Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: p9cebZKK4AABIhQwY7lMkn1w9/V0hEj+2Yw3TU7ngOU=
Subject key identifier: C3:A3:90:D9:EB:BC:A4:25:1B:EF:6C:C8:ED:E3:A3:CC:C6:BA:57:67
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 019D27DFCB90324F00E808912C5275747BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 0665
Signing time: Thu 26 Mar 2026 02:01:11 +0000
Manifest this update: Thu 26 Mar 2026 02:01:11 +0000
Manifest next update: Fri 27 Mar 2026 02:01:11 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: 1UdYpIxHqwMM/dkpOwL/8jynY+xDaeRvd5SE21kuBqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:cb:90:32:4f:00:e8:08:91:2c:52:75:74:7b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Mar 26 02:01:11 2026 GMT
Not After : Mar 27 02:01:11 2026 GMT
Subject: CN=c3a390d9ebbca4251bef6cc8ede3a3ccc6ba5767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:c3:45:71:d5:49:47:d9:ba:ea:67:dd:ac:
0b:a9:13:c5:f9:aa:55:33:5d:41:6b:4c:28:21:8e:
10:1a:13:08:dc:6d:26:9f:08:a8:4d:fd:4c:1e:19:
81:f8:90:41:37:e1:1a:e4:75:ae:49:5e:e1:64:83:
11:1d:cf:75:a4:95:91:80:4e:53:c0:71:f9:2b:43:
d0:e6:46:08:35:c8:11:0b:0b:f6:60:f2:ed:51:d6:
2b:3f:66:98:e4:90:2c:60:34:01:a0:80:ef:38:19:
a2:60:27:c2:1a:75:1d:ab:1f:ab:a2:9d:4d:58:06:
d3:57:fa:d6:fc:40:20:bb:b7:d1:36:a8:ba:b2:07:
51:cc:1d:39:a7:7d:3f:6c:6c:d7:c3:4e:c0:41:b0:
d9:5f:ba:73:cd:d6:8b:ef:db:bf:b4:19:b6:4a:44:
a2:9f:fb:8f:6a:d4:e3:92:73:c7:ca:f9:18:60:83:
85:28:a4:0e:09:8e:c4:b7:c6:59:df:ff:a0:a9:92:
f8:46:ab:4a:ac:7a:24:45:0c:8f:e8:95:fb:1f:af:
bc:5f:9e:97:26:dd:7d:84:86:7d:96:f3:64:14:ab:
bb:c1:d8:bb:21:78:ef:9b:3b:b7:ac:db:f8:1b:f7:
24:b1:b2:cb:26:b4:39:4b:e5:76:0f:c1:3e:d7:d8:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A3:90:D9:EB:BC:A4:25:1B:EF:6C:C8:ED:E3:A3:CC:C6:BA:57:67
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:eb:0d:e0:7e:24:f0:9f:57:f1:d5:50:6e:2b:82:96:44:8e:
ce:79:12:ac:bd:27:d8:65:ba:bc:de:e4:d1:51:5c:19:6c:4c:
92:05:7c:35:41:b7:0d:2d:47:df:c4:12:c4:c2:3e:b7:23:00:
e0:64:d9:36:0d:d9:c6:c2:17:15:45:80:d6:1f:8c:7d:6d:08:
d8:6c:05:55:d6:ee:39:96:bf:5c:1d:71:70:71:ae:03:d3:7a:
2e:e4:12:7d:af:a9:83:6a:40:58:b3:c5:d6:c2:6d:4d:14:f7:
0a:56:fa:2b:b2:1c:5b:67:16:d5:c7:94:1c:db:ff:d2:1b:ea:
19:48:9a:db:f3:3a:7f:1e:5e:87:ac:3d:b2:ab:64:0f:44:7a:
f2:26:23:18:08:4d:98:ea:df:c8:d0:3b:0f:d3:d6:ce:92:3a:
de:b1:0e:3f:a5:cf:2d:92:9b:39:bf:70:e4:06:53:ad:e8:9b:
b9:07:a8:d1:f6:cb:49:cc:c4:0e:b4:b1:82:b6:d3:5a:5e:7a:
e1:ae:17:52:f8:f8:a9:30:43:ea:ad:12:4f:a6:9b:ec:28:20:
7e:7c:0c:2c:a2:b8:a3:7d:92:3f:e7:c6:67:78:c6:42:ad:48:
14:7c:dd:a3:47:76:7d:7b:ba:48:53:45:7d:89:f4:2a:c2:36:
bc:bd:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:45 2026 by rpki-client