Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: /9ZWGDMBLbKzsRR/g1gv3VPpgOR45dujOBlILlXbizY=
Subject key identifier: CA:FB:1E:5C:2C:7A:DB:CD:BB:58:E5:EB:5C:6A:37:46:0F:D0:19:7F
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 019D273B3072991846359EF07EA50E5CC1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 15BB
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: G6jASn0+LTdJJ1l9bknpF2m1WME3uHME70dB1ZYKSD4=)
2: lVcBo5vuxQrLHVx-CazpWVzHmK8.roa (hash: vG4AHQ6D6vSRnjokMxDtiTnVibG0s89z9DApsJwgQrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:30:72:99:18:46:35:9e:f0:7e:a5:0e:5c:c1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=cafb1e5c2c7adbcdbb58e5eb5c6a37460fd0197f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:89:35:bb:3d:01:67:4b:1b:83:55:fe:4f:
ad:cf:dd:fb:55:0b:a2:38:2a:47:24:17:97:68:17:
83:19:44:7b:fd:39:b6:8e:44:af:72:93:cd:4b:cd:
01:db:24:21:63:ab:06:46:52:27:74:a5:53:38:70:
37:46:c0:bb:b3:13:c2:33:31:18:90:09:06:8c:9e:
5f:5a:89:7c:b5:01:61:de:99:36:f1:ae:b0:02:81:
1e:ff:0f:92:84:75:4f:ed:4b:45:c3:60:f1:bf:f7:
99:00:fe:8e:33:22:c8:6b:e8:7f:24:27:76:a8:6b:
22:0c:96:fb:f2:ca:f9:85:f9:73:d2:98:b4:0e:f8:
d2:71:d1:d9:1b:b1:85:74:17:b2:6f:e0:a5:15:32:
a7:d1:ea:73:46:d7:82:a3:7f:2f:4b:ee:d7:e5:8f:
58:e6:fb:34:b0:d1:42:95:31:41:05:9b:f3:47:d6:
a6:c4:89:0a:a7:96:49:b9:7d:64:89:36:93:f8:7a:
19:3b:5c:2c:6c:30:ee:bd:c4:6e:59:1b:77:be:3c:
20:65:92:c9:83:ff:83:47:8e:a1:51:fd:0f:fb:a0:
43:c8:80:f6:5d:0a:f4:26:d3:ed:72:2b:51:40:e5:
d6:60:38:18:5c:23:42:02:65:ca:05:03:b0:e0:c6:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FB:1E:5C:2C:7A:DB:CD:BB:58:E5:EB:5C:6A:37:46:0F:D0:19:7F
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:73:02:69:14:a1:55:e5:82:cb:63:ff:7e:2f:a6:79:61:40:
d0:1a:02:2d:37:b6:3d:82:ba:77:10:be:3d:49:cf:dc:d9:e9:
3c:81:46:9a:9c:9c:48:8b:d9:57:8d:f1:88:75:d7:44:84:6f:
3b:e3:66:51:53:14:5d:ee:d1:50:97:91:01:eb:86:0e:04:ea:
b5:ff:50:15:4e:e6:b8:c2:be:0b:8e:94:fe:5a:d5:93:2f:10:
c0:81:f3:92:2f:16:13:14:8f:00:da:9b:67:29:31:81:e0:e2:
2a:26:e9:1e:e7:1c:90:37:fe:fe:dc:36:fa:70:f8:f5:a6:4b:
bc:c8:3b:c1:7d:dd:9f:5d:a0:be:46:e3:24:9e:58:b5:1a:f2:
8f:25:c6:ea:3d:8e:ab:e4:11:75:e7:a1:6c:6d:f1:4f:5d:08:
91:85:f5:1d:c1:7e:96:cd:3b:fc:e2:ba:8f:43:2d:e1:7a:be:
52:3c:f2:ad:72:aa:d5:bc:e8:7e:ce:4c:4c:43:79:73:0b:7d:
39:b7:db:03:e2:59:cf:47:5b:00:18:d2:e1:58:0d:c4:5b:a5:
a8:a8:58:7c:5c:28:b3:1f:d2:ca:67:c7:44:a9:b0:0f:26:65:
cf:81:61:c9:24:93:ad:4a:86:a9:1f:41:2a:13:10:9a:bd:96:
2b:7f:51:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:52 2026 by rpki-client