Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File: FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier: E4csPQPT68rUo/iGDpsSlFylJH3O5xBIPLldn7Idrfw=
Subject key identifier: 27:0E:13:28:4F:E6:66:31:08:7A:C5:91:00:BF:B4:47:FF:75:57:FC
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer: /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial: 019D28BB55253D7D086399DF8ECA9B9B1A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number: 033C
Signing time: Thu 26 Mar 2026 06:00:58 +0000
Manifest this update: Thu 26 Mar 2026 06:00:58 +0000
Manifest next update: Fri 27 Mar 2026 06:00:58 +0000
Files and hashes: 1: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: D93c4d0LHNHHDaYSIaVYhP6RHNVtYcVNFXwVBrCYG4c=)
2: dLRmwhFl83bEy7zAcdX4mKmlXjY.roa (hash: VThAeMBueXR/zSSpQFMxHljw4NYIZkHXHe6JR0i+XFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:55:25:3d:7d:08:63:99:df:8e:ca:9b:9b:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
Validity
Not Before: Mar 26 06:00:58 2026 GMT
Not After : Mar 27 06:00:58 2026 GMT
Subject: CN=270e13284fe66631087ac59100bfb447ff7557fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:96:bc:94:6e:e8:58:92:85:40:e8:63:de:
06:b9:05:e9:1f:ba:f1:3c:0c:08:d5:09:19:19:e4:
7a:89:33:8e:9f:bf:93:b9:6c:89:13:42:9f:91:88:
f3:51:fb:88:de:4b:8d:25:65:51:fc:24:1d:11:d0:
13:cf:e2:64:bd:f7:10:5a:10:37:67:10:cb:4e:d3:
c7:1e:e4:3a:5f:3a:ce:44:98:98:c4:e0:7c:ad:80:
22:1c:a8:b6:0c:c6:5d:dd:90:a5:31:5f:39:99:95:
eb:85:da:ae:b2:7f:ec:b2:c0:16:75:97:5c:6c:48:
a6:88:d1:9e:86:df:e6:31:71:02:fa:75:4c:b7:1a:
42:e8:8f:49:1f:4e:5c:f3:ae:88:0a:c1:a8:7b:e5:
60:7e:d1:27:c1:63:24:30:0b:b2:a5:44:5c:75:b2:
71:97:3e:a5:e7:f3:bb:07:f7:ab:45:ed:00:7b:23:
ac:9d:55:d1:5b:ee:7a:db:63:dc:a5:71:20:e4:7b:
fc:82:94:aa:d3:fa:ce:4d:f5:43:be:31:08:e4:76:
ba:cd:22:44:05:4a:2f:4d:d5:3e:db:de:03:69:43:
72:d6:56:37:63:09:3e:9b:cc:ef:38:f3:96:06:72:
db:38:5c:b3:24:86:d7:9f:12:34:40:dd:a2:ed:bb:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0E:13:28:4F:E6:66:31:08:7A:C5:91:00:BF:B4:47:FF:75:57:FC
X509v3 Authority Key Identifier:
keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b7:2f:03:78:b2:25:58:96:07:ac:dd:7d:00:92:4c:0e:d8:
05:80:f3:93:88:01:70:30:22:ab:c8:33:78:1e:36:bd:9c:c7:
c3:6b:30:d6:f2:e9:f3:50:e2:1c:8f:bf:be:71:fe:0d:3b:f5:
f9:58:b2:a9:3a:fa:7a:e7:a2:b6:51:7d:d0:e5:c1:54:87:af:
79:c9:3f:15:66:af:55:2c:49:be:cf:02:01:3b:e4:7c:06:57:
e0:d1:22:f3:80:ba:a6:6d:73:a4:bb:17:f1:a6:f4:7e:13:15:
11:bc:ce:6f:39:3b:3c:e7:76:fd:0d:bb:f1:c4:1d:0e:4c:7e:
21:6c:2e:83:4b:a8:34:44:3c:eb:46:40:99:4e:d4:be:fc:d8:
52:a0:c5:dc:29:d5:27:e0:bf:18:62:d2:2c:9d:fb:0a:61:e2:
a4:8c:23:e6:20:df:fd:ff:42:9c:b4:6a:ba:87:d5:0d:70:64:
f9:1e:d5:2f:e8:21:f6:67:e5:4a:5f:18:a0:f0:fe:bf:bb:dc:
13:ae:1a:e3:5f:a6:a3:5a:ac:bf:e7:98:6f:b9:85:70:91:8b:
ee:ca:d9:57:3a:71:da:8b:69:f3:66:7b:c9:a0:02:a3:f2:76:
01:b2:68:91:a8:61:78:06:fd:2e:28:1f:0c:32:21:8f:e0:85:
c6:2f:4a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:10 2026 by rpki-client