Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
File: Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json)
Hash identifier: ov/8UltG5TVSqmCXTIBIujQXItcTZrQerCFH1vE8JNY=
Subject key identifier: F2:86:0A:44:3B:5B:84:0F:11:88:E8:F7:CB:A8:A1:95:F1:F6:9A:21
Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
Certificate issuer: /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Certificate serial: 019D2704A6D55E386D4931290AF365686FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:01:49 +0000
Manifest this update: Wed 25 Mar 2026 22:01:49 +0000
Manifest next update: Thu 26 Mar 2026 22:01:49 +0000
Files and hashes: 1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: mKQOdCWqYIjrASd4kWcdgVszGPMyzNNiMp0cXe9DE8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a6:d5:5e:38:6d:49:31:29:0a:f3:65:68:6f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Validity
Not Before: Mar 25 22:01:49 2026 GMT
Not After : Mar 26 22:01:49 2026 GMT
Subject: CN=f2860a443b5b840f1188e8f7cba8a195f1f69a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:40:c9:e9:2d:e3:8c:e1:cd:fd:be:09:b5:
f5:72:ed:9c:25:ed:7d:6c:fb:72:eb:64:e2:8c:c6:
c1:39:26:eb:f5:58:b1:8d:d6:ac:a2:05:f3:5d:d4:
bb:5b:5e:0a:84:10:67:02:a3:fe:73:65:44:a9:08:
f7:77:8a:4d:84:46:dd:12:24:26:cd:c6:18:e5:5e:
e8:e8:d7:23:e8:96:99:9c:d1:7c:e4:d8:f7:82:2a:
d5:29:68:37:58:78:a4:2a:9f:07:ee:c0:20:10:1c:
00:14:e0:cc:ba:e1:18:8a:f4:4e:b0:fd:fd:11:f9:
53:24:9a:df:13:92:31:a4:42:2c:37:fe:f3:39:9f:
69:2f:f3:89:45:7c:c5:cb:71:33:70:39:c2:15:aa:
52:3c:b8:7c:39:71:ed:3b:dd:2a:48:d5:d6:ca:ea:
e3:2e:19:b7:d3:cd:73:69:44:b8:bc:8f:73:f5:bc:
b6:c9:9a:40:6a:ae:6e:ae:e3:9c:a8:69:be:a7:65:
5e:59:9b:89:98:ad:29:96:a6:4d:a2:4b:d9:69:ac:
88:26:e4:45:91:6f:ca:b7:7e:1c:1c:36:9b:49:d7:
65:ac:1c:62:38:55:06:b0:ae:30:8a:cd:b6:02:84:
c6:14:de:9c:f6:70:c9:c1:39:81:43:c1:22:71:e7:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:86:0A:44:3B:5B:84:0F:11:88:E8:F7:CB:A8:A1:95:F1:F6:9A:21
X509v3 Authority Key Identifier:
keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:17:fb:0e:f7:e8:4e:e6:5b:4d:0f:0b:d2:f6:6d:60:17:da:
dd:bc:cf:ff:ff:44:7b:aa:34:58:50:c3:8b:00:53:f9:a1:b4:
2a:a3:22:71:4d:cd:3f:ba:71:93:fc:77:5a:1b:7e:f9:01:b9:
92:5e:33:3d:17:ca:d8:5d:eb:98:82:95:ff:1c:38:47:a1:48:
10:5d:0b:a1:0f:f4:3d:8a:dd:d6:70:7b:30:8d:4d:a1:77:58:
a0:14:a0:9b:05:44:32:da:7b:52:ed:8c:3c:90:26:51:4c:5b:
be:ca:0b:ef:3f:f9:58:39:db:5c:8c:2d:74:16:ce:2a:17:1c:
15:dc:a1:00:ee:ce:d0:b8:aa:e9:46:96:a6:90:c9:09:db:72:
d8:cc:2b:08:d0:4a:7c:40:8f:36:6f:43:32:9a:38:3d:f1:72:
34:b7:0f:71:94:3a:53:9e:00:52:12:70:15:eb:db:3c:15:9c:
3c:9c:2f:3f:f0:17:5e:52:06:93:db:b2:82:82:75:2e:5e:d1:
1a:b5:e2:a1:71:c0:38:97:16:e0:61:c4:16:2b:a1:79:05:d0:
3e:03:f0:05:b9:5e:0b:7a:02:b3:ed:19:03:92:8f:08:ca:84:
33:c5:e2:53:97:ca:2c:92:e4:89:3d:fb:52:08:f4:26:e1:fc:
68:49:4f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:55 2026 by rpki-client