Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
File: FCKHkIfdKSaAJjvDlOMch1lyLZA.mft (raw, json)
Hash identifier: 0fR298NeKFpQ7Pp4nOuGbZ3z7gi/FQM49uLPQoJfRHI=
Subject key identifier: C1:8E:BA:5E:AE:71:2E:8F:C4:BB:81:8B:3A:D4:E5:0B:0B:37:EA:22
Authority key identifier: 14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90
Certificate issuer: /CN=1422879087dd292680263bc394e31c8759722d90
Certificate serial: 019D2A3BD90DCE7C0F435B8880FFAA2B9584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
Manifest number: 024C
Signing time: Thu 26 Mar 2026 13:00:58 +0000
Manifest this update: Thu 26 Mar 2026 13:00:58 +0000
Manifest next update: Fri 27 Mar 2026 13:00:58 +0000
Files and hashes: 1: FCKHkIfdKSaAJjvDlOMch1lyLZA.crl (hash: gzdnc72MHW+wUxNjIJEavN4pjUN3RY8wCYJZ4mAqsFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:d9:0d:ce:7c:0f:43:5b:88:80:ff:aa:2b:95:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1422879087dd292680263bc394e31c8759722d90
Validity
Not Before: Mar 26 13:00:58 2026 GMT
Not After : Mar 27 13:00:58 2026 GMT
Subject: CN=c18eba5eae712e8fc4bb818b3ad4e50b0b37ea22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:fb:92:81:ca:9a:22:0b:93:67:10:56:c5:
41:fb:88:f8:f4:e6:61:ac:0a:7d:5e:fc:14:b9:6b:
fb:a5:a8:7b:4b:13:fe:e7:5a:bb:81:d4:72:dc:15:
7b:78:00:94:34:35:8a:1e:fb:6d:e5:fc:ff:5d:d3:
9e:10:29:1e:43:c0:b8:16:da:87:12:7a:fc:f0:55:
ca:4b:6e:da:fc:d4:7e:dd:2b:a1:25:6e:2d:3a:ce:
9c:be:5f:6b:79:43:49:86:0a:be:a2:4d:6d:09:2a:
73:a4:37:fa:7c:30:3e:77:0f:bc:04:f8:b1:ff:ea:
bf:c1:63:b9:97:73:95:9a:ad:dc:3d:a1:b0:27:72:
d1:d2:2a:03:96:3a:d1:69:cf:de:fc:87:6f:26:b6:
30:2f:92:60:98:8b:2e:ed:82:6f:67:17:c4:33:f2:
b8:49:d7:30:0a:04:8c:2f:70:98:6a:c4:34:2b:16:
35:08:8b:f4:d1:35:0f:6f:ea:d3:c7:40:fc:48:53:
fc:0a:be:12:1e:fe:39:30:91:8d:45:7f:2a:ae:99:
d5:98:a8:9d:b2:ed:51:ea:e4:eb:05:b8:36:6f:33:
af:0e:be:31:e9:e4:39:88:f3:23:b5:1d:65:c2:50:
69:8f:5c:78:31:b1:94:87:e4:97:74:2f:5a:0f:ff:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8E:BA:5E:AE:71:2E:8F:C4:BB:81:8B:3A:D4:E5:0B:0B:37:EA:22
X509v3 Authority Key Identifier:
keyid:14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:01:eb:4f:76:25:1f:a5:1a:fa:5d:fc:d1:a8:ab:71:c9:64:
e5:e6:40:95:c3:c0:c1:d5:5d:72:13:e0:fb:9d:19:51:3d:8b:
c9:a1:73:8d:d0:8a:5a:0b:20:1a:a8:23:46:3c:2b:49:12:05:
07:09:2b:63:d8:4a:4c:48:89:59:1e:ec:da:30:a0:ca:2e:d5:
54:9f:e9:bd:77:c9:6b:9c:46:26:7f:a2:f7:fe:c8:8d:98:a3:
c6:91:90:2f:8d:ae:dc:56:b7:bc:d5:1b:92:65:a1:b0:05:63:
49:c5:63:52:01:07:d9:1f:5f:82:a5:09:27:0b:51:51:fa:1a:
66:31:3a:f4:b6:ea:f1:ef:3b:c8:d9:56:ca:38:29:07:00:ef:
97:c7:fe:15:e5:09:32:be:67:71:49:69:e6:46:b4:e9:4a:ad:
a9:f0:26:cb:ab:b1:73:bb:69:68:f4:92:53:36:21:e0:f7:72:
96:43:1a:6c:d4:4c:4d:81:f4:41:5e:6f:03:65:6f:6d:2e:70:
2a:f3:0b:d6:98:d0:78:b7:98:8b:7f:31:5d:a1:bb:e0:6c:87:
69:62:a8:54:aa:30:f5:a6:79:d4:21:1a:9a:96:5e:25:33:be:
5c:d4:ef:cf:54:ed:87:21:4d:ab:98:42:dc:2b:93:f5:8b:9c:
61:64:4f:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO9kNznwPQ1uIgP+qK5WEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MjI4NzkwODdkZDI5MjY4MDI2M2JjMzk0ZTMxYzg3NTk3
MjJkOTAwHhcNMjYwMzI2MTMwMDU4WhcNMjYwMzI3MTMwMDU4WjAzMTEwLwYDVQQD
EyhjMThlYmE1ZWFlNzEyZThmYzRiYjgxOGIzYWQ0ZTUwYjBiMzdlYTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgH7koHKmiILk2cQVsVB+4j49OZh
rAp9XvwUuWv7pah7SxP+51q7gdRy3BV7eACUNDWKHvtt5fz/XdOeECkeQ8C4FtqH
Enr88FXKS27a/NR+3SuhJW4tOs6cvl9reUNJhgq+ok1tCSpzpDf6fDA+dw+8BPix
/+q/wWO5l3OVmq3cPaGwJ3LR0ioDljrRac/e/IdvJrYwL5JgmIsu7YJvZxfEM/K4
SdcwCgSML3CYasQ0KxY1CIv00TUPb+rTx0D8SFP8Cr4SHv45MJGNRX8qrpnVmKid
su1R6uTrBbg2bzOvDr4x6eQ5iPMjtR1lwlBpj1x4MbGUh+SXdC9aD/9PsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGOul6ucS6PxLuBizrU5QsLN+oiMB8GA1UdIwQY
MBaAFBQih5CH3SkmgCY7w5TjHIdZci2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkNLSGtJZmRLU2FBSmp2RGxPTWNoMWx5TFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hMjc3NmYtYWJkMC00NGRiLWFlOWUt
NzU1M2EwMmM0Mjk3LzEvRkNLSGtJZmRLU2FBSmp2RGxPTWNoMWx5TFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9hMjc3NmYtYWJkMC00NGRiLWFlOWUtNzU1M2EwMmM0Mjk3
LzEvRkNLSGtJZmRLU2FBSmp2RGxPTWNoMWx5TFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgHrT3Yl
H6Ua+l380aircclk5eZAlcPAwdVdchPg+50ZUT2LyaFzjdCKWgsgGqgjRjwrSRIF
BwkrY9hKTEiJWR7s2jCgyi7VVJ/pvXfJa5xGJn+i9/7IjZijxpGQL42u3Fa3vNUb
kmWhsAVjScVjUgEH2R9fgqUJJwtRUfoaZjE69Lbq8e87yNlWyjgpBwDvl8f+FeUJ
Mr5ncUlp5ka06UqtqfAmy6uxc7tpaPSSUzYh4PdylkMabNRMTYH0QV5vA2VvbS5w
KvML1pjQeLeYi38xXaG74GyHaWKoVKow9aZ51CEampZeJTO+XNTvz1TthyFNq5hC
3CuT9YucYWRPeg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:19 2026 by rpki-client