Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft
File: Fo_q-FM_haWBITrWyAHjn0pCC1k.mft (raw, json)
Hash identifier: q1+NnDg/RI0ry/nvf0h7xar2IBNv2uMcRJ5t2NYBMDs=
Subject key identifier: 8A:50:FC:3A:D3:A3:54:10:C2:05:97:FD:E8:40:C8:11:7C:68:23:3C
Authority key identifier: 16:8F:EA:F8:53:3F:85:A5:81:21:3A:D6:C8:01:E3:9F:4A:42:0B:59
Certificate issuer: /CN=168feaf8533f85a581213ad6c801e39f4a420b59
Certificate serial: 019D265F27CF94A11ACC8CB34D3ED15CBC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fo_q-FM_haWBITrWyAHjn0pCC1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft
Manifest number: 0104
Signing time: Wed 25 Mar 2026 19:01:03 +0000
Manifest this update: Wed 25 Mar 2026 19:01:03 +0000
Manifest next update: Thu 26 Mar 2026 19:01:03 +0000
Files and hashes: 1: Fo_q-FM_haWBITrWyAHjn0pCC1k.crl (hash: K+KFJ+ANcxMvtkFlqgulJl48aCgNf40WxeJBPooTJck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fo_q-FM_haWBITrWyAHjn0pCC1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:27:cf:94:a1:1a:cc:8c:b3:4d:3e:d1:5c:bc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168feaf8533f85a581213ad6c801e39f4a420b59
Validity
Not Before: Mar 25 19:01:03 2026 GMT
Not After : Mar 26 19:01:03 2026 GMT
Subject: CN=8a50fc3ad3a35410c20597fde840c8117c68233c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:c0:c3:fe:5e:de:92:67:7a:c8:de:c8:de:
9b:e7:fc:86:c2:10:a8:e0:e4:0a:fc:f6:66:b9:83:
d9:2f:ab:b8:e4:2b:b6:c7:78:49:77:83:73:29:1d:
85:29:5c:1c:5c:bf:38:5e:91:8c:24:13:c5:9b:b5:
be:69:49:0a:35:5b:4e:2a:bf:a6:22:d9:a6:80:70:
de:c4:6d:2f:59:77:6e:21:be:a4:b8:69:29:11:f7:
d6:7a:3e:ad:93:6f:c8:7b:cd:3e:2d:79:cc:bc:fd:
c9:6b:a6:8e:45:7a:ae:1c:c2:f9:07:2d:8e:f7:fd:
8e:ad:1f:8a:ef:0d:41:ee:64:7a:5b:36:71:3d:f7:
7e:01:a6:d5:bd:43:5e:f0:3c:8c:15:4d:29:2a:ea:
bd:59:74:b1:e2:81:5e:43:3b:e3:0b:7b:21:99:9f:
41:2d:50:85:6f:5e:b8:ae:6f:63:ce:c4:62:aa:aa:
eb:e1:69:52:a9:c1:e8:40:03:17:7e:0a:c3:38:10:
27:82:61:6a:12:e7:d2:b8:7b:40:69:0e:12:2f:b3:
82:cb:87:a6:fc:c7:fe:39:81:b9:c3:8b:15:a6:4d:
ca:a0:6d:78:61:b1:e3:1b:d8:a9:de:2d:16:e6:39:
f9:bb:73:29:5b:ad:78:3a:e1:b8:5c:a9:63:a8:80:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:50:FC:3A:D3:A3:54:10:C2:05:97:FD:E8:40:C8:11:7C:68:23:3C
X509v3 Authority Key Identifier:
keyid:16:8F:EA:F8:53:3F:85:A5:81:21:3A:D6:C8:01:E3:9F:4A:42:0B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo_q-FM_haWBITrWyAHjn0pCC1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fe:c8:ad:32:3e:e7:93:16:c3:ca:44:f3:50:af:7d:b9:cc:
d3:c4:18:23:95:74:af:43:4a:2e:21:85:a2:2c:90:df:c8:66:
0b:d5:b0:85:73:06:ea:05:aa:77:d8:33:60:4d:a6:fb:7b:f3:
e6:cf:4e:bb:68:98:77:cc:4c:3f:92:99:11:09:b1:04:a3:c1:
b4:b5:08:c5:da:c1:b5:7c:51:83:89:91:7c:fe:d5:b6:1d:2d:
75:6c:d5:dd:59:4d:69:56:cc:65:13:d8:b1:6c:21:33:b2:ab:
d5:ac:88:04:c5:e9:d0:79:ba:d4:e0:72:ee:78:15:1d:56:b2:
ad:c3:5f:89:8e:11:d1:ea:76:b0:2a:db:6a:e7:bb:43:77:2a:
57:f9:c8:f6:7e:ef:eb:f7:62:20:d6:34:c5:ab:5f:a4:6f:ba:
77:8e:ab:44:8b:f3:c1:ec:24:e7:2f:5c:92:ee:c3:56:94:a9:
eb:05:fa:c8:cc:52:44:86:f8:ba:d1:fa:c2:ce:6d:9e:65:85:
00:22:b7:5e:a5:6f:08:42:f2:ac:33:ed:a4:fc:04:c7:d4:d7:
1a:ab:c9:d8:70:8b:0f:1c:3a:d3:35:88:5c:ef:6c:e2:89:60:
64:a1:f1:f4:92:fc:10:b9:d4:2b:71:96:4f:5b:ca:36:d7:68:
3b:32:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:59 2026 by rpki-client