Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
File: FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json)
Hash identifier: N4boFuJUNUSPy3PEwPc99PGYos0z8K6H675exwXTi7s=
Subject key identifier: 67:27:34:58:38:37:77:01:19:21:E9:2C:31:A1:17:77:A9:64:DE:0E
Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
Certificate issuer: /CN=17279aad17df6bf657565ae5a93eb90985374a3c
Certificate serial: 019D2AA919AA6CA8DA89D92BA91955712EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 15:00:18 +0000
Manifest this update: Thu 26 Mar 2026 15:00:18 +0000
Manifest next update: Fri 27 Mar 2026 15:00:18 +0000
Files and hashes: 1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: wDzLa2f/76o+wGJ/LaZ1RrOnNbOuTrqu0Ik7zr1nsBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:19:aa:6c:a8:da:89:d9:2b:a9:19:55:71:2e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c
Validity
Not Before: Mar 26 15:00:18 2026 GMT
Not After : Mar 27 15:00:18 2026 GMT
Subject: CN=67273458383777011921e92c31a11777a964de0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:e1:f0:49:59:9f:02:8c:ae:fc:cc:b1:cf:
1d:33:8c:7b:ae:06:30:dc:58:ca:93:3c:09:8b:3c:
86:fb:60:74:c5:bd:14:e6:7f:d2:80:03:c4:bd:65:
84:83:22:72:76:ef:1b:7f:40:b3:37:b1:ed:a4:98:
5e:1f:ca:9e:25:c3:9d:c4:d5:20:2b:ef:16:67:d5:
e8:69:54:86:8e:aa:21:03:6c:60:d4:60:1f:bf:25:
2e:4e:2b:ea:c7:57:61:12:10:55:26:00:01:05:45:
68:61:83:88:a0:f9:b4:4b:39:a5:a8:29:db:26:9c:
98:04:22:81:43:a5:ba:01:0b:b0:0b:99:ec:83:ac:
0b:8d:83:48:ea:0c:c2:8d:35:2e:eb:61:59:4c:fa:
bd:00:35:c3:53:2d:b5:f4:66:a3:8b:c9:3d:c7:12:
fd:70:dc:38:a6:39:05:cc:22:aa:45:8b:85:9e:9b:
96:c4:8e:33:3f:4d:b2:a9:09:3a:8b:4f:91:a0:53:
49:fa:23:e6:76:7c:15:27:72:bf:c7:09:17:2a:8e:
73:61:d3:bc:ae:a0:6e:f0:f0:24:86:cf:7b:8e:31:
56:91:7f:87:33:50:61:7f:0d:2f:4e:6c:d2:d2:eb:
91:1d:5a:08:5e:bd:cb:c9:02:63:e3:1a:52:41:c2:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:27:34:58:38:37:77:01:19:21:E9:2C:31:A1:17:77:A9:64:DE:0E
X509v3 Authority Key Identifier:
keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0e:94:f8:39:46:33:5f:9c:66:3a:66:df:c6:d3:c2:0f:11:
63:39:b4:7a:e4:d5:cd:89:7c:44:0c:59:1e:67:e2:15:8f:ad:
c7:b0:c1:85:68:12:9d:81:30:e4:88:dc:c4:a7:40:81:24:49:
c5:d7:28:ef:fc:7d:49:ea:04:7b:fa:0b:c3:36:6d:61:65:57:
a3:0d:c7:92:39:44:8a:ad:8d:67:58:2a:9f:18:9b:3f:4b:90:
90:8c:1d:03:30:67:d7:03:07:df:e6:1e:90:af:f8:28:2b:fa:
bc:42:da:22:04:2f:b5:25:32:d9:6f:bd:50:13:c5:bf:ee:88:
a2:50:7f:7a:2a:c9:ef:4e:95:7b:1a:6a:dc:8e:be:7a:58:5c:
ce:70:33:06:d7:1e:3b:f9:51:9c:f0:63:7c:ca:b5:ed:8b:3c:
df:8e:7f:fa:f0:f4:35:04:50:76:5d:55:de:11:9c:0b:4b:9f:
38:61:6e:75:10:f8:b4:86:f7:86:96:c3:a7:c1:e7:80:de:32:
22:39:2f:03:c4:78:d2:56:f1:d9:ab:9d:0b:bf:60:93:42:e8:
13:3e:26:8f:15:8f:81:1c:dd:c4:12:df:b4:20:1d:37:8a:a8:
b1:f0:42:3b:9c:bb:3e:99:a1:c9:8e:6d:0d:3e:27:0a:d5:0a:
a8:34:ad:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:07 2026 by rpki-client