Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json)
Hash identifier: 13qo7IzkAcWpmNbhkKXjLOJ3zWhAswv1z29HS4gTcsQ=
Subject key identifier: F6:C8:9F:D7:68:2E:5B:06:78:1A:52:CC:46:2A:F4:5D:8F:69:DC:8C
Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Certificate serial: 019D2A72B8C78C372A998F19B81EF8A5A3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
Manifest number: 0C96
Signing time: Thu 26 Mar 2026 14:00:54 +0000
Manifest this update: Thu 26 Mar 2026 14:00:54 +0000
Manifest next update: Fri 27 Mar 2026 14:00:54 +0000
Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: +ybyNStRdq/USGxU0y/HaOfdOy7UIfazOHLW27DorbQ=)
2: _skMItwD6Eu91kipg5Jm13IU69k.roa (hash: v6QmCXfDrAwGVhq/iR49FnGvFa53FGwkH8sDBGvrAt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:b8:c7:8c:37:2a:99:8f:19:b8:1e:f8:a5:a3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Validity
Not Before: Mar 26 14:00:54 2026 GMT
Not After : Mar 27 14:00:54 2026 GMT
Subject: CN=f6c89fd7682e5b06781a52cc462af45d8f69dc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:70:f6:5d:65:61:2e:96:08:20:1c:d8:99:
69:f3:6b:c9:11:89:dd:15:d3:1e:5c:55:c1:7f:83:
d7:99:e5:39:51:2b:8f:91:57:8d:f5:6f:ae:b0:a7:
ea:f5:88:fb:a8:cb:28:7e:4c:44:f9:59:29:15:d2:
b4:1b:93:e3:57:eb:8f:25:ae:7c:86:2f:e2:13:d9:
bc:86:45:d6:7d:08:fb:4e:a8:8b:9e:92:23:2c:c9:
5f:98:5b:47:66:0c:2d:b0:9b:ea:61:60:18:c6:21:
a6:3b:4e:75:ed:19:c5:ab:cb:e7:ee:13:44:c1:ad:
c4:e4:6e:1d:b1:35:04:27:5d:7e:2e:f7:95:2f:fe:
9c:ea:47:fa:64:26:30:15:54:0f:b3:6d:a6:04:24:
2e:3b:5d:29:5c:a4:3b:5d:47:9d:78:ef:91:9c:c2:
64:52:c3:77:1f:0c:6c:f2:54:e1:6b:b4:dd:b6:c2:
d1:e0:03:86:bb:bd:07:b3:9f:c1:bf:6a:73:57:ef:
90:d1:03:9d:12:22:03:a8:f7:cf:6e:80:08:07:69:
23:41:b9:71:b5:f5:73:0d:56:4f:6d:4c:7f:a2:51:
3f:a8:3d:2d:88:50:b1:ef:b8:51:9a:c4:e7:98:61:
1b:9b:8e:ee:eb:0c:fb:79:65:ab:64:71:de:4b:af:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C8:9F:D7:68:2E:5B:06:78:1A:52:CC:46:2A:F4:5D:8F:69:DC:8C
X509v3 Authority Key Identifier:
keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:34:ec:e5:85:ea:31:ac:4d:4a:45:4d:a5:4c:e0:ce:72:92:
5c:d0:77:8c:67:d8:b2:7f:b6:56:04:a5:61:4a:bc:62:20:a7:
7c:27:71:d6:3f:96:7f:c8:d4:74:22:5e:07:da:4e:55:e9:5f:
df:b4:02:53:5a:d9:a4:16:6d:fa:88:39:bb:b4:3a:5d:d5:68:
8a:2b:98:52:08:48:25:f6:1d:05:d9:3e:f8:99:5a:6b:aa:06:
41:db:c6:51:e1:99:b6:5e:1a:e0:90:7a:ae:23:5b:af:af:5b:
46:f3:ab:af:95:4f:c8:71:9a:e5:41:f7:c1:77:2f:0d:49:37:
19:23:ad:dd:50:e4:d1:7e:b0:f3:98:ab:0e:e2:fd:3c:be:7f:
dd:c4:bf:9d:48:b6:25:77:97:39:b5:aa:5c:86:e1:e6:c7:8d:
4d:26:5e:66:1d:d1:d5:d1:20:41:82:cc:ec:aa:3a:bb:84:3c:
83:4b:1f:10:36:ad:6c:8e:cc:06:ec:59:6a:e1:d2:81:a2:c7:
3a:89:9e:1e:e1:1d:d6:b5:3c:63:08:3c:a2:5d:3c:88:d4:ba:
52:9e:4b:6e:6f:0f:90:96:1e:49:7f:40:04:73:39:ca:42:86:
6e:53:6a:09:84:dc:9b:6b:d0:6e:1f:42:1d:55:fe:d6:5c:02:
42:b3:54:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:33 2026 by rpki-client