Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
File: FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json)
Hash identifier: V+jrGw/tEdcrhlSDhgy5P3QY2RrvwD3NCkQpVe05s7I=
Subject key identifier: 89:84:00:66:C7:DC:30:CD:AD:8C:D8:CC:E2:D3:CC:7E:E0:18:07:48
Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
Certificate issuer: /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Certificate serial: 019D26CCB3AA61440257262DC2F31B6A7F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 21:00:42 +0000
Manifest this update: Wed 25 Mar 2026 21:00:42 +0000
Manifest next update: Thu 26 Mar 2026 21:00:42 +0000
Files and hashes: 1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: P6AZyOQsh6wLoSO7NWybA6m0MIcekrqG060qYw5zzKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b3:aa:61:44:02:57:26:2d:c2:f3:1b:6a:7f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Validity
Not Before: Mar 25 21:00:42 2026 GMT
Not After : Mar 26 21:00:42 2026 GMT
Subject: CN=89840066c7dc30cdad8cd8cce2d3cc7ee0180748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:19:21:f1:59:5e:d0:b5:50:1b:cd:c0:42:
a5:96:f6:19:ac:a2:9e:e5:a5:a6:e7:93:0f:15:11:
b8:f8:4d:4e:a8:16:80:51:d4:c6:23:33:0c:6e:3f:
96:d4:56:54:5d:21:44:0e:10:37:9b:d4:1e:bc:30:
03:54:91:e9:cb:f1:d3:4f:77:2f:0b:46:d7:b2:de:
56:37:f0:c6:ff:01:d0:33:6b:b7:81:03:af:b2:a3:
6b:e5:19:74:f8:d4:e4:70:18:17:ef:fb:3b:e7:d7:
5b:93:0a:01:a9:17:a9:e0:0c:a8:c9:92:fd:ab:50:
09:79:b3:0f:b1:bc:ec:0f:35:91:2c:11:1e:c0:a7:
f5:2e:fc:f7:98:0e:04:48:fe:f8:bf:85:ac:30:a4:
dd:fb:28:bb:21:58:25:99:5a:ff:b5:06:ba:1d:e3:
11:a8:8d:e9:3c:f2:a2:e5:d4:66:d6:09:10:c3:8a:
62:4d:2c:c0:9f:f1:ff:12:ed:eb:c5:fb:52:85:0c:
27:9c:bd:a2:bd:90:28:05:50:04:f3:0b:a2:4b:dd:
92:85:97:be:f7:3a:f5:87:c1:b5:a5:d3:b7:f2:3e:
a4:1c:a7:b6:1b:34:9b:ba:aa:21:aa:e2:28:77:d1:
3a:e4:5f:c3:9a:be:83:ea:c7:75:48:0b:fa:cd:23:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:00:66:C7:DC:30:CD:AD:8C:D8:CC:E2:D3:CC:7E:E0:18:07:48
X509v3 Authority Key Identifier:
keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1b:ba:76:a7:8b:3d:8e:de:80:97:3a:4b:73:da:f6:5c:0a:
43:43:12:91:c1:10:97:0c:a0:c5:71:9d:c1:a3:57:1a:50:35:
83:1a:9a:32:93:90:72:b0:2e:15:5e:ea:ad:7f:72:d9:a5:b4:
70:24:48:47:7f:44:be:b0:18:78:75:bb:e1:89:1c:62:d0:55:
31:1a:92:fc:98:d0:3e:be:f4:41:3d:1e:ff:72:c3:86:7c:d0:
18:4f:c5:b5:a8:b1:78:47:ad:e1:4f:42:70:5a:27:dc:52:60:
a1:eb:ea:3c:a5:06:87:f8:f3:89:ef:87:5b:6c:11:89:5b:4b:
38:35:d3:32:2e:21:e2:be:18:3a:5b:79:c4:e5:2a:16:3e:8d:
cd:05:af:f8:6a:bb:d5:51:b4:f4:04:f4:46:64:b8:b3:a8:18:
8e:e5:9d:63:2b:59:cf:ce:64:c7:79:a3:03:b1:93:18:fd:ad:
1c:8e:69:ce:00:9b:ad:cc:8e:34:9c:87:b9:83:23:b8:70:fa:
25:17:5d:8e:9a:e5:1a:d4:e9:83:22:cd:12:52:87:5c:10:61:
8a:58:33:4d:73:3b:54:1b:c1:31:f7:e5:0f:79:20:c3:05:93:
7a:07:9f:41:8b:b6:78:90:d6:d3:5a:ca:ef:ed:b4:3c:4d:26:
1a:f9:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:17 2026 by rpki-client