Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json)
Hash identifier: q3DUN9HzyasksdHeVERXqWySGTsFgzW1mTpQ3PnexuY=
Subject key identifier: 45:D4:97:2D:B9:2F:AE:3E:CE:F9:65:C9:59:C6:72:AD:4F:12:C7:D9
Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Certificate serial: 019D29609936EC1DCB4859E3E4CC2EE12E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 09:01:29 +0000
Manifest this update: Thu 26 Mar 2026 09:01:29 +0000
Manifest next update: Fri 27 Mar 2026 09:01:29 +0000
Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: 9qFkgAft7Llhb7nWFMySpjbTeeaYUAPw2d9dRr+3/I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:99:36:ec:1d:cb:48:59:e3:e4:cc:2e:e1:2e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Validity
Not Before: Mar 26 09:01:29 2026 GMT
Not After : Mar 27 09:01:29 2026 GMT
Subject: CN=45d4972db92fae3ecef965c959c672ad4f12c7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:36:2e:44:c3:2e:49:98:c5:f8:71:6b:52:
3c:ba:ec:93:8c:a1:67:45:02:07:f8:bb:55:a6:70:
f8:9a:94:9e:ae:40:9f:c6:f3:53:8b:49:60:52:67:
92:44:47:0d:c2:7e:0a:0e:2d:02:c0:b6:40:27:ba:
f2:01:fd:2f:1d:60:a1:d1:4d:eb:93:97:2d:a8:58:
78:af:87:28:1e:fe:e0:04:5b:f5:12:a5:22:6d:f1:
d2:7a:c2:02:3d:ff:00:62:0c:b1:d7:92:cf:de:49:
e2:13:f5:01:69:2c:2b:74:de:12:57:13:a7:7f:ab:
55:df:e5:8e:5c:6b:5d:7f:55:28:96:b3:da:51:92:
d8:96:ad:27:6e:e7:87:16:3a:4a:e2:ed:b1:64:06:
a0:46:46:9d:1b:bc:34:65:4c:b9:f6:e5:c2:9b:8b:
eb:30:eb:75:20:9b:50:2c:7c:d9:29:f5:83:b0:c5:
33:13:7d:08:47:3c:f3:7c:46:d8:73:d6:4b:d9:90:
2e:d9:28:7e:4e:02:67:76:01:44:d0:63:ad:c7:eb:
a2:5e:60:5e:ed:bd:5a:be:5f:28:4b:72:39:44:09:
c9:78:bc:40:e9:be:47:0b:46:8b:87:30:60:b8:41:
68:63:c6:c1:f5:9c:a2:52:80:8c:97:89:f7:65:67:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D4:97:2D:B9:2F:AE:3E:CE:F9:65:C9:59:C6:72:AD:4F:12:C7:D9
X509v3 Authority Key Identifier:
keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d1:ad:52:80:13:51:3c:2d:3b:67:0f:4b:85:62:28:bd:63:
db:42:0e:45:cb:ab:b2:0b:ea:dd:b3:90:d0:71:be:41:8f:c8:
b0:42:d4:77:7c:93:01:8f:14:aa:18:fb:19:65:02:85:b0:c6:
27:53:f7:0d:bc:e5:ff:1e:98:bd:a1:be:99:4a:ff:57:cd:15:
8e:25:49:77:a4:6b:75:f2:f9:1b:1f:66:50:4f:04:41:56:1d:
5e:e4:9c:d5:e8:cb:df:fe:20:21:49:2a:f2:d5:d7:92:a6:01:
a0:64:46:24:87:1c:52:9f:52:da:25:ba:51:70:1c:c1:1a:a4:
f9:74:30:28:f2:24:ae:57:9b:7a:58:41:4e:f6:3f:fa:bb:74:
82:45:03:38:75:73:98:39:c3:f0:14:27:fd:62:2f:a6:e7:11:
04:4b:7b:e3:5f:8e:e9:81:b3:ca:c8:f7:c1:58:e5:75:09:3b:
e0:94:e4:56:43:b0:1f:31:89:1a:5b:3a:81:dc:6b:a1:f2:7b:
ac:64:0a:99:dd:ac:04:f8:fc:51:e9:c0:9f:4c:bf:52:2e:3f:
91:0a:b9:ab:9c:e0:86:67:7d:4d:e8:fe:4e:4b:99:bb:a0:7d:
8a:3c:b3:f7:09:94:ee:69:8a:fd:aa:49:40:0b:9c:75:6f:e7:
a2:a8:65:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:00 2026 by rpki-client