Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File: ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier: C2FvCl0ShgQ36vPQNY6DKUKiadBPvgULyH0XWR2EJgM=
Subject key identifier: 3D:51:CF:29:A2:B5:43:E5:F4:91:0A:B3:03:7E:DC:96:4E:7E:CF:8E
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 019D273ACBA4932D843C775FF3A1D92FF96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number: 0975
Signing time: Wed 25 Mar 2026 23:00:57 +0000
Manifest this update: Wed 25 Mar 2026 23:00:57 +0000
Manifest next update: Thu 26 Mar 2026 23:00:57 +0000
Files and hashes: 1: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: 5a/aRnd/Yaxwassvf1i1HUDFb+YnRhKwfghgNlTWv0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:cb:a4:93:2d:84:3c:77:5f:f3:a1:d9:2f:f9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Mar 25 23:00:57 2026 GMT
Not After : Mar 26 23:00:57 2026 GMT
Subject: CN=3d51cf29a2b543e5f4910ab3037edc964e7ecf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:cc:8d:c8:6a:a8:cb:aa:bb:a4:04:64:db:
4b:b7:ad:8a:35:66:29:18:16:01:05:a0:51:96:91:
e8:49:d3:9f:88:2e:98:a8:c5:5a:05:ba:c2:e5:45:
03:9d:f2:77:5b:f7:16:96:bb:d4:f9:b1:ca:e2:b4:
70:e4:09:d1:8e:e5:24:41:be:55:01:11:59:4b:6f:
57:b9:a7:c8:88:58:d0:a5:a9:d2:b1:a0:cf:11:b4:
e4:b3:d5:c4:4c:7e:78:f0:2b:16:d8:64:29:70:cd:
df:0c:c1:69:76:a4:02:11:97:2e:1d:5b:29:5e:81:
8e:d6:fd:05:9b:16:db:a9:35:9a:53:17:b2:b7:02:
a5:5b:93:17:d4:3d:4b:82:2e:c2:b8:25:7a:bd:e0:
f1:3f:25:c3:78:63:6e:8d:7f:25:be:6b:47:1c:c5:
d5:b1:73:96:f4:ad:e3:a6:00:e7:3d:57:02:78:9b:
04:48:5e:fc:11:76:36:82:36:39:22:15:8a:5b:18:
d7:bd:e0:b1:48:58:39:01:36:e5:ae:66:93:f3:40:
fa:bd:c2:86:2f:2d:88:1f:ab:4d:84:e1:77:ee:e8:
56:64:f9:6a:34:43:28:a7:49:ea:33:33:a9:fa:e4:
81:fd:9b:48:75:91:e6:59:df:52:ce:de:5b:ce:dd:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:51:CF:29:A2:B5:43:E5:F4:91:0A:B3:03:7E:DC:96:4E:7E:CF:8E
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:37:84:9b:87:bc:ef:54:97:c1:00:47:ac:e5:cc:6f:b0:b9:
8f:e0:9f:78:2a:bc:ea:e9:10:01:de:79:b8:37:7b:03:3e:75:
69:96:0c:4d:1a:70:08:67:b9:b5:67:74:ff:af:f7:97:e4:eb:
7c:a5:0b:cc:21:84:71:d6:d0:6b:0b:df:13:ed:0b:5f:95:18:
c0:22:6b:04:b2:32:c4:b3:ee:e2:c6:93:15:59:6c:cc:ef:bc:
33:8d:14:67:3b:37:d2:c9:1b:26:d0:7e:d7:19:69:1a:35:34:
ed:ad:d9:e3:c5:9b:e6:1b:9f:0a:2b:a3:70:d7:50:30:48:e9:
65:41:50:2c:44:d6:d3:77:aa:d1:98:4c:8c:a9:12:7d:e2:73:
8e:b7:33:34:68:9f:3e:4d:a3:e3:c5:67:18:3c:c3:e6:7e:95:
8f:96:d4:0f:66:3c:07:f4:28:51:80:9a:fb:81:79:be:9e:4d:
70:04:a4:f7:34:d3:77:dd:68:14:46:a2:34:dd:ab:3a:cf:85:
b3:67:76:c6:af:a3:1b:51:fc:e9:68:aa:ed:2a:f2:80:9f:c1:
9f:e5:62:8d:7c:8d:3f:ec:44:b7:b0:46:c7:09:0f:ea:27:13:
d8:42:81:83:08:c5:fb:4f:1a:eb:6c:84:ba:ba:3a:9d:f5:26:
b3:79:dc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:35 2026 by rpki-client