Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: zA7iRVkufF+OxClPyI7/8vJ5EjfOZxI+iWMBR/owKPM=
Subject key identifier: 6A:5B:E2:0A:7C:E2:DF:B3:DA:60:6A:67:4C:24:29:BF:F4:7F:AA:44
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 019D2772717007FA29C74EFC205F927B0B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 1870
Signing time: Thu 26 Mar 2026 00:01:44 +0000
Manifest this update: Thu 26 Mar 2026 00:01:44 +0000
Manifest next update: Fri 27 Mar 2026 00:01:44 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: JPnOzFq7fAn4H0Sq5/wDPk++eFRclYqZc0L2+SBLdyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:71:70:07:fa:29:c7:4e:fc:20:5f:92:7b:0b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Mar 26 00:01:44 2026 GMT
Not After : Mar 27 00:01:44 2026 GMT
Subject: CN=6a5be20a7ce2dfb3da606a674c2429bff47faa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:52:9c:d0:ad:56:a0:4b:83:dd:66:64:d8:
24:47:52:be:65:b5:d4:0a:4d:e0:df:1c:e2:48:29:
d4:dc:91:da:8f:9d:3e:49:f2:1e:71:e4:36:49:75:
c3:e0:94:5d:06:96:c8:2c:6d:ca:8e:95:e8:ef:60:
22:5f:6d:00:d7:93:1c:bb:10:28:fa:66:50:ae:42:
a5:66:44:46:0c:53:a9:c5:0b:61:5d:b1:f3:03:95:
2c:44:e5:ae:ed:6b:9e:04:41:c2:a4:ed:44:cc:a2:
56:db:3b:68:4f:71:82:1a:84:af:62:9e:ba:21:61:
03:1b:86:e3:7c:eb:34:5d:4f:9a:8a:d8:2a:1d:a9:
5e:d0:ca:8e:e2:99:bc:63:93:1e:15:1b:2e:a7:30:
de:4f:14:28:f1:d1:7b:92:39:d8:13:d1:5d:f8:9f:
d4:be:bb:a7:8e:76:c1:0b:ff:28:f4:e9:22:65:53:
f2:b5:47:43:f7:74:fb:42:2d:25:30:52:87:6c:cd:
66:89:c2:43:2f:83:5c:90:c9:96:1e:6e:0d:d1:9b:
51:31:52:81:fb:f8:34:51:ef:fb:e4:21:d8:bd:9d:
f7:ce:e7:99:31:86:0c:66:c2:8f:a4:ba:61:91:d6:
6e:d2:de:70:8f:eb:4c:b1:cf:df:30:4a:23:f2:de:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5B:E2:0A:7C:E2:DF:B3:DA:60:6A:67:4C:24:29:BF:F4:7F:AA:44
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f6:ed:37:84:2f:ff:1c:67:7f:27:5d:c4:6f:dc:e4:bc:e7:
72:39:c8:c2:11:44:be:e9:7b:3a:d8:07:6b:d6:77:46:0b:87:
b5:28:41:25:cd:d9:58:ba:dc:4c:fe:1a:64:4f:aa:c5:09:f8:
09:16:4c:da:42:7f:e0:97:4d:6d:1f:10:96:3a:fb:0a:1b:f8:
61:11:96:13:97:5c:7c:de:f1:fc:8e:45:59:82:14:62:71:3e:
b3:8e:d3:5e:78:00:f4:e3:22:a9:de:ae:c1:d4:e5:ba:41:db:
10:72:65:3e:ed:5a:6f:03:57:20:8c:df:0f:14:f8:94:d9:8d:
02:85:a3:a4:18:09:27:c0:d8:6d:ff:12:99:61:6c:5c:7f:8b:
07:e7:d9:56:98:d6:b8:af:27:c8:dd:c6:5a:5f:ea:21:ca:7e:
8e:23:c1:e9:16:1a:f7:f0:02:ef:8e:f7:60:9e:a2:d4:29:0f:
90:63:ba:1b:d6:b2:19:0e:dd:d8:ac:45:a8:32:bd:7e:5e:89:
0f:62:49:11:98:3f:cd:a5:f5:38:6d:8d:ed:b0:ed:5b:36:f2:
2d:41:83:b1:d5:d9:b9:8a:0c:43:88:0b:80:fd:96:75:6b:9a:
b7:16:33:e2:2d:59:63:3a:d2:72:eb:6f:89:c6:54:e4:0c:30:
f7:73:ed:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:13:01 2026 by rpki-client