Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
File: FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json)
Hash identifier: GThZ9Pg7cjzCD1EP3606YpBcmc/j+PUV85h6riYwOS4=
Subject key identifier: DD:4C:58:99:E6:57:18:68:9F:9B:7E:53:CC:EF:9E:C1:FF:70:D0:9B
Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
Certificate issuer: /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Certificate serial: 019D28F256D4333C35F9B7CC9B6885B87F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
Manifest number: 0F0B
Signing time: Thu 26 Mar 2026 07:01:03 +0000
Manifest this update: Thu 26 Mar 2026 07:01:03 +0000
Manifest next update: Fri 27 Mar 2026 07:01:03 +0000
Files and hashes: 1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: 860sRv+Ji8SB4n23srBF4OtjEqMwQX2K34gjaI58im8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:56:d4:33:3c:35:f9:b7:cc:9b:68:85:b8:7f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Validity
Not Before: Mar 26 07:01:03 2026 GMT
Not After : Mar 27 07:01:03 2026 GMT
Subject: CN=dd4c5899e65718689f9b7e53ccef9ec1ff70d09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:43:05:9f:8e:af:6e:f2:63:53:ff:07:02:ca:
aa:54:8f:b0:bc:3f:67:e5:b4:97:79:71:80:bc:32:
ac:4b:41:1a:cb:d8:3f:d4:ef:01:42:f0:7b:df:29:
05:4d:d4:2f:84:18:82:05:ac:1c:65:7c:59:9f:c1:
58:37:24:65:66:b7:00:97:1d:cc:05:fe:f4:ce:bb:
01:65:61:3a:e6:d8:80:e3:1d:1c:48:85:07:e8:d1:
2b:0f:ae:45:95:83:10:d8:b9:54:27:2d:a4:8d:eb:
95:6e:29:16:c5:b0:ff:b3:6c:9f:2f:c0:95:4d:69:
70:0a:dc:bd:d1:09:13:b7:06:e3:97:a2:76:42:2f:
b4:d0:02:7d:d7:b2:c2:08:b7:91:5f:e4:77:9f:42:
74:5d:46:35:62:d8:1e:3a:20:b4:8e:eb:1f:ba:6c:
a9:3c:7c:1d:49:da:de:be:b3:ad:1e:9d:50:ad:63:
fe:5f:8c:22:a8:c0:89:07:00:9f:80:be:da:d1:b1:
fc:88:a9:63:ea:a1:06:f3:c9:4d:18:40:83:f4:1c:
c3:05:6b:30:86:d3:fb:5d:05:74:27:b4:1a:2a:fd:
c7:a0:06:a6:c2:94:79:40:93:41:f9:eb:07:1f:e2:
38:cb:de:13:eb:61:b5:1e:50:22:f5:b0:b5:d9:d5:
11:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4C:58:99:E6:57:18:68:9F:9B:7E:53:CC:EF:9E:C1:FF:70:D0:9B
X509v3 Authority Key Identifier:
keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:41:d3:74:94:63:74:0a:39:1a:da:8a:04:7c:90:f8:48:d8:
15:e6:1f:3e:fc:a6:1c:d1:31:a9:2d:12:12:bb:aa:84:0c:dc:
96:ec:08:a7:eb:f6:88:3d:bd:95:09:b9:02:1e:55:f3:d6:46:
c4:9b:60:31:19:80:8b:61:93:a2:48:0d:63:1a:56:7d:40:95:
a1:33:d2:af:6c:5a:0f:c8:a9:bb:7a:d6:86:71:0b:2b:1e:6d:
1a:0c:6b:80:39:55:68:58:a4:75:40:46:40:90:b0:31:b6:c7:
cd:af:9c:d1:8e:2e:b3:31:ce:45:2e:3a:2c:a2:30:1e:9c:df:
15:db:80:04:cc:91:88:d9:d6:b1:48:6a:27:55:fb:4a:62:e4:
13:2c:cf:02:7d:ac:df:6c:92:52:49:80:82:82:89:ef:25:88:
ee:32:ef:bc:bf:e2:25:66:01:39:db:63:af:aa:bf:cc:bc:46:
29:c1:e4:42:39:3f:57:59:19:0b:2b:83:b9:0d:45:3b:8f:19:
d9:2f:60:bb:fc:0b:34:74:04:98:b9:e0:70:e9:70:b5:36:52:
9d:f2:3c:06:85:03:df:0a:3e:62:3f:08:f8:5b:a7:06:f3:e9:
09:be:4a:1f:b3:c6:b0:e4:e9:10:ea:db:2f:83:4d:89:dd:fe:
04:c3:c8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:54 2026 by rpki-client