Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft
File: fxCetjA1fr3GKYEaYuYrGFenEyo.mft (raw, json)
Hash identifier: YV6ZF+h/6/PilqZX9Gya/Qf9XSPFsM/hg4KaoYJePHw=
Subject key identifier: CB:64:44:72:DF:FB:56:CC:DE:B6:27:16:D3:14:2C:C8:02:66:0A:C5
Authority key identifier: 7F:10:9E:B6:30:35:7E:BD:C6:29:81:1A:62:E6:2B:18:57:A7:13:2A
Certificate issuer: /CN=7f109eb630357ebdc629811a62e62b1857a7132a
Certificate serial: 019D33762CD068A23C71CC440F5E879EF42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxCetjA1fr3GKYEaYuYrGFenEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft
Manifest number: 0121
Signing time: Sat 28 Mar 2026 08:01:15 +0000
Manifest this update: Sat 28 Mar 2026 08:01:15 +0000
Manifest next update: Sun 29 Mar 2026 08:01:15 +0000
Files and hashes: 1: fxCetjA1fr3GKYEaYuYrGFenEyo.crl (hash: f5YulswAvmu1PsfzO32Hr1Zfn4rgUPSFWb0qMiNPB0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxCetjA1fr3GKYEaYuYrGFenEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:2c:d0:68:a2:3c:71:cc:44:0f:5e:87:9e:f4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f109eb630357ebdc629811a62e62b1857a7132a
Validity
Not Before: Mar 28 08:01:15 2026 GMT
Not After : Mar 29 08:01:15 2026 GMT
Subject: CN=cb644472dffb56ccdeb62716d3142cc802660ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:da:35:05:fe:92:1a:ab:80:56:33:9a:a9:
9c:c6:a3:d0:65:5f:c1:8a:e7:4a:a0:46:a1:18:02:
bb:0b:96:73:02:07:0e:a9:3b:44:6f:72:4d:7f:2b:
85:cb:f3:15:b4:08:0a:9c:34:36:f8:da:5a:b2:60:
52:58:1e:b0:60:05:3a:19:37:c8:92:f9:89:42:67:
82:b1:eb:b2:64:90:cb:78:ac:9d:a9:8c:61:32:7a:
b9:af:25:fb:b6:fd:55:1d:f3:46:c5:e4:66:94:69:
89:98:03:49:f0:d9:4f:2f:9e:d1:00:73:82:2a:f1:
e6:e6:ff:af:c7:8f:75:65:25:7e:3f:30:1f:48:fe:
a3:5a:a0:5d:48:65:77:7a:e6:6e:84:c8:c7:2c:f0:
98:92:dd:62:88:b6:b0:5b:d8:6b:59:bd:9f:c3:32:
c9:5f:0b:b8:46:9d:e8:99:7e:84:6c:d9:ed:79:89:
8d:14:bb:84:70:f0:d6:b3:e8:0f:8f:65:23:e4:e3:
ce:9e:63:d0:6a:b4:2e:4e:b7:40:4c:60:3b:1a:e5:
7f:aa:dd:3a:9b:de:28:1e:07:90:18:c8:66:b5:d2:
97:3e:96:a3:08:42:07:88:9a:b0:ca:33:71:a2:a2:
31:0e:0f:ad:c9:89:a9:28:e6:ac:32:bd:94:5d:a6:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:64:44:72:DF:FB:56:CC:DE:B6:27:16:D3:14:2C:C8:02:66:0A:C5
X509v3 Authority Key Identifier:
keyid:7F:10:9E:B6:30:35:7E:BD:C6:29:81:1A:62:E6:2B:18:57:A7:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxCetjA1fr3GKYEaYuYrGFenEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:af:f4:e2:6b:03:bb:59:67:d5:1a:ad:c3:5c:66:17:e8:d1:
61:6f:ea:c6:25:f3:48:95:22:e7:24:07:70:5e:6d:9f:2c:1c:
d7:03:ca:e9:b6:86:ef:cd:fb:b9:84:bf:9f:f1:f7:2b:3c:78:
d5:9f:9c:9f:7b:43:5f:5b:cb:23:12:6d:7b:4a:85:39:51:5f:
71:f0:05:d5:b1:17:24:e1:53:52:3c:ac:22:d4:f3:7d:ea:b1:
b4:7d:e8:ae:bb:37:ea:5c:cd:7e:03:2f:c2:7c:18:a4:e1:58:
36:d1:89:ce:76:d7:67:b1:65:21:43:41:c7:f1:99:7a:a6:fa:
43:fa:5b:3f:16:d7:3c:91:84:c1:ca:bd:b3:32:6e:05:a1:7f:
61:08:2c:51:ce:79:30:1a:5b:b9:d6:64:02:77:1d:f7:4b:e9:
c6:c2:1a:93:17:4f:1d:c3:2a:93:77:69:ea:2c:79:a2:3f:db:
58:95:c3:d4:50:68:00:38:a4:71:6e:2e:7d:3b:e0:ea:0c:67:
a3:2b:f7:6a:89:8c:62:6a:f1:89:66:81:76:ed:51:bb:8b:45:
94:83:ea:fd:56:dc:de:70:9b:4e:b7:5a:f7:4d:f6:66:4d:4a:
b5:af:67:2e:62:ae:dd:c6:fc:e7:43:f0:86:96:b6:77:bc:44:
b7:d8:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:19:03 2026 by rpki-client