Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
File: fkL5qpHFODs-cnVy67GVWRqHYM4.mft (raw, json)
Hash identifier: FDCa/vXYy8B+VWZsmuKy1BN4ozhEbV894x+GOmEeY90=
Subject key identifier: 3C:66:A6:F4:32:9E:30:F1:62:DC:4E:34:4E:7F:C0:3E:F1:25:ED:A5
Authority key identifier: 7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
Certificate issuer: /CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Certificate serial: 019D2704987348EC1278EF0B7709F8DDEC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
Manifest number: 091D
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: fkL5qpHFODs-cnVy67GVWRqHYM4.crl (hash: AU2JrPir63Kz/ZkuJyCho/RcPqN3hFTfxoSuYR/36Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:98:73:48:ec:12:78:ef:0b:77:09:f8:dd:ec:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=3c66a6f4329e30f162dc4e344e7fc03ef125eda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:eb:48:30:33:51:bd:f0:f5:64:f8:3b:bf:
1b:91:a8:c2:6e:e9:62:3b:8e:22:03:f7:1a:42:ed:
dc:4e:eb:ed:b2:6f:ca:f2:df:33:fe:12:37:27:17:
51:08:ca:9b:48:60:1d:d7:a6:1c:44:35:ad:0c:59:
77:14:47:63:ba:07:12:42:40:0b:57:d2:2c:96:0c:
f9:6a:4a:7b:7e:0a:9f:d4:53:79:fb:c0:a7:92:6a:
60:93:5e:1f:4c:7c:14:aa:6e:5f:cf:47:d1:52:0d:
1d:aa:2a:0d:15:ac:c7:23:50:05:59:01:3e:01:31:
05:01:ca:6f:95:83:f3:4b:8b:95:8d:53:1e:aa:d3:
a3:d5:07:ff:70:43:cf:0f:4a:14:6e:6b:75:a1:0a:
28:7e:dc:52:9e:eb:16:aa:c2:fa:3e:f2:e1:90:cb:
4d:0a:fc:aa:25:64:ee:9d:7f:1b:1f:f0:57:96:5f:
db:48:b7:af:34:f3:19:04:44:f7:f7:45:16:69:a3:
6d:8c:22:cc:27:d7:55:85:6f:12:4b:97:c5:73:1a:
8e:63:6c:e1:48:91:63:fd:fc:c6:4d:ed:58:39:1c:
11:32:d0:0d:0b:ba:0f:9d:b3:08:70:71:d4:df:38:
38:0f:27:77:f7:82:c3:f2:c6:00:01:e1:4e:b7:00:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:66:A6:F4:32:9E:30:F1:62:DC:4E:34:4E:7F:C0:3E:F1:25:ED:A5
X509v3 Authority Key Identifier:
keyid:7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c8:62:07:dc:a5:43:3d:b3:73:a7:42:bc:d3:bc:3c:a2:4f:
75:b3:05:eb:39:0e:08:f6:ca:94:ca:93:ac:28:ac:5e:16:31:
61:26:87:f8:4b:63:5a:49:08:b0:e1:2b:d6:c7:30:fe:eb:5d:
4a:7c:c0:3e:1a:d9:8d:b1:a2:19:b2:cc:8c:9f:0b:14:40:05:
c0:af:ba:99:60:4e:c1:38:c9:a1:73:56:a9:38:21:e0:96:44:
02:d5:68:33:51:54:56:05:6f:6a:a3:cb:07:1d:23:47:39:19:
35:59:11:b6:6d:c9:5a:d5:1a:af:da:39:94:68:17:a0:be:b9:
4d:1f:bb:55:ab:35:2e:4e:7b:5e:7e:10:81:64:d1:2a:54:6a:
b5:8d:88:aa:34:8e:78:ad:fe:ca:b7:ff:58:f1:c1:dd:82:6b:
75:23:9e:ad:e9:d5:70:1b:8d:2a:f6:76:b1:db:59:69:f3:86:
b8:5d:82:e3:00:54:3d:02:1a:bc:09:80:0e:79:e1:c9:91:19:
b9:70:3f:b4:9e:30:d5:7c:a4:b4:2c:61:49:5f:6b:4e:82:86:
7b:ff:df:45:8e:7e:20:a9:a5:45:eb:27:21:1d:14:d4:d3:ba:
f4:99:46:54:ca:f4:cc:28:13:d6:52:cd:c0:a7:15:ac:80:8c:
04:0f:ce:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:46 2026 by rpki-client