Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
File: FctDavZPjQbSzBktBIAMslYoQnI.mft (raw, json)
Hash identifier: VFKvPBMDzyZOxOENrb56QB72/XSKejpTh0/MRjlaKK4=
Subject key identifier: D3:8D:6D:95:4C:8B:C1:E2:1F:E3:54:C7:7F:93:BC:DB:E2:0E:44:B4
Authority key identifier: 15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72
Certificate issuer: /CN=15cb436af64f8d06d2cc192d04800cb256284272
Certificate serial: 019D25833D1C8126226E2B22F44A89CAB764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
Manifest number: 0384
Signing time: Wed 25 Mar 2026 15:00:50 +0000
Manifest this update: Wed 25 Mar 2026 15:00:50 +0000
Manifest next update: Thu 26 Mar 2026 15:00:50 +0000
Files and hashes: 1: FctDavZPjQbSzBktBIAMslYoQnI.crl (hash: wFR7RcuB5R/K40VSnjKNeOWt3kIga+oR2U4JWpvdbEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:3d:1c:81:26:22:6e:2b:22:f4:4a:89:ca:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cb436af64f8d06d2cc192d04800cb256284272
Validity
Not Before: Mar 25 15:00:50 2026 GMT
Not After : Mar 26 15:00:50 2026 GMT
Subject: CN=d38d6d954c8bc1e21fe354c77f93bcdbe20e44b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:49:79:11:d2:ce:c8:65:68:1f:6e:36:7f:
25:dc:5f:88:1d:8d:d5:26:5e:7a:a6:f6:e7:09:d4:
fa:86:64:b5:59:52:93:77:9e:6d:61:6c:91:ef:bf:
03:21:cf:ad:c6:5a:68:48:9e:57:b2:74:ba:6f:93:
46:4f:27:af:b2:0d:67:41:28:a0:78:df:0e:f6:e5:
51:99:5e:d1:fa:4f:dc:1f:e8:94:d9:33:88:8c:b9:
19:8b:3a:9b:e8:e9:4c:6a:da:d8:85:48:dd:31:65:
1f:fe:0a:58:38:a4:32:02:86:32:be:11:23:b8:f2:
f8:78:14:22:b8:e0:de:af:85:a7:a5:a3:a7:53:be:
9f:10:ce:e8:4d:75:45:0c:95:9b:e9:80:24:7e:73:
60:69:b0:1e:01:37:a1:72:fc:f1:b1:d3:2a:39:d8:
41:b7:5e:00:ea:c9:b3:03:f9:ce:29:fb:e8:bd:87:
85:aa:7b:ea:9f:c1:16:c2:b6:07:83:18:18:00:a6:
68:c2:aa:73:a5:d2:48:43:e7:13:a8:0a:b0:be:65:
de:a3:c5:fe:84:4b:74:12:a1:88:2c:55:4b:2c:21:
c3:8b:43:ad:0d:3d:9e:a1:2f:57:a8:df:64:06:41:
81:b8:5b:92:4d:e7:ab:57:16:45:2c:20:82:cb:a1:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8D:6D:95:4C:8B:C1:E2:1F:E3:54:C7:7F:93:BC:DB:E2:0E:44:B4
X509v3 Authority Key Identifier:
keyid:15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8c:b5:6d:de:a1:af:e0:50:11:33:04:e3:91:c6:fb:39:bc:
63:fc:de:ae:6e:c2:22:72:31:20:fa:d9:bf:7e:f9:60:43:82:
c9:93:c5:eb:3f:cb:bc:09:b2:2f:ac:7c:a4:b0:4b:e9:59:21:
7d:2b:c8:5b:9c:7d:16:e6:00:9a:bd:8b:d2:bc:74:87:af:8d:
20:ee:05:ce:b4:bf:f2:b9:8b:12:3e:52:95:4e:d0:f9:b9:08:
03:2d:ec:43:03:34:b0:a1:56:9b:db:ad:06:6a:f5:8a:f1:3f:
a5:74:ac:30:26:b1:b8:96:eb:bc:d7:16:48:78:0b:13:3f:f0:
dd:a6:ac:59:26:0e:9c:60:da:5b:c8:12:bf:5c:ec:73:a5:92:
10:b0:95:82:54:e5:57:d7:a0:7e:9f:85:89:c0:77:30:fc:1c:
d9:5e:b7:25:ba:e2:16:80:ba:86:c4:d1:f2:18:e2:41:9f:22:
70:fa:ef:c4:41:10:5a:42:51:1d:74:65:bd:f1:2f:d4:8a:9e:
2b:5b:13:ab:cd:40:e0:bd:9a:d2:ef:f7:35:b2:d9:c8:90:75:
7f:97:c7:fd:55:14:2a:11:ad:b3:56:23:00:8b:ac:0d:1e:10:
af:29:53:79:23:2b:fe:7e:e0:11:f8:17:af:a4:62:cf:80:24:
34:c3:c2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:00 2026 by rpki-client