Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: UIvKpBXOgASNr3lzHXhbc8kiy63867kHtTf46WPj2io=
Subject key identifier: DB:54:C0:7D:88:7F:7E:08:FA:18:C0:13:DE:2D:37:2D:5A:5A:B1:7E
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 019D29293E84E75F979F1DF3692B8D8D931A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 0C99
Signing time: Thu 26 Mar 2026 08:01:01 +0000
Manifest this update: Thu 26 Mar 2026 08:01:01 +0000
Manifest next update: Fri 27 Mar 2026 08:01:01 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: f8kOtVE+nVlwyFt10acEZFouT63PU6TTq0ACdHDphGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3e:84:e7:5f:97:9f:1d:f3:69:2b:8d:8d:93:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: Mar 26 08:01:01 2026 GMT
Not After : Mar 27 08:01:01 2026 GMT
Subject: CN=db54c07d887f7e08fa18c013de2d372d5a5ab17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:d8:39:25:f0:2a:67:bb:05:a2:5c:21:13:
bc:bf:8b:3f:6a:ef:cd:4d:99:a3:87:08:fb:47:53:
14:ee:7c:43:eb:ba:62:9d:d3:4d:70:c9:3b:36:8f:
40:cb:0f:45:62:a6:fa:af:8f:8f:a8:85:2e:06:71:
87:40:6c:c3:e1:10:27:e7:ce:b1:7c:d4:a1:a7:5a:
c7:96:56:c4:86:2f:8f:56:0d:58:18:a5:94:01:df:
fd:a6:ec:c0:53:31:be:c7:2e:2b:6b:72:c6:89:d6:
f8:13:9d:ea:bd:ee:90:43:91:94:c3:60:74:3c:83:
12:e6:cf:29:b4:07:6f:80:71:af:d0:77:21:6d:09:
96:9f:6b:35:fa:20:7c:1b:8d:33:75:fa:4a:f0:51:
e2:8b:22:80:6b:e1:2d:e3:fa:a2:a4:31:3f:4b:8b:
7a:80:b7:be:89:2b:3b:85:63:17:dc:ad:6c:9b:1d:
96:2d:ca:c2:07:c3:f9:7e:61:d9:c2:17:0e:28:54:
9a:89:fd:04:ab:56:30:f8:99:b8:8a:1e:65:d4:85:
d5:e1:88:3c:58:7a:bd:36:93:fa:e4:9b:7e:89:1f:
a4:30:8c:ee:d9:a9:15:b1:8c:34:18:04:cb:eb:07:
44:3d:2e:24:43:7a:49:0c:3c:1b:21:d4:25:51:6a:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:54:C0:7D:88:7F:7E:08:FA:18:C0:13:DE:2D:37:2D:5A:5A:B1:7E
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ba:14:89:c5:01:68:6f:d4:d3:0e:19:07:0a:cd:92:1b:ad:
52:fb:3f:d5:82:bf:48:71:9e:b6:40:5b:94:d7:d4:ba:95:55:
8f:9c:9f:bc:8a:33:7b:14:70:65:50:48:68:4a:23:5d:ff:ef:
99:d4:05:45:fc:15:5c:a3:1a:61:52:02:36:b2:e9:66:e9:62:
f3:ba:35:87:bd:24:38:34:57:52:82:24:9d:c3:e5:1c:4b:41:
48:c3:7d:57:ad:9d:ff:cc:1f:42:3d:9c:2f:ac:4a:1f:82:03:
20:80:e6:64:88:1a:8e:42:bc:66:91:95:a3:06:8d:dc:78:af:
26:71:c9:66:2a:44:74:b2:7a:73:6c:06:ad:6e:7c:5f:d0:df:
26:d2:ee:61:5f:fc:21:f8:4d:41:3f:61:30:d0:04:77:ab:a1:
44:20:65:7a:33:33:03:71:18:1f:5f:40:92:ef:60:0d:59:5e:
f3:dd:b6:ec:14:b9:60:62:3f:f1:f5:9f:a0:bf:58:89:57:55:
b1:bb:e9:6e:22:52:0b:f8:d4:92:e3:be:6e:65:cc:c1:a2:49:
bc:80:6f:c3:61:07:be:26:df:22:f1:48:03:58:1c:f1:bf:65:
1a:90:e9:8f:4f:c9:ba:84:01:5c:24:d7:da:c2:ac:88:12:d2:
5e:46:5d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:46 2026 by rpki-client