
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/24877e-531a-40b3-bdc7-f01a15456236/1/FJn4V-ztdZxVruBBJtSkPlJ-IuI.mft
File: FJn4V-ztdZxVruBBJtSkPlJ-IuI.mft (raw, json)
Hash identifier: BXHzIeDe0nm2TzEv/VdXKL16gmNCL6pOA0/Fn4c3C+A=
Subject key identifier: F2:8C:CC:82:00:66:39:24:87:BD:37:4D:5F:64:63:59:CC:09:69:86
Authority key identifier: 14:99:F8:57:EC:ED:75:9C:55:AE:E0:41:26:D4:A4:3E:52:7E:22:E2
Certificate issuer: /CN=1499f857eced759c55aee04126d4a43e527e22e2
Certificate serial: 019D2627F19DB8DA8B16758907D9BB66CF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJn4V-ztdZxVruBBJtSkPlJ-IuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/24877e-531a-40b3-bdc7-f01a15456236/1/FJn4V-ztdZxVruBBJtSkPlJ-IuI.mft
Manifest number: 4F
Signing time: Wed 25 Mar 2026 18:00:45 +0000
Manifest this update: Wed 25 Mar 2026 18:00:45 +0000
Manifest next update: Thu 26 Mar 2026 18:00:45 +0000
Files and hashes: 1: FJn4V-ztdZxVruBBJtSkPlJ-IuI.crl (hash: WV72gAuNKjnOX2Oi5Sk6+kB9Kv/Zu1XwTSUH6u2Oy8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/24877e-531a-40b3-bdc7-f01a15456236/1/FJn4V-ztdZxVruBBJtSkPlJ-IuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/24877e-531a-40b3-bdc7-f01a15456236/1/FJn4V-ztdZxVruBBJtSkPlJ-IuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJn4V-ztdZxVruBBJtSkPlJ-IuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:f1:9d:b8:da:8b:16:75:89:07:d9:bb:66:cf:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1499f857eced759c55aee04126d4a43e527e22e2
Validity
Not Before: Mar 25 18:00:45 2026 GMT
Not After : Mar 26 18:00:45 2026 GMT
Subject: CN=f28ccc820066392487bd374d5f646359cc096986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:f0:e7:40:2b:76:6a:a1:96:2c:62:6c:35:
f0:51:47:a6:53:cf:34:d0:50:60:a0:cc:12:af:f1:
3f:05:6c:55:01:76:97:a1:5b:be:17:2d:e6:ba:06:
b7:84:3b:bd:84:22:6a:da:d8:e9:29:ac:6f:4a:a5:
96:f5:32:ad:b6:da:ee:8a:13:b0:35:6e:85:80:7f:
4c:c0:46:10:66:72:58:08:0d:b7:11:8a:0e:fe:c6:
b5:8e:3a:e4:7b:72:77:42:89:32:08:6a:ab:ae:29:
bd:e6:cd:2d:c2:70:bc:6e:48:f9:ad:07:f6:fc:18:
2d:aa:d9:e4:cf:3b:53:f6:cf:8a:0d:94:b3:b9:4f:
3c:f4:7d:fb:e0:1e:37:24:2a:2f:c4:21:c5:40:7d:
17:06:e9:6a:dd:49:85:fb:2d:f7:60:e9:65:ea:71:
d2:61:33:3d:c1:33:47:d3:57:03:f0:9b:14:e8:78:
4a:39:2f:e5:d4:68:f1:5b:2e:72:e0:b0:25:1c:59:
22:b3:46:ad:ed:24:3e:d3:14:84:b7:20:f6:4c:b3:
6b:7e:34:98:7b:58:3f:8d:72:dd:c8:c8:ae:ca:ae:
a8:01:e8:71:59:26:94:d0:3d:de:78:4e:86:bc:a4:
9a:01:c7:9c:85:05:84:64:70:a2:7e:68:da:7a:82:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8C:CC:82:00:66:39:24:87:BD:37:4D:5F:64:63:59:CC:09:69:86
X509v3 Authority Key Identifier:
keyid:14:99:F8:57:EC:ED:75:9C:55:AE:E0:41:26:D4:A4:3E:52:7E:22:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJn4V-ztdZxVruBBJtSkPlJ-IuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/24877e-531a-40b3-bdc7-f01a15456236/1/FJn4V-ztdZxVruBBJtSkPlJ-IuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/24877e-531a-40b3-bdc7-f01a15456236/1/FJn4V-ztdZxVruBBJtSkPlJ-IuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:be:4c:ac:a7:58:f6:01:22:23:eb:25:25:ba:c8:df:05:9c:
ab:6d:bd:5b:82:5a:e5:cd:f0:14:08:a2:cc:02:5e:24:0b:1b:
27:86:bb:72:1e:19:6d:64:c1:76:cd:dc:ec:bd:e9:c4:4a:7e:
04:09:9e:a8:47:6d:b4:73:cb:cd:fb:23:82:99:32:c7:82:64:
3d:19:67:6d:50:a9:ee:a5:bb:89:a1:18:4f:aa:03:e2:ad:13:
6d:d2:2c:d8:ac:cf:48:ff:17:e4:c9:3f:99:58:8f:a2:88:8a:
92:0a:93:b7:61:5a:c8:a5:60:8b:6c:9a:5b:99:a3:ab:89:4c:
19:a6:14:04:48:f9:e2:12:dd:30:a5:75:3c:e3:b0:ba:c0:b5:
39:f8:b7:ae:6d:17:3b:1c:93:73:d1:6c:0b:71:8d:11:b7:01:
7b:38:e4:d6:bd:cc:89:32:a8:4d:95:f3:fc:c8:b0:17:c1:c4:
8b:7b:29:15:69:48:9e:b5:08:b9:63:3e:f6:60:6d:c3:7b:11:
be:b9:09:ad:dc:d4:9c:15:00:5f:ea:49:8a:5e:78:3e:59:f7:
a0:fa:05:3e:f8:5e:0c:a1:b7:f0:dd:d9:d4:5f:5d:17:3f:ff:
51:5a:ba:5d:e8:ef:90:e8:05:08:85:bc:d8:aa:18:62:fa:d1:
e2:f8:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:10 2026 by rpki-client