Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
File: fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json)
Hash identifier: YayCr6H+89S0u5jSY9Ig6xMy+yfwsN9o/XCBswLP/zc=
Subject key identifier: D1:79:ED:76:9C:2A:D4:5F:A2:F2:CC:76:33:65:66:AA:52:B6:5C:79
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Certificate issuer: /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial: 019D262859F230B712C17907AAA193715A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
Manifest number: 0E3A
Signing time: Wed 25 Mar 2026 18:01:11 +0000
Manifest this update: Wed 25 Mar 2026 18:01:11 +0000
Manifest next update: Thu 26 Mar 2026 18:01:11 +0000
Files and hashes: 1: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: r8ziGzooDTwe+QrqtWe028zVzEvKLj4j2oOkKFKhMGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:59:f2:30:b7:12:c1:79:07:aa:a1:93:71:5a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Validity
Not Before: Mar 25 18:01:11 2026 GMT
Not After : Mar 26 18:01:11 2026 GMT
Subject: CN=d179ed769c2ad45fa2f2cc76336566aa52b65c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:1c:18:17:59:ca:ca:56:26:62:91:85:69:
0f:b5:b2:b0:b3:e6:94:f3:83:a6:8c:a8:c1:1d:e7:
b8:5b:b0:bf:7d:e3:8a:54:d4:80:d4:5a:92:c5:ca:
0f:0a:81:4d:f1:87:e4:db:a0:f1:bb:e1:ae:06:a4:
02:b6:2a:40:c5:70:d8:eb:87:21:fd:3d:da:fa:97:
f8:74:d6:32:4a:bb:4b:dc:96:7f:17:75:fa:a1:17:
ff:38:c5:d3:0a:18:60:0e:92:ed:ca:1d:4f:0c:5a:
1d:0a:37:d8:0c:0e:85:73:4c:43:c6:bb:c8:b7:ad:
1e:45:a2:5a:26:d3:bd:ed:0d:af:46:5d:be:de:56:
64:05:16:bd:c3:7f:3e:0b:1c:67:50:a6:e8:f7:1f:
ff:aa:5e:f6:36:38:93:79:a9:90:6a:55:b0:ce:7e:
6c:36:bc:9e:f0:c7:04:e4:4c:e6:06:9f:3b:a8:10:
75:b0:69:93:9e:3b:f5:5a:2c:76:61:f8:2f:de:84:
d2:cf:50:1c:4f:7a:06:4b:2d:58:0f:41:8c:80:bb:
d8:2a:1f:fd:87:11:96:5b:04:fa:30:7b:f2:e3:de:
dd:1c:17:bd:c9:43:1f:4f:5a:8b:28:b0:c9:bb:d6:
6f:92:ad:ab:36:d6:b0:08:fa:a8:b8:14:0a:4f:47:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:79:ED:76:9C:2A:D4:5F:A2:F2:CC:76:33:65:66:AA:52:B6:5C:79
X509v3 Authority Key Identifier:
keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f8:26:2c:d9:1b:f6:34:f1:a4:1f:08:6b:80:e9:45:61:b3:
27:d5:35:a0:88:7a:06:c4:ee:66:d0:a0:fd:87:fc:d0:a8:28:
82:3d:c6:6b:b3:ea:86:3d:0e:cd:e7:ae:a5:f9:72:ef:08:ff:
fd:dc:1e:1c:25:61:b0:2b:57:7a:bf:9c:ad:1a:56:28:48:53:
12:8a:7f:bf:de:4b:31:a6:72:7a:c5:06:df:62:df:5c:cc:46:
c0:07:d7:3a:dd:ff:28:e0:29:c9:a8:46:81:df:ed:b9:09:bc:
fd:c7:60:47:d3:72:3c:31:03:fc:fc:aa:e2:87:98:df:41:c8:
bc:48:b5:44:08:39:9e:02:85:fe:3a:60:96:d5:24:94:a9:66:
14:1c:44:1b:b6:cb:17:ce:67:99:e8:6d:0a:6f:36:e1:a1:6f:
86:9d:c4:c5:cd:a9:22:91:f4:db:91:f7:ae:0e:de:f8:bf:47:
95:67:b9:7b:eb:89:fc:f4:f9:97:30:06:d6:db:09:3d:1e:7b:
c5:3d:5c:aa:9c:96:c7:12:60:f4:68:48:f5:b9:d8:be:bc:51:
5e:ef:d6:c5:6a:23:e1:2d:c4:5e:cc:1a:02:d6:21:a6:c0:d2:
d5:20:0b:15:c6:ac:dc:70:88:66:aa:90:0e:b3:cd:48:a2:4c:
be:0e:68:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:43 2026 by rpki-client