Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier: 5Hk9tdR5Q+WCw5KcGkys7RD/lNuobxEfshZIB2qNTk4=
Subject key identifier: 4C:08:9A:40:CB:ED:0B:56:66:FE:B5:55:1A:D8:22:6F:E1:61:A5:42
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer: /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial: 019D277275A4C0ABBE6C882C97BD3630959F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number: 0958
Signing time: Thu 26 Mar 2026 00:01:45 +0000
Manifest this update: Thu 26 Mar 2026 00:01:45 +0000
Manifest next update: Fri 27 Mar 2026 00:01:45 +0000
Files and hashes: 1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: VBW3FBCiRQlW22402g8HCgBzP/eqEWpX2rPXhlFK6OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:75:a4:c0:ab:be:6c:88:2c:97:bd:36:30:95:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Validity
Not Before: Mar 26 00:01:45 2026 GMT
Not After : Mar 27 00:01:45 2026 GMT
Subject: CN=4c089a40cbed0b5666feb5551ad8226fe161a542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:d0:49:9f:ff:ba:be:96:5d:81:73:1a:a9:
1e:73:a3:86:55:0e:78:55:e3:04:62:a7:4e:25:0f:
8f:6a:10:7f:e0:22:11:16:7c:42:3f:b0:82:b1:aa:
b1:e2:fb:95:56:35:ba:5c:51:af:b6:a4:6f:4d:d1:
93:71:09:3c:a9:38:55:0e:93:d0:5d:63:d7:88:28:
85:42:a2:5e:b2:67:15:df:eb:98:d1:df:f2:78:5a:
5d:0b:af:74:c2:5e:c1:e3:0e:dd:c8:15:ce:d8:a0:
04:aa:3d:70:1a:51:f9:c6:d3:9f:1b:2f:5e:b9:7c:
52:f5:6c:e2:28:ce:a9:6c:94:bc:18:c1:f4:54:24:
12:16:9d:45:f3:9c:d3:d1:1b:bc:15:21:cd:e6:75:
7f:82:26:36:a3:ec:93:af:63:37:eb:74:00:5b:0b:
32:8b:50:6c:1c:fe:a3:52:76:10:b9:0a:cb:e5:29:
06:fd:7d:3c:7f:7b:6f:c9:98:34:15:9b:56:d9:80:
00:aa:08:1f:e8:1d:0a:0a:0e:a8:e4:a5:f7:92:b5:
62:92:23:d5:56:d0:a0:c3:ec:91:59:22:30:a3:d0:
9b:60:be:ef:7e:27:2b:51:b2:2d:da:fb:d1:36:22:
23:92:16:db:4b:26:5a:58:95:e7:6f:3d:6f:46:37:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:08:9A:40:CB:ED:0B:56:66:FE:B5:55:1A:D8:22:6F:E1:61:A5:42
X509v3 Authority Key Identifier:
keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f7:c3:0e:31:f0:40:b4:a0:17:7f:17:6b:0b:0d:26:47:57:
44:6d:0a:ac:b4:99:82:49:58:2f:75:fd:57:ec:ba:ef:9d:55:
96:04:69:e8:aa:96:db:83:87:db:db:f2:72:80:61:cc:63:68:
6c:ea:68:43:c6:69:74:dc:f4:ab:10:c0:03:b2:82:6a:ea:37:
2f:4d:73:f8:e0:cc:50:08:8b:b9:34:4f:f4:56:96:c5:b3:6e:
2b:62:de:24:cf:30:a6:7f:11:ff:f1:65:8a:e2:38:08:ea:91:
ab:e3:13:eb:2d:e2:9a:88:9d:67:30:2b:04:9f:f8:01:7e:88:
0c:2f:a4:17:8c:d8:38:b6:dd:d5:a8:13:07:98:e8:ba:3c:02:
63:3b:0f:51:27:3b:15:ee:18:28:44:53:c2:42:0e:a8:41:26:
46:85:49:bf:26:c3:54:be:96:07:ce:c1:12:b2:7f:be:7e:b2:
ea:1d:16:0a:93:c9:28:b8:76:dd:22:a8:d3:50:9c:69:d2:03:
5f:c5:04:06:2b:49:9f:bc:3f:b3:d6:c4:7d:5c:5d:f0:f8:1a:
51:11:4c:9c:03:71:53:ec:32:94:d6:b2:57:b3:28:99:19:b3:
c7:6e:44:e1:83:ee:92:d5:c8:10:ef:e9:ee:81:de:0e:f6:37:
95:b4:c6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:56 2026 by rpki-client