Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier: 48ST84bRdxVwGdYcCjrdkhNeyUiAaqWjYC9pguQiJB4=
Subject key identifier: AA:FB:65:FB:2B:4D:0C:A1:CD:66:03:60:DC:27:34:C7:A2:CE:55:F2
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial: 019D38D39107FDC9992579A829D011BBB088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number: 0D1E
Signing time: Sun 29 Mar 2026 09:01:22 +0000
Manifest this update: Sun 29 Mar 2026 09:01:22 +0000
Manifest next update: Mon 30 Mar 2026 09:01:22 +0000
Files and hashes: 1: DGGg1cwcyckOEj5piFasZLtUpCM.roa (hash: b8NWlcDq3cqXueexrQLS4YXKUPoPYtHevhupgWyi2lA=)
2: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: KF/5KFKUgIfCRB2July2m8Pc7+ClEECdG6Pdis6xLGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:91:07:fd:c9:99:25:79:a8:29:d0:11:bb:b0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
Validity
Not Before: Mar 29 09:01:22 2026 GMT
Not After : Mar 30 09:01:22 2026 GMT
Subject: CN=aafb65fb2b4d0ca1cd660360dc2734c7a2ce55f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:8c:d9:16:75:0a:4c:02:15:58:5b:36:05:
1c:b8:ca:01:7d:12:88:b4:bc:70:20:52:44:ec:01:
a1:72:b3:0a:b6:c4:3c:0a:75:ee:7f:40:10:90:7a:
66:b5:41:4e:df:b0:a8:84:c5:c6:a2:6b:c8:1d:1a:
38:a4:b6:d8:26:81:d8:13:33:cc:12:60:ad:96:d4:
1d:af:43:6e:48:30:4c:89:bf:c2:7d:e5:37:39:85:
d5:c9:5a:34:47:a4:24:fe:58:cc:a8:7f:5d:f3:5b:
1f:e7:d4:62:87:6a:24:61:5f:e7:51:5c:5d:c4:f1:
4e:13:80:ad:8b:1d:91:92:55:ee:01:8d:56:4b:61:
18:f9:05:f6:ec:bb:88:96:e9:bd:98:f6:56:ed:0c:
60:44:5e:37:75:67:ac:23:d3:81:32:84:7f:47:df:
0d:b6:48:d6:df:0a:56:e0:c7:dd:f3:3b:f3:35:ba:
1e:7d:c6:e5:40:82:ce:36:64:b3:5a:92:e8:43:ff:
39:62:6d:94:d7:d8:58:fd:09:92:bd:09:37:61:9c:
36:fb:63:d2:ee:93:fc:b7:de:fc:03:79:fb:b1:a1:
72:1e:8c:8c:76:7d:84:c1:49:6d:b9:e3:c1:bd:c1:
6c:30:a2:08:d5:5f:59:fd:cf:63:43:0f:b7:c3:83:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FB:65:FB:2B:4D:0C:A1:CD:66:03:60:DC:27:34:C7:A2:CE:55:F2
X509v3 Authority Key Identifier:
keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:59:63:b2:c9:d8:db:73:a5:54:56:fd:fd:4b:5d:ba:e5:e7:
89:0c:af:06:44:b6:67:e8:db:38:e3:a3:90:d8:23:8e:fc:a3:
84:29:f2:e4:1e:fa:5a:9c:7b:46:c0:ba:df:0b:6c:49:3f:f0:
c7:18:20:6b:48:68:18:4d:5c:03:7e:85:64:b3:d8:f4:bb:f0:
9d:ad:ab:57:3e:83:11:1c:3a:d3:72:80:a5:70:f5:76:ee:56:
12:3b:b7:da:61:5e:ce:03:45:bc:5a:f0:09:4c:8c:2e:60:93:
06:c2:65:1b:94:1d:49:7f:d0:25:71:d3:4f:75:b6:54:db:f2:
93:b1:57:1a:74:f5:30:c2:be:69:db:62:4b:74:d1:9e:ef:a9:
3e:e3:e9:b6:49:ba:c0:6a:f8:ec:13:37:1d:01:6a:10:1a:6e:
eb:f7:37:1d:a1:a5:91:2c:36:74:19:01:d4:48:dd:a6:9a:ae:
37:08:68:1b:5a:3f:18:36:6c:b1:66:3c:a2:6e:b4:34:12:17:
ef:0e:66:52:ff:fc:b1:61:46:53:42:54:cb:39:1b:9a:1e:2d:
e4:d9:8c:a7:83:04:6e:fd:63:0e:f3:4b:1f:02:07:fa:9b:4b:
9c:76:de:a9:a9:9b:48:ce:84:f1:29:11:ae:24:56:41:3f:97:
90:d1:c9:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0405EH/cmZJXmoKdARu7CIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1N2IzMjA4MzBhZDA2ZWE3MWE3MjZlOWI4YjNjNDczMjQx
MjE5ZGIwHhcNMjYwMzI5MDkwMTIyWhcNMjYwMzMwMDkwMTIyWjAzMTEwLwYDVQQD
EyhhYWZiNjVmYjJiNGQwY2ExY2Q2NjAzNjBkYzI3MzRjN2EyY2U1NWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttaM2RZ1CkwCFVhbNgUcuMoBfRKI
tLxwIFJE7AGhcrMKtsQ8CnXuf0AQkHpmtUFO37CohMXGomvIHRo4pLbYJoHYEzPM
EmCtltQdr0NuSDBMib/CfeU3OYXVyVo0R6Qk/ljMqH9d81sf59Rih2okYV/nUVxd
xPFOE4Ctix2RklXuAY1WS2EY+QX27LuIlum9mPZW7QxgRF43dWesI9OBMoR/R98N
tkjW3wpW4Mfd8zvzNboefcblQILONmSzWpLoQ/85Ym2U19hY/QmSvQk3YZw2+2PS
7pP8t978A3n7saFyHoyMdn2EwUltuePBvcFsMKII1V9Z/c9jQw+3w4MXMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr7ZfsrTQyhzWYDYNwnNMeizlXyMB8GA1UdIwQY
MBaAFBV7MggwrQbqcacm6bizxHMkEhnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMt
YzY1MGM3NmQwOGNlLzEvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMtYzY1MGM3NmQwOGNl
LzEvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblljssnY
23OlVFb9/UtduuXniQyvBkS2Z+jbOOOjkNgjjvyjhCny5B76Wpx7RsC63wtsST/w
xxgga0hoGE1cA36FZLPY9Lvwna2rVz6DERw603KApXD1du5WEju32mFezgNFvFrw
CUyMLmCTBsJlG5QdSX/QJXHTT3W2VNvyk7FXGnT1MMK+adtiS3TRnu+pPuPptkm6
wGr47BM3HQFqEBpu6/c3HaGlkSw2dBkB1EjdppquNwhoG1o/GDZssWY8om60NBIX
7w5mUv/8sWFGU0JUyzkbmh4t5NmMp4MEbv1jDvNLHwIH+ptLnHbeqambSM6E8SkR
riRWQT+XkNHJaQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:15 2026 by rpki-client