Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
File: FnhcBIzz1bIYafSUNPLTu0fUO6E.mft (raw, json)
Hash identifier: ovvjOf95+A9XSgpoZCGpncrk/pobwteYj6GXOqFrB1Q=
Subject key identifier: 11:D1:95:D1:50:E6:8A:C1:92:36:90:3D:30:B7:1F:73:6F:B7:18:90
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Certificate issuer: /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial: 019D38D36204203324CBAE7C70B1E71FD198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
Manifest number: 1790
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: FnhcBIzz1bIYafSUNPLTu0fUO6E.crl (hash: gOiXyzqP6mVAE6aNZ8QEqZ6i/JXn9iRlyMjT01EhX1Y=)
2: sWpGqOrvUhu_YeE103lUKrGogwY.roa (hash: G53bT0iyZh0zmMZw59Fi11N/QHTX1EKTX4fPsCxbvVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:62:04:20:33:24:cb:ae:7c:70:b1:e7:1f:d1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=11d195d150e68ac19236903d30b71f736fb71890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:dc:34:16:89:1d:44:dc:e8:7c:de:c0:c5:
8a:c8:57:6c:07:5a:d9:ee:c7:7d:5d:20:93:14:5b:
4d:90:3a:6f:a2:8a:c7:a0:3c:e4:ce:28:fd:bb:a0:
45:a2:02:a9:21:31:d1:db:7b:98:77:6c:ec:e7:f3:
14:89:37:b1:cc:a6:31:76:45:6d:cc:48:46:d0:ce:
3e:d8:c9:63:fb:63:e5:43:e2:86:f8:a3:af:9a:17:
29:fa:ea:45:42:4d:76:36:83:a7:55:e8:9f:17:9f:
f3:eb:5e:81:46:b8:02:30:b8:96:54:4c:62:a8:d8:
d2:b4:54:26:6d:84:7f:c6:da:96:a3:6a:81:da:30:
1e:7e:b6:ca:33:bd:26:5d:07:43:0c:f4:94:73:92:
26:28:ad:f4:f6:47:8d:8f:e8:e8:98:09:6c:c1:0c:
f0:58:fe:da:4b:3a:67:bc:da:fe:1b:58:0d:3b:13:
3a:6e:3a:ee:bd:91:ec:04:27:53:9c:28:e9:8e:6f:
b8:36:85:68:33:bc:89:6a:83:07:bb:7b:55:40:29:
bc:f6:55:0c:fc:55:a3:67:35:88:9f:be:5f:a9:4e:
3c:20:90:ea:39:94:fa:b7:08:bf:0e:64:ac:e9:bc:
3c:2f:cb:de:1b:cc:15:18:41:cf:b6:f9:dd:38:41:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D1:95:D1:50:E6:8A:C1:92:36:90:3D:30:B7:1F:73:6F:B7:18:90
X509v3 Authority Key Identifier:
keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f3:d8:47:be:d6:83:99:85:ca:2a:7b:4a:bb:e0:c4:04:01:
2f:94:e3:02:5c:e5:18:38:a2:ab:48:fe:4f:f8:5d:e5:67:a2:
0b:99:ac:e5:2e:cf:e3:65:47:3d:2f:f2:0f:33:79:d5:a8:2a:
2d:e3:b9:2d:6c:54:5f:61:25:f8:eb:11:5d:70:0c:e1:44:cf:
ea:a1:67:34:d3:b1:2f:33:cb:09:12:f6:a5:cd:56:e0:4c:c2:
e4:da:a7:14:19:ee:36:11:c2:45:80:7d:9b:80:0d:42:e1:d9:
62:4d:bf:f8:84:d0:81:76:1e:49:94:dd:a6:a8:72:56:e3:6d:
95:bd:16:bf:aa:9d:db:b5:b5:74:96:81:d0:e7:df:db:f0:1c:
a8:36:9b:62:76:6e:ae:c6:07:2c:8f:69:2f:dd:ae:d4:99:24:
d3:4c:1c:49:42:34:0f:88:9a:ab:d2:e3:62:55:5c:a5:71:d5:
d6:02:89:a2:f1:b9:dc:77:78:b2:fc:f9:91:ff:9c:8c:24:65:
87:46:d0:ab:d0:a2:22:02:6b:b7:40:67:c8:7e:76:cf:43:1f:
6a:7b:da:37:b5:ab:73:42:2a:1f:ca:1d:8e:b7:13:98:ef:a9:
34:d9:5e:72:00:f7:d3:b0:ce:16:a8:5c:39:44:1e:7a:46:6c:
ea:4e:4b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:41 2026 by rpki-client