Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.mft
File: fAZh3JBogykjw7tyv8knJTtL2bg.mft (raw, json)
Hash identifier: g5k/kfYf9jG/T/LqUewY0fh3/Z5rCY6Mah5X4cjAXgA=
Subject key identifier: FA:CD:CF:79:26:CC:3A:0B:FD:2A:CD:FE:0C:60:6C:E5:46:0B:88:43
Authority key identifier: 7C:06:61:DC:90:68:83:29:23:C3:BB:72:BF:C9:27:25:3B:4B:D9:B8
Certificate issuer: /CN=7c0661dc9068832923c3bb72bfc927253b4bd9b8
Certificate serial: 019D2771D0390A5A783EA83C5463AE6E93C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAZh3JBogykjw7tyv8knJTtL2bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.mft
Manifest number: 01E8
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: fAZh3JBogykjw7tyv8knJTtL2bg.crl (hash: Fwnupfm0AysCMfN+9LZLFoFpnJI3E31v3PbNMWZ7Uns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAZh3JBogykjw7tyv8knJTtL2bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d0:39:0a:5a:78:3e:a8:3c:54:63:ae:6e:93:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c0661dc9068832923c3bb72bfc927253b4bd9b8
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=facdcf7926cc3a0bfd2acdfe0c606ce5460b8843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:27:9a:08:36:f0:32:d7:14:bd:85:47:95:
4a:c1:9f:46:fb:06:7f:78:1b:0b:3d:2d:f8:3d:f3:
78:64:49:2a:2b:1c:4d:83:4c:30:2a:c2:61:83:da:
ed:1b:01:59:e3:34:b2:41:5d:4c:71:51:4e:bf:f8:
e5:bf:98:35:35:d8:f2:78:29:f6:f8:dd:4e:ab:5a:
49:49:1b:b2:8f:02:83:6a:a1:f5:d6:04:ea:da:b8:
4b:33:fe:4b:50:62:ac:90:bb:51:d0:25:f4:ae:50:
40:15:8c:70:ae:76:31:fe:9c:fc:ef:b6:b4:e6:11:
69:1b:67:15:64:93:83:cc:4b:eb:f0:39:5b:95:71:
c9:65:15:23:92:49:15:61:4d:a7:c6:da:2c:67:d8:
54:55:05:db:90:e8:64:52:3d:62:59:a9:d7:04:04:
de:ac:2a:5f:bc:02:5f:b5:e2:2e:81:95:5c:cf:e8:
11:d1:ef:d7:87:55:df:ad:21:96:22:b3:ed:a5:7f:
68:b9:7f:25:79:2c:06:99:0f:ca:35:96:5e:11:96:
ad:f2:e4:a7:c9:36:4e:f6:27:34:0e:f8:da:bb:94:
cb:6e:f1:22:17:74:6e:4a:2d:aa:dc:44:e7:46:43:
fc:76:fd:d5:8f:13:62:fd:47:c9:9d:4c:64:d1:fd:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CD:CF:79:26:CC:3A:0B:FD:2A:CD:FE:0C:60:6C:E5:46:0B:88:43
X509v3 Authority Key Identifier:
keyid:7C:06:61:DC:90:68:83:29:23:C3:BB:72:BF:C9:27:25:3B:4B:D9:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAZh3JBogykjw7tyv8knJTtL2bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e9:08:28:5a:97:15:19:52:15:98:74:39:c5:98:45:72:83:
37:28:5c:8a:ec:7b:e5:ea:cc:ed:8c:e0:58:ea:50:70:77:2b:
ce:56:ee:4d:d3:ed:e0:13:e8:c5:b0:d4:c9:30:14:2c:05:28:
d3:61:52:df:18:fd:27:05:5d:59:2b:c4:ec:b0:d0:66:57:b9:
0f:c2:02:b9:5d:0f:e5:7d:b3:21:b2:65:23:eb:5f:d8:b1:cc:
36:22:40:c5:d2:99:84:27:79:04:12:e7:1a:2e:1d:f2:d0:8a:
cf:51:97:4b:39:d0:8c:7e:8d:7e:e8:4b:66:59:9b:ce:c0:af:
3c:b2:f5:ab:83:63:5d:ca:4a:19:b2:97:52:63:d1:58:25:1f:
cb:e1:ca:be:21:b4:8f:85:88:53:a6:4e:3d:c4:a7:d3:15:98:
14:c8:9d:63:03:73:fe:2a:e4:40:34:96:de:15:8d:76:01:60:
37:a7:2b:7a:b2:5a:65:0c:27:d4:62:a1:f8:91:90:09:14:30:
b2:99:96:5b:96:f2:33:8a:50:ce:3f:4e:d5:be:68:ab:d7:a5:
b0:ed:25:e1:b2:89:12:0f:6d:df:dc:09:bb:15:ca:ec:80:c4:
26:fc:57:99:3f:77:87:9e:86:e0:51:40:74:dc:3f:86:55:62:
7c:62:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:08 2026 by rpki-client