Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
File: FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft (raw, json)
Hash identifier: ZvCYxpk1KbryoacyVqKNMOq7kd9PUJNMxSg4t57gsLo=
Subject key identifier: DC:25:64:F0:B3:75:5A:AC:9F:69:E9:FF:DB:35:E2:3E:0F:BC:4D:32
Authority key identifier: 15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4
Certificate issuer: /CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
Certificate serial: 019D3A54037BC7A15098412FAE025CE6C807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
Manifest number: 0166
Signing time: Sun 29 Mar 2026 16:01:17 +0000
Manifest this update: Sun 29 Mar 2026 16:01:17 +0000
Manifest next update: Mon 30 Mar 2026 16:01:17 +0000
Files and hashes: 1: 6Qw2qfKOtpd_LKkKsTDZ3ejOc18.roa (hash: bj0QwSywJCHEKu3qq7k1s6hD+djiOxQDSPNiFdM0bYw=)
2: FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl (hash: YxEeVvfkDS5q6yo7e/Jn4DWxH7yanncBZkfyfi0xa5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:03:7b:c7:a1:50:98:41:2f:ae:02:5c:e6:c8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
Validity
Not Before: Mar 29 16:01:17 2026 GMT
Not After : Mar 30 16:01:17 2026 GMT
Subject: CN=dc2564f0b3755aac9f69e9ffdb35e23e0fbc4d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:06:f3:e7:1b:df:d3:2a:00:d0:69:0e:47:0b:
50:c3:7d:be:a7:00:c1:e7:44:4e:4c:c7:f8:c7:b7:
d3:57:16:0b:6a:5c:da:ce:cb:16:f4:44:18:6f:7d:
00:50:3c:f0:de:8f:97:b5:9c:89:15:fc:36:2f:dc:
aa:2e:8d:ca:7e:2b:de:2c:c8:bb:51:3d:2e:8e:24:
b0:0e:d2:6d:9d:12:f5:7e:05:cd:08:e4:ad:01:93:
48:66:42:1e:f3:82:dc:57:09:7a:fa:13:93:b0:f3:
ce:fe:6b:df:15:9a:75:bc:0c:f6:57:a3:ae:1a:3e:
e8:78:f6:29:2f:fc:f4:eb:6d:be:e5:59:b4:2a:0c:
fb:f8:1a:a7:db:5e:1f:4b:fb:62:ab:60:98:8e:2d:
b1:72:4e:ad:19:02:0a:2f:d6:0b:be:60:90:9c:14:
ae:d1:16:b1:26:41:aa:8e:b7:79:99:22:2a:0f:c1:
95:4b:da:59:95:c1:42:c8:a3:d6:f8:a7:de:35:f4:
d0:de:6a:6b:57:66:42:36:f5:42:5e:b3:66:c9:f5:
83:4e:cd:4e:b3:bf:8e:71:b9:ad:97:c1:14:67:2f:
5b:33:d2:61:d2:0e:23:a8:dd:9a:40:ff:55:18:65:
2d:e3:09:da:f3:9e:4b:64:93:cc:1b:43:21:a3:98:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:25:64:F0:B3:75:5A:AC:9F:69:E9:FF:DB:35:E2:3E:0F:BC:4D:32
X509v3 Authority Key Identifier:
keyid:15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:45:55:ad:b3:8b:87:37:72:03:05:54:79:11:dd:fa:58:38:
ca:43:2a:d8:b6:fa:b9:c9:2b:c2:66:4a:07:c1:a4:7d:d4:1c:
67:80:54:2d:72:f4:06:a2:06:8f:d1:37:93:23:d4:0a:67:35:
e7:b6:61:33:a6:a6:3f:2c:ba:84:74:8a:14:91:e7:07:e7:4d:
22:19:be:53:b1:87:2c:30:37:17:e6:52:42:94:73:93:d3:fe:
92:77:47:15:75:8c:c7:cf:37:cb:03:30:92:87:f6:33:e2:3d:
ec:c8:a9:ed:78:77:76:4d:b0:34:ad:3a:82:ec:92:46:85:d7:
7d:95:6c:12:53:13:a5:30:54:29:1b:62:4e:ae:2c:f4:fc:ca:
9e:a2:c0:5a:5e:03:eb:6e:c1:b7:fc:32:4d:0b:8c:1b:85:c3:
22:1b:06:64:be:9d:77:bc:14:9f:c0:20:06:1d:9a:5d:85:a3:
c3:3c:1f:5d:e2:b7:fc:18:8f:f6:9b:b6:15:62:37:de:98:00:
5f:ca:f0:65:b8:72:8b:3f:a5:85:40:a7:b6:0f:a3:4e:24:6c:
44:0e:43:91:ae:52:5b:e2:b7:cc:6b:e8:58:53:53:39:d5:6e:
9f:44:fc:9d:a3:1e:bb:d5:c7:e1:15:67:74:2a:0f:e1:79:c0:
ca:f1:a4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:28 2026 by rpki-client