Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: mN4g/1nmfxccXEf7q/DBQWMZVAemAQq3yiTEemw/3Xs=
Subject key identifier: D9:C2:1F:81:E9:54:FA:A6:CF:8F:B7:29:BD:36:5F:BF:90:82:C1:A1
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 019D28F29641E8145F4F6AE03FF4089758FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 0B60
Signing time: Thu 26 Mar 2026 07:01:19 +0000
Manifest this update: Thu 26 Mar 2026 07:01:19 +0000
Manifest next update: Fri 27 Mar 2026 07:01:19 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: Z4t2aK3aFgw3l+tJylvuOKnloijZg81XaKQo4KWUfE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:96:41:e8:14:5f:4f:6a:e0:3f:f4:08:97:58:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Mar 26 07:01:19 2026 GMT
Not After : Mar 27 07:01:19 2026 GMT
Subject: CN=d9c21f81e954faa6cf8fb729bd365fbf9082c1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:5b:a8:5e:48:03:02:26:75:de:50:90:41:
10:9d:98:72:cc:4e:88:2d:a9:fa:d6:4b:90:d3:eb:
ba:03:d5:0b:7c:03:5e:18:be:2c:12:eb:b2:2b:50:
60:08:ee:dc:7d:9a:ea:ce:64:45:ce:a0:5e:e0:8f:
c6:f9:f9:65:84:ce:9e:54:e6:c8:60:df:bf:28:a4:
49:23:4b:d2:37:7e:8b:cd:a2:81:cd:85:c6:32:3e:
d0:d3:d0:ce:da:c5:95:c1:f3:a7:a1:28:bf:26:4f:
06:08:55:03:4b:e4:98:6e:55:cd:4d:05:2b:0b:f7:
25:28:32:e7:be:9b:78:d5:e9:80:0c:04:b3:ff:8a:
3b:0e:ac:51:f6:15:3a:7a:e1:4f:de:70:f0:9f:e2:
58:55:4d:08:a9:f3:ac:b7:fa:71:0b:63:0e:08:a1:
01:e5:3b:f8:73:a7:d0:ea:41:7f:b3:86:c1:cf:ba:
85:da:f9:3e:50:dd:d5:11:11:0a:19:71:01:bd:f3:
a1:97:4f:d0:eb:0c:e7:84:62:9e:19:c6:00:dd:a5:
51:7a:4d:df:a4:b5:bc:5d:75:95:b2:dd:03:b1:f4:
eb:ee:6e:8b:02:47:cb:a9:67:e6:e9:e7:31:7d:52:
75:47:e7:9a:43:73:95:85:f8:2f:8b:44:15:ec:52:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C2:1F:81:E9:54:FA:A6:CF:8F:B7:29:BD:36:5F:BF:90:82:C1:A1
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4e:71:62:c3:cc:2e:4a:a0:ff:41:2a:a5:7a:2e:70:79:79:
50:98:a5:c1:b7:6d:64:fa:c0:a5:ea:c3:2f:b3:a3:55:a9:46:
e4:f7:db:0a:3a:ba:8f:6d:04:79:5d:eb:ce:1a:14:0d:fb:b5:
3e:31:78:1e:06:71:e3:3a:c8:6f:d6:ea:72:86:ac:91:57:fa:
89:5c:6b:0f:c3:28:66:0d:be:f7:96:ab:ab:dd:7b:24:02:45:
d7:a0:78:14:40:a8:e0:bf:0b:73:db:bd:71:ad:f8:72:7d:2b:
4f:b8:f3:9c:82:54:ad:b9:e1:a1:cb:1b:e7:b0:f5:28:7d:d3:
33:ac:2a:77:8e:4a:4d:df:08:96:e0:07:d3:76:63:0c:a6:c0:
26:f6:2f:9c:31:f4:67:3f:92:50:66:7b:7a:d0:cc:ff:82:56:
f3:80:f0:cb:0a:a8:b2:4d:2e:ec:3b:9d:f0:45:e8:2b:64:db:
aa:15:72:03:4f:5d:9b:6f:3b:a2:53:a3:dd:c1:91:a2:02:35:
9e:dd:e5:f4:59:57:06:0c:1c:93:1f:b0:e0:ea:77:f4:ac:3d:
5c:6f:5b:dc:77:10:0d:21:46:40:f1:8f:61:95:85:95:6d:d4:
88:28:b7:73:df:96:ca:02:5d:0d:36:e9:88:73:bd:db:6c:43:
c7:c5:fb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:53 2026 by rpki-client