Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
File: FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json)
Hash identifier: 5HIeYiDrLHffwkeA7v4dMsEDSEK0j4tmDF3rZUW4lqc=
Subject key identifier: FB:20:EF:03:7E:E1:86:9B:F0:FF:FF:01:20:82:62:43:2B:DA:31:B2
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial: 019D2AE107BCD53D720535DF340E49FA3A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
Manifest number: 11AC
Signing time: Thu 26 Mar 2026 16:01:23 +0000
Manifest this update: Thu 26 Mar 2026 16:01:23 +0000
Manifest next update: Fri 27 Mar 2026 16:01:23 +0000
Files and hashes: 1: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: vnzYa/tqLrxjUxKzkTZK4iuIHHCAfUacle/BBeBtHYw=)
2: ujvUCeMeHFa3WfWN6G6OHhHxhuI.roa (hash: pG5oPA2yhKapDXzeja3NTKTYlcJo6W9vaHYK9VMmI4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:07:bc:d5:3d:72:05:35:df:34:0e:49:fa:3a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Validity
Not Before: Mar 26 16:01:23 2026 GMT
Not After : Mar 27 16:01:23 2026 GMT
Subject: CN=fb20ef037ee1869bf0ffff01208262432bda31b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:91:7a:86:73:ec:14:2b:f7:a6:d2:f8:79:
0f:95:01:68:d9:45:1d:48:2b:c7:c0:2c:66:ed:1c:
fa:d5:96:6d:1e:45:b1:38:95:e2:cb:a2:29:a8:59:
06:64:bb:b0:51:76:5f:b8:8a:d3:1b:89:91:73:6f:
ae:51:43:62:ef:10:a6:f6:8f:62:8c:0c:63:4d:40:
35:82:67:76:30:0b:54:2d:2c:b2:44:e8:90:b6:4f:
51:28:7b:59:60:13:c8:ae:56:ad:bb:5d:51:a9:49:
f4:57:6e:63:3b:5d:8b:c4:b9:53:55:a4:ba:43:d3:
3b:cf:ec:73:f8:02:13:dd:8c:96:e4:cf:87:17:31:
30:c7:cf:e5:68:db:87:c4:d6:70:4f:66:c9:cb:8a:
c4:0d:87:13:08:c6:66:99:ba:69:ea:cc:2e:0b:e8:
32:26:57:a5:9d:22:f9:1c:6a:52:51:a3:48:a8:89:
6e:93:b1:3d:15:f4:a1:0d:ab:8c:a3:44:48:ff:47:
dc:fd:c9:d0:4d:fe:82:e7:a4:a8:29:4a:53:c0:0e:
a9:88:94:af:9a:83:4c:62:89:d2:18:79:de:4d:b3:
9b:4c:60:54:ff:31:1d:48:c7:77:e6:2a:ea:6a:79:
5d:fe:5e:0c:03:17:d6:b1:86:f7:2b:31:1c:df:a4:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:EF:03:7E:E1:86:9B:F0:FF:FF:01:20:82:62:43:2B:DA:31:B2
X509v3 Authority Key Identifier:
keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f1:7f:7d:b3:f5:7d:49:b5:7a:5e:f1:50:92:92:fb:99:e7:
64:5c:40:f0:ba:62:6f:33:8e:a8:36:82:65:b2:be:a3:5b:fb:
2e:8c:a4:35:ad:1b:9d:ec:97:5b:c0:35:7e:81:1f:8d:51:f7:
fd:1b:44:91:c1:98:41:0a:db:b8:8f:ac:27:9d:b1:95:9c:cf:
4d:46:13:00:e7:f5:06:df:2d:d1:04:18:d3:fe:f4:19:8f:62:
a1:1c:9c:cc:b8:51:89:5a:0e:1e:4d:a4:cf:28:3b:fb:e1:3d:
ca:75:3b:dd:cc:7a:dc:5a:d7:70:7b:6e:30:25:11:3a:16:fe:
96:e7:b8:a6:58:ad:e0:27:e3:a3:f4:41:c2:69:6b:82:df:4f:
88:8d:ae:dc:f2:05:25:fc:c2:e9:13:5d:91:84:c7:30:f9:a8:
c2:4b:1d:ee:2a:36:33:f0:6b:41:a4:6e:7f:5b:d6:57:97:29:
fe:98:84:a9:a0:4d:ac:cd:6f:43:e6:75:ba:48:13:62:4a:e1:
81:f7:e0:6d:8b:26:27:34:0e:53:76:13:85:e9:41:d2:96:f6:
85:60:41:79:f2:03:a7:a1:c4:57:30:05:15:04:08:af:3a:be:
9c:53:c2:bc:b3:f6:65:7f:38:5c:7f:b4:08:8b:c1:cc:12:7b:
3b:7d:d9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:46 2026 by rpki-client