Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
File: FpedN9oBar0TJ5JwulXWs8KWBXg.mft (raw, json)
Hash identifier: YnDJwLrm3ELZ9RJ4tFj5bIR49gmhl+ybCavnpNbWmF0=
Subject key identifier: A4:98:BB:78:6D:89:29:42:37:A8:D1:C5:58:0F:84:BA:D7:8C:21:39
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 019CE636954D40F492D892276544A0E345C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
Manifest number: 1740
Signing time: Fri 13 Mar 2026 08:01:02 +0000
Manifest this update: Fri 13 Mar 2026 08:01:02 +0000
Manifest next update: Sat 14 Mar 2026 08:01:02 +0000
Files and hashes: 1: FpedN9oBar0TJ5JwulXWs8KWBXg.crl (hash: YOMxV/uII5FPz0mcfCQYuK4oRNL0KAiaMwYe1JTMN+s=)
2: K6XxnHOU3SoW8jXXcTe-WuQHvpk.roa (hash: v1gwKHJC5TEruomxCVoo3M10PFXjPvm/5QWXyyAdr3M=)
3: q0uTD1TYBfOSkr_Hq6YnaOjJPT4.roa (hash: mUJ6CfqZZS7USPUfxMuvlTw60JrCy/sd8I2pytEOK9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:95:4d:40:f4:92:d8:92:27:65:44:a0:e3:45:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Mar 13 08:01:02 2026 GMT
Not After : Mar 14 08:01:02 2026 GMT
Subject: CN=a498bb786d89294237a8d1c5580f84bad78c2139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:63:db:92:98:1b:ec:2d:0b:f5:59:bf:e9:
a4:11:31:e4:c2:bc:79:46:c5:5d:19:dd:9c:ba:a2:
b3:b2:7f:27:d6:b4:01:9d:1b:5e:ec:1e:fa:84:d3:
11:ab:06:c0:5e:25:f2:e7:d8:9d:cd:ee:6a:84:1f:
d4:f4:fd:28:4a:96:73:35:62:f6:f3:b7:d0:e4:f2:
77:e2:8e:1b:30:6c:60:bb:0e:44:6a:3b:97:d1:56:
2d:c4:85:0d:25:f5:fe:ae:d8:e4:97:78:a4:6d:e7:
23:40:03:d6:07:79:32:3e:16:72:ce:df:01:4d:30:
22:c5:71:ee:7c:cb:02:5f:d0:ad:f2:85:9d:b3:97:
92:2d:5b:a2:11:9a:f2:c0:80:0b:74:68:e2:d4:bf:
ea:a3:63:aa:9b:be:13:5f:0f:31:42:64:97:8e:41:
b4:f5:85:95:06:14:07:bd:9d:fe:fa:3f:6b:2c:f4:
a5:0f:d9:6a:10:a6:58:b9:da:de:cb:06:9f:16:d1:
86:04:17:77:8f:d3:a7:e7:f3:ed:a0:f0:e0:c2:37:
58:54:e0:06:21:f9:91:11:25:3c:de:91:0a:dd:a9:
da:72:8b:89:30:36:16:29:ca:dc:64:da:46:19:9d:
46:40:ee:3b:23:a1:da:cc:88:ab:4d:1b:cd:d1:27:
48:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:BB:78:6D:89:29:42:37:A8:D1:C5:58:0F:84:BA:D7:8C:21:39
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:0b:b1:e0:ae:16:e1:f5:31:b2:44:91:40:32:1b:1d:63:21:
2f:d5:40:65:ff:e1:4a:94:6f:c7:d4:68:da:b8:de:2b:d5:d2:
f2:2b:8e:38:74:4a:d9:fc:e3:28:ec:ca:45:42:0a:9b:b2:bc:
cb:46:7b:0a:10:c1:63:eb:45:d5:bd:c2:44:36:68:ca:52:c8:
e3:89:95:60:4b:39:01:83:e7:22:9e:2f:be:90:ec:7c:9e:cc:
72:8d:70:dd:ac:85:e0:3f:c1:6c:67:80:b5:92:2e:d4:2c:7c:
74:cc:1f:eb:f0:ae:43:84:e1:29:14:dc:c0:a5:90:6d:57:2a:
f3:61:0f:0e:07:5f:80:90:0a:51:04:00:70:70:73:8d:33:a8:
9f:00:29:05:ae:21:39:65:e9:cd:36:33:c8:88:39:52:be:7a:
72:35:46:bc:58:4c:9f:6c:23:49:ed:44:cb:52:68:e8:ff:5b:
f3:7c:32:a5:77:c2:38:41:56:dd:18:f1:68:48:90:ca:96:9f:
dc:79:b7:96:45:f1:e6:35:1c:35:76:bf:9a:be:49:bf:f3:3f:
5b:cb:db:50:d7:0a:c0:26:f6:b1:dd:8c:ef:8d:ca:4f:13:db:
44:f3:cf:4a:fa:6e:d4:22:49:01:a2:e0:7c:e5:86:8b:77:95:
a1:6e:c4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:40:03 2026 by rpki-client