Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
File: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft (raw, json)
Hash identifier: mTOXVahKOdskOal59Z2vbCRiEbmHjyWH4qusz8kBDLM=
Subject key identifier: 9F:A3:CE:2E:01:FA:1F:89:DF:93:38:A6:17:25:99:08:49:71:AF:F6
Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee
Certificate serial: 019D37F76C11A038F0844D8CCC0B9F8EFC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
Manifest number: 0A4E
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl (hash: uYkxQKMzps1zoQWGccoKTp6mSLA4fIKbBcr5BIAofDs=)
2: GFZcD-SiqJlzeu5I4CSkb1OREjw.roa (hash: XxnmUWyfzPzcdobUtDhD16hiBtaiKFeoObHAgaQYHmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6c:11:a0:38:f0:84:4d:8c:cc:0b:9f:8e:fc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=9fa3ce2e01fa1f89df9338a6172599084971aff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:70:5a:6f:3c:39:9c:8d:48:89:12:59:fd:
ff:ee:0e:cb:7a:4f:c9:b0:0c:ce:a0:2c:35:26:54:
6a:2b:fd:d6:33:88:25:47:9f:2e:6f:98:c4:bc:f2:
78:54:c7:67:6f:34:c5:e6:d9:78:e8:bf:0d:e3:3a:
a1:84:db:03:4a:2c:41:67:78:c1:4e:55:db:3c:c5:
6f:fc:8f:f9:4e:c7:29:36:a4:48:46:11:32:e4:0f:
35:84:98:2f:bf:a6:1d:37:70:56:d7:e7:f0:58:b5:
99:f0:fc:74:42:11:25:4b:b9:f4:b1:bd:ff:e4:3f:
63:7a:11:a9:27:03:0b:a1:52:3a:3d:1b:b3:4b:99:
39:41:40:82:bf:db:b9:49:07:d5:0a:7c:b6:31:1b:
f1:94:a6:cb:5b:6c:2a:bf:9f:71:24:69:1e:b5:25:
78:d0:8a:31:06:47:51:57:9d:7b:01:11:b2:18:35:
2f:9d:a1:e9:e1:b9:b5:21:32:ba:d9:6f:69:00:56:
d4:bd:62:83:b5:1f:04:f4:fa:17:65:95:f3:91:7d:
d5:4a:59:b8:ae:c4:6c:48:14:cc:ad:1b:99:da:bc:
e2:1b:eb:e5:21:de:d8:e4:14:8d:48:49:03:de:47:
82:8b:df:b6:f0:31:15:8a:e0:7f:e6:1c:07:00:cd:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A3:CE:2E:01:FA:1F:89:DF:93:38:A6:17:25:99:08:49:71:AF:F6
X509v3 Authority Key Identifier:
keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ca:12:40:68:7d:16:1d:b7:8d:e6:d7:19:88:d0:bf:35:6c:
59:72:db:1e:d1:88:63:29:59:1e:7c:a0:e2:72:b8:ec:2b:65:
3d:ce:30:a2:54:75:5f:03:07:37:dc:c5:a7:5a:1f:4a:59:a4:
19:bc:b5:95:9d:62:57:e4:87:f0:db:65:e2:20:64:28:b5:a5:
c7:b8:64:9e:e5:e9:2f:15:24:13:22:0b:13:b7:94:ec:9f:b5:
ff:1c:16:db:90:d1:59:7d:62:a1:cb:b4:e7:fa:ef:d5:b1:29:
74:ae:8a:42:91:42:3c:59:89:f9:86:16:86:e4:b3:39:ec:e7:
38:5f:04:c3:3b:72:3c:ef:2e:1a:6b:9e:e8:9c:8a:70:73:0c:
78:33:20:c5:0c:4b:46:2d:9b:48:b6:e4:96:5d:91:57:80:db:
ad:7c:4f:c5:3d:dc:c4:1f:7b:61:b0:ad:93:d4:13:37:06:3c:
e6:f7:ff:33:2c:ab:6b:72:6e:93:9a:15:5f:3d:2e:ec:9a:8b:
04:29:7e:da:3d:57:80:79:d1:db:ac:58:77:a2:b7:6b:de:5f:
a5:1d:6c:6a:f2:7a:05:9f:51:b0:24:b1:eb:d0:89:05:89:86:
3c:70:44:70:79:f7:2a:c8:66:73:bb:7b:b2:a1:62:37:1b:8c:
d9:b0:27:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:43 2026 by rpki-client