Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
File: fSiu_AZob_0_snjG3lKXc-2r3p4.mft (raw, json)
Hash identifier: OGgFUahtWn3ybSHI8l2FJ1cSW1+ux23tt7PdSXaet4c=
Subject key identifier: F3:C6:61:83:DB:39:63:7F:9A:9E:58:B9:0B:27:F8:26:12:B0:10:5A
Authority key identifier: 7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E
Certificate issuer: /CN=7d28aefc06686ffd3fb278c6de529773edabde9e
Certificate serial: 019D2929A2A4F2E760F48C66BF1ADBC90310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
Manifest number: 0258
Signing time: Thu 26 Mar 2026 08:01:27 +0000
Manifest this update: Thu 26 Mar 2026 08:01:27 +0000
Manifest next update: Fri 27 Mar 2026 08:01:27 +0000
Files and hashes: 1: fSiu_AZob_0_snjG3lKXc-2r3p4.crl (hash: 2UE3MR/a+3sh3/Lc/m0zjOLJdYNQScQa7KDLRnNlBv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a2:a4:f2:e7:60:f4:8c:66:bf:1a:db:c9:03:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d28aefc06686ffd3fb278c6de529773edabde9e
Validity
Not Before: Mar 26 08:01:27 2026 GMT
Not After : Mar 27 08:01:27 2026 GMT
Subject: CN=f3c66183db39637f9a9e58b90b27f82612b0105a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:6c:6e:49:d3:cf:e8:54:13:83:24:d6:25:
73:a5:98:37:30:c2:bd:60:83:29:0b:08:85:0b:91:
81:0b:ca:49:00:55:aa:a7:82:5d:e2:9e:6a:a6:4a:
cd:5f:be:0b:2e:96:c1:4d:e3:63:9e:5f:c6:18:18:
1d:33:94:73:4b:00:95:5b:7b:e4:82:ab:91:fd:8e:
38:15:30:6a:18:d4:a7:f7:83:66:06:8e:52:cf:1d:
78:25:cb:47:43:11:9b:9f:09:0c:a9:9c:5a:ef:dd:
76:5b:04:aa:01:db:64:3d:a6:22:5c:f7:36:ee:4a:
1b:90:f9:fa:06:0f:ba:f5:a9:f9:ea:94:ce:0f:32:
1c:64:ce:cd:46:10:fa:0d:00:a7:a8:ed:1d:bb:32:
2b:11:16:80:44:60:db:d8:cf:aa:b8:2b:32:ed:eb:
b2:6f:5e:49:4f:86:ed:ec:f7:a3:9b:f5:41:11:c1:
ba:ac:2a:4c:c2:12:3f:73:e8:d5:bc:2d:da:85:26:
c0:11:a7:d3:b3:c4:87:f8:20:12:2c:fb:5d:6e:59:
0a:88:b2:ff:0a:6f:64:1b:3e:e4:88:bf:2f:42:7b:
62:f3:0b:a3:76:9d:06:25:42:3a:9a:8e:2e:2a:94:
13:93:66:ba:ac:2f:b6:d6:1f:fc:fe:63:8a:00:b9:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C6:61:83:DB:39:63:7F:9A:9E:58:B9:0B:27:F8:26:12:B0:10:5A
X509v3 Authority Key Identifier:
keyid:7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c8:f4:29:b4:d7:5b:9c:a8:28:ca:8a:af:0c:80:0e:a7:2c:
a2:8b:30:89:1a:5c:ae:75:86:61:47:08:3c:50:75:fe:40:39:
21:6f:1e:fa:fb:87:77:20:8b:94:54:56:15:3e:d5:a6:e8:9a:
21:cf:03:47:d6:07:15:2a:38:32:7f:ed:8a:c7:ee:5c:eb:12:
d0:d6:11:45:27:a7:82:35:8f:05:0e:89:d4:ac:cb:26:ed:b1:
09:cd:0e:d1:d6:2c:f6:7e:b8:cc:e2:7f:ea:9c:f6:db:9e:fb:
da:c4:31:24:51:92:fc:55:3c:fd:1a:08:17:31:95:ac:7f:45:
c5:fe:e6:ae:38:aa:63:ec:fd:90:21:79:31:ca:19:2d:e2:bf:
59:85:0d:96:55:3f:5b:25:fe:69:84:8c:6c:ce:61:73:9a:2a:
fb:b6:45:f7:e9:b3:9f:e3:90:4b:58:16:bc:8c:6b:93:20:b7:
0b:e7:02:08:33:0a:c9:be:7b:20:be:5f:2c:d7:83:1d:37:d9:
af:f8:0d:de:5c:2c:e9:18:9f:93:4d:5b:96:ab:88:f1:c4:73:
50:db:c9:3b:c8:a7:91:e1:70:86:1d:79:59:f3:0e:9e:08:6e:
68:a9:9f:69:ce:8f:fd:2f:4f:af:f2:bf:8c:7c:51:28:44:9d:
cb:9f:3d:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKaKk8udg9IxmvxrbyQMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMjhhZWZjMDY2ODZmZmQzZmIyNzhjNmRlNTI5NzczZWRh
YmRlOWUwHhcNMjYwMzI2MDgwMTI3WhcNMjYwMzI3MDgwMTI3WjAzMTEwLwYDVQQD
EyhmM2M2NjE4M2RiMzk2MzdmOWE5ZTU4YjkwYjI3ZjgyNjEyYjAxMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nRsbknTz+hUE4Mk1iVzpZg3MMK9
YIMpCwiFC5GBC8pJAFWqp4Jd4p5qpkrNX74LLpbBTeNjnl/GGBgdM5RzSwCVW3vk
gquR/Y44FTBqGNSn94NmBo5Szx14JctHQxGbnwkMqZxa7912WwSqAdtkPaYiXPc2
7kobkPn6Bg+69an56pTODzIcZM7NRhD6DQCnqO0duzIrERaARGDb2M+quCsy7euy
b15JT4bt7Pejm/VBEcG6rCpMwhI/c+jVvC3ahSbAEafTs8SH+CASLPtdblkKiLL/
Cm9kGz7kiL8vQnti8wujdp0GJUI6mo4uKpQTk2a6rC+21h/8/mOKALn3gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPGYYPbOWN/mp5YuQsn+CYSsBBaMB8GA1UdIwQY
MBaAFH0orvwGaG/9P7J4xt5Sl3Ptq96eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlNpdV9BWm9iXzBfc25qRzNsS1hjLTJyM3A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MDIzM2YtYmQ1Ni00MzE0LTlmMzgt
OTM0ZjU0MzdkNTQ4LzEvZlNpdV9BWm9iXzBfc25qRzNsS1hjLTJyM3A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85MDIzM2YtYmQ1Ni00MzE0LTlmMzgtOTM0ZjU0MzdkNTQ4
LzEvZlNpdV9BWm9iXzBfc25qRzNsS1hjLTJyM3A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcj0KbTX
W5yoKMqKrwyADqcsooswiRpcrnWGYUcIPFB1/kA5IW8e+vuHdyCLlFRWFT7Vpuia
Ic8DR9YHFSo4Mn/tisfuXOsS0NYRRSengjWPBQ6J1KzLJu2xCc0O0dYs9n64zOJ/
6pz225772sQxJFGS/FU8/RoIFzGVrH9Fxf7mrjiqY+z9kCF5McoZLeK/WYUNllU/
WyX+aYSMbM5hc5oq+7ZF9+mzn+OQS1gWvIxrkyC3C+cCCDMKyb57IL5fLNeDHTfZ
r/gN3lws6Rifk01blquI8cRzUNvJO8inkeFwhh15WfMOnghuaKmfac6P/S9Pr/K/
jHxRKESdy589Rg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:41 2026 by rpki-client