Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier: CFP+SG+liJKS2mQYr96th2TInkaC5Od39yA1ngUPCaw=
Subject key identifier: 1C:24:1D:E7:2D:F0:6C:16:62:D5:E4:18:C2:06:66:1D:7A:78:32:40
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial: 019D2704019F452EB89C04D5B5BA0F3A4873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number: 098D
Signing time: Wed 25 Mar 2026 22:01:06 +0000
Manifest this update: Wed 25 Mar 2026 22:01:06 +0000
Manifest next update: Thu 26 Mar 2026 22:01:06 +0000
Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: 09v3sFLFgIm4pNoh7Z7+1h5Y1cBb9Ut12FnMKsYiCcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:01:9f:45:2e:b8:9c:04:d5:b5:ba:0f:3a:48:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Validity
Not Before: Mar 25 22:01:06 2026 GMT
Not After : Mar 26 22:01:06 2026 GMT
Subject: CN=1c241de72df06c1662d5e418c206661d7a783240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:04:cb:9b:33:67:17:83:b6:c2:4f:69:f2:
16:3d:e9:f4:02:93:b1:c3:da:df:b7:43:1a:c0:28:
02:62:17:4d:60:93:d3:02:38:65:cf:a8:18:b6:fe:
ba:9b:7a:7b:b0:23:8c:8f:66:f9:5e:e6:67:65:e0:
70:cb:b2:6f:3b:07:14:89:ab:b8:76:cc:d0:e4:d7:
a7:dd:e3:6e:62:df:78:0e:82:b5:df:41:78:26:30:
f2:42:af:19:c6:20:24:15:13:bc:a3:b4:85:f3:2e:
ec:f7:1f:43:28:b9:75:b4:fd:61:8d:ad:72:3c:3c:
0b:13:ca:5c:1e:67:a6:74:59:90:3b:bd:9e:9b:51:
2b:a4:d7:3b:d3:23:c9:ae:cf:ab:9a:51:55:56:62:
07:c1:72:ff:2a:c6:54:27:12:40:25:cc:6d:c1:d2:
06:e7:53:55:df:47:31:02:0f:26:01:65:32:3d:d3:
49:39:60:ad:55:a6:2f:ca:a4:de:f4:bd:de:6d:59:
24:91:92:79:f6:33:61:5b:a7:89:d1:5a:a5:e6:1c:
d3:b4:22:1d:f5:4d:7f:df:e0:00:b2:65:43:8d:16:
52:0a:70:64:03:6d:24:74:ed:c4:c8:56:fd:ea:e2:
5d:61:c8:a3:e9:bd:b5:8f:51:2f:16:1f:33:20:85:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:24:1D:E7:2D:F0:6C:16:62:D5:E4:18:C2:06:66:1D:7A:78:32:40
X509v3 Authority Key Identifier:
keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e6:73:f1:d0:00:3f:46:1a:1d:87:0f:ee:e2:ed:54:90:50:
ef:b3:4d:de:50:3f:d1:0f:af:84:5a:b6:2c:1e:f8:06:d2:c3:
73:f5:fb:25:3b:6e:ea:b2:45:e2:ac:4b:cc:4e:4c:5b:04:4e:
4e:02:c0:0f:70:ec:b3:49:8b:b8:fa:cf:b9:90:9f:b8:4b:b9:
41:c0:93:56:f2:eb:96:8a:db:b7:df:ff:3f:8c:af:ff:af:db:
3c:01:ea:ee:0c:7b:3e:8b:80:84:cb:66:3d:a3:cf:71:99:14:
ef:9a:f7:12:f9:6f:aa:a0:9a:0c:7a:f6:bf:37:fb:1f:b0:ef:
9c:bc:ee:46:71:ff:4a:84:db:9c:21:ab:01:7f:d5:c0:f1:af:
92:aa:55:fe:60:9f:0d:b3:ef:0d:d0:ca:f0:7a:3d:bc:dc:d3:
7e:61:df:26:07:1d:5f:a9:b0:21:5d:09:44:d1:75:6d:90:7c:
08:a2:d9:5e:c5:1c:03:4e:ce:a8:ab:ea:0f:6f:e6:f5:ff:fb:
f8:c4:34:8d:d1:be:fb:f1:d7:02:c9:7c:43:9f:e6:6c:55:f7:
2c:ce:f0:81:03:b7:cf:d0:a4:eb:7e:f0:46:9a:8b:aa:43:1e:
07:f6:01:9a:85:6b:a6:97:2d:88:6c:51:3a:64:10:5b:b8:18:
bb:66:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:08 2026 by rpki-client