8:F3:B8:32:E2:DB:B5:65:D2
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a0:5f:2f:77:27:2c:99:e5:00:f3:b7:79:fc:c7:57:43:8d:
43:16:e5:92:8b:d6:44:d9:c2:44:0b:b0:16:71:39:b1:b7:40:
6e:44:38:c8:34:cc:35:7a:60:9a:bd:71:39:ad:48:fd:76:80:
dd:e0:fa:f6:7b:ba:eb:de:ae:f8:69:ed:04:67:e9:22:f7:2e:
2a:ac:00:c4:3d:ac:20:0b:70:1f:25:e6:bc:b7:b9:2e:fa:7b:
75:64:8a:9f:b2:f5:7a:23:e6:5e:f6:92:5a:9e:25:da:e1:87:
a1:01:5d:4a:6f:12:ac:13:55:a2:ad:25:87:6e:87:51:95:8d:
71:e5:56:e7:05:09:84:42:69:05:76:fe:f5:5a:b9:49:0b:0e:
67:7c:36:c5:74:81:0c:b2:54:ce:59:46:1b:7b:b2:15:3c:87:
29:9e:76:f0:7a:a8:81:48:eb:de:eb:36:83:9f:4a:96:18:0e:
46:a5:07:80:a6:53:61:db:73:69:1c:59:9e:92:d0:44:cd:5e:
e5:7d:94:aa:83:a6:05:41:6e:17:8e:ce:c8:7c:3b:6e:dc:e3:
ab:15:b5:b3:97:b0:0a:fe:10:ef:d3:08:09:bb:50:6b:6e:35:
88:15:bb:47:67:93:52:7b:66:34:0a:05:be:28:8c:ef:c8:2e:
d1:53:da:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0FU3mXTyp5nzFQ5heU3LK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YzE4MTcwNmY2MWM0YjczN2NkN2ViNzhmNzIzMGUzNGNk
ZmMxNGMwHhcNMjYwMzE5MDkwMDQ5WhcNMjYwMzIwMDkwMDQ5WjAzMTEwLwYDVQQD
EyhkMGU2ZmRmNWI4YmNjMWFmOGExNjRmZThmM2I4MzJlMmRiYjU2NWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq3dLiYnAJlc6iH1RjywK4OnwdFo
kTvBor9mL/dBL/4I2zg6Sex+u7egGas+Yuk0zq4Q0fMITIIMsrffFyfuJjRaUX/V
CO0OQEQb316urhyEeEvWOouvuLgAneTDyP64s5DgOmaxNEXO3YvZEzrOYjvi4CZ1
ihZJhxdySu5dSFAjjoTzI5H8hKEY00iNmvBGodUvJBCFGMjwcBusnaUByIcLvv1Q
2HwXxdmkUo7R2WDsFacODx9h/wXdwQIMUzVqXYAna4KTpE8fMGragv77JX584cBr
YIm0o2dD5m1PZwWP4UZBXHudyi0Yc3hOp2orPQzJ0b4xYdktWuJMgL286wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDm/fW4vMGvihZP6PO4MuLbtWXSMB8GA1UdIwQY
MBaAFBXBgXBvYcS3N81+t49yMONM38FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUt
OGZmNmNkNzc0N2M0LzEvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUtOGZmNmNkNzc0N2M0
LzEvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6BfL3cn
LJnlAPO3efzHV0ONQxblkovWRNnCRAuwFnE5sbdAbkQ4yDTMNXpgmr1xOa1I/XaA
3eD69nu6696u+GntBGfpIvcuKqwAxD2sIAtwHyXmvLe5Lvp7dWSKn7L1eiPmXvaS
Wp4l2uGHoQFdSm8SrBNVoq0lh26HUZWNceVW5wUJhEJpBXb+9Vq5SQsOZ3w2xXSB
DLJUzllGG3uyFTyHKZ528HqogUjr3us2g59KlhgORqUHgKZTYdtzaRxZnpLQRM1e
5X2UqoOmBUFuF47OyHw7btzjqxW1s5ewCv4Q79MICbtQa241iBW7R2eTUntmNAoF
viiM78gu0VPasg==
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:05:24 2026 by rpki-client