Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
File: fjGzT4SD1T_rGSrhFFSs43vH9YE.mft (raw, json)
Hash identifier: VHZGN/2xcF9f2SWJNos3bCFDvG2vOM/kDb4UOaaX2sM=
Subject key identifier: FA:E4:8F:D5:34:68:38:FC:5D:15:EB:F5:52:24:A9:0F:B5:2A:FB:3E
Authority key identifier: 7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
Certificate issuer: /CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Certificate serial: 019D2771F52A862C5B313CD43C554E6B0C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
Manifest number: 0654
Signing time: Thu 26 Mar 2026 00:01:12 +0000
Manifest this update: Thu 26 Mar 2026 00:01:12 +0000
Manifest next update: Fri 27 Mar 2026 00:01:12 +0000
Files and hashes: 1: fjGzT4SD1T_rGSrhFFSs43vH9YE.crl (hash: pq5Sri8sEctcMSxJOF63iBLsv6wpdio0Y4a5OXvjYmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f5:2a:86:2c:5b:31:3c:d4:3c:55:4e:6b:0c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Validity
Not Before: Mar 26 00:01:12 2026 GMT
Not After : Mar 27 00:01:12 2026 GMT
Subject: CN=fae48fd5346838fc5d15ebf55224a90fb52afb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:2f:71:78:29:6f:14:3f:76:7d:f0:d8:03:
9c:65:d1:c6:0f:cb:a2:e2:47:b0:c1:66:1b:eb:df:
7f:8f:8c:4c:a8:09:60:42:5c:10:3b:de:4f:ff:3c:
cd:b2:c3:17:55:6d:0f:bd:37:03:4b:8f:b3:3b:67:
8b:a4:17:2e:bd:bc:c1:5e:5c:bb:34:6d:3e:8f:7b:
ea:0b:5d:6b:d9:b4:8d:81:ca:96:bd:b9:9d:53:12:
37:c8:ba:9c:50:7e:a7:42:1a:f7:1a:6d:ee:7f:c5:
eb:2e:87:5c:ad:74:41:a8:8c:8a:1e:b4:a1:15:70:
36:cb:ae:0e:ce:c1:8d:63:b4:30:de:02:09:3b:62:
25:c1:e6:2f:99:29:25:e1:d9:e0:80:ec:d8:4d:e8:
20:1a:a8:6b:4f:c4:ae:ba:24:ce:84:2b:43:81:5d:
f0:0e:31:2b:ef:fb:5c:68:f6:49:1e:c5:39:86:3f:
60:9d:d5:a3:0c:c1:c8:06:b6:a0:0b:2e:16:ff:c0:
30:c4:30:9d:29:6b:16:ee:8d:db:3c:cb:ee:5e:9d:
ad:fb:97:7a:a8:80:ee:cb:71:92:9e:ed:dd:86:a2:
9d:a7:67:be:53:97:3d:21:6c:a6:a9:b2:67:0a:07:
1d:66:7b:b9:78:70:db:9b:32:44:53:27:ab:1f:81:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E4:8F:D5:34:68:38:FC:5D:15:EB:F5:52:24:A9:0F:B5:2A:FB:3E
X509v3 Authority Key Identifier:
keyid:7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fc:66:92:32:fb:64:3e:a6:f9:81:79:7e:fa:8c:3f:1f:f9:
b4:29:b7:2b:ff:4c:87:54:06:c6:28:13:7c:65:da:e2:60:ee:
a1:52:6e:c5:2d:44:2c:19:df:a1:4e:18:54:be:69:ee:40:fd:
7a:23:4a:3c:89:05:37:0a:69:33:56:c1:61:70:ca:67:58:1d:
45:f6:2b:a2:a9:6b:5a:19:75:8e:48:7b:61:b5:d4:2e:de:0d:
11:55:6b:6f:73:5a:34:d2:cd:7a:25:98:79:16:24:3d:b0:c4:
56:71:9f:b8:4a:59:e4:24:fb:89:72:de:65:e5:a3:4a:62:7e:
07:be:71:bc:08:91:9e:6b:01:ef:46:34:b0:fe:b4:f4:5a:bf:
11:b9:2d:1d:f6:07:d8:cc:d8:ca:fb:57:0d:61:69:c2:ab:2a:
47:9b:ed:a7:5c:ea:48:d8:76:0b:bf:a8:aa:7a:bf:41:ae:1a:
c2:04:93:53:65:a3:3f:8f:e2:e1:88:bd:d9:05:66:dc:66:6b:
97:ec:30:5b:d0:fd:a2:88:63:78:29:d9:d6:d6:ab:c1:3f:22:
4e:ed:f3:49:23:7c:54:c3:46:87:80:a0:0a:25:7d:39:7e:0c:
c9:dc:d3:cf:e3:a4:55:03:5a:f8:80:e6:71:e1:bd:e6:51:3a:
e1:9e:08:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:57 2026 by rpki-client