Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
File: FxGAccwfrZwvkqEikhrUeLE0ew4.mft (raw, json)
Hash identifier: QYNERtuijqdkKONkLC4PgcbzZXMpGl7gSp7N4fGnoTE=
Subject key identifier: C2:9E:A3:3C:98:6E:5D:12:44:AD:30:7C:23:D6:FA:2E:1C:C7:61:D2
Authority key identifier: 17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E
Certificate issuer: /CN=17118071cc1fad9c2f92a122921ad478b1347b0e
Certificate serial: 019D28F325D88D79AA7425D39BBF30CF12A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
Manifest number: 0925
Signing time: Thu 26 Mar 2026 07:01:56 +0000
Manifest this update: Thu 26 Mar 2026 07:01:56 +0000
Manifest next update: Fri 27 Mar 2026 07:01:56 +0000
Files and hashes: 1: FxGAccwfrZwvkqEikhrUeLE0ew4.crl (hash: MwXPFWdA9UQ7IPRXvh+GSjc+HKPL7YJo5fO8cbe67f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:25:d8:8d:79:aa:74:25:d3:9b:bf:30:cf:12:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17118071cc1fad9c2f92a122921ad478b1347b0e
Validity
Not Before: Mar 26 07:01:56 2026 GMT
Not After : Mar 27 07:01:56 2026 GMT
Subject: CN=c29ea33c986e5d1244ad307c23d6fa2e1cc761d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:ba:dd:9a:f2:f0:df:51:eb:ae:ec:a3:4d:
39:53:a5:d9:d9:5b:e1:60:b9:de:8b:8d:86:80:c5:
30:86:2c:a5:38:ce:47:66:ad:62:2b:9d:28:e2:1f:
29:05:6f:0b:a0:cf:87:f8:40:ed:d5:e3:39:0c:5b:
55:29:4f:b6:ba:91:48:bc:c2:b1:7e:76:95:ed:2d:
ee:e9:dc:43:1f:1b:13:ef:2f:6c:b4:11:48:da:ac:
2b:f7:3a:ea:76:3e:25:39:c2:ed:39:89:7f:38:28:
22:e8:ed:bf:aa:38:e7:d0:d1:ca:66:54:50:a4:14:
b0:92:26:f5:5f:90:79:18:8c:ba:cc:6e:82:08:d2:
8a:e8:e0:e9:c4:0b:72:6d:f2:5c:2b:c6:58:c5:a3:
1e:ec:68:2a:cf:f7:69:a0:34:6e:35:96:89:ca:e9:
ca:52:b3:01:34:eb:13:35:7b:51:65:81:5f:08:b1:
d1:bc:a3:fd:ab:1e:b2:c5:73:db:05:16:2e:91:0a:
5e:72:66:37:df:c5:89:85:21:6e:f5:9d:67:2f:d2:
0b:ee:74:e1:72:83:0f:fc:d0:19:bd:79:9e:c2:57:
9e:23:05:6d:40:78:d2:56:07:cc:66:ca:42:f6:40:
86:ce:bd:02:f5:43:e5:30:a0:81:55:8a:15:1c:cf:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:A3:3C:98:6E:5D:12:44:AD:30:7C:23:D6:FA:2E:1C:C7:61:D2
X509v3 Authority Key Identifier:
keyid:17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:90:23:ca:18:98:80:62:95:a0:dd:47:d7:8a:00:86:cb:21:
27:87:50:db:97:63:c1:49:c2:60:e6:47:36:0a:34:d2:b3:14:
0f:4e:2d:0d:dc:b5:e6:4e:b6:48:da:33:0e:05:99:d5:f4:8a:
3f:a2:78:15:d1:97:ad:13:58:38:df:be:23:63:e6:bf:58:d6:
03:05:03:03:46:cb:ea:a8:79:29:cc:6f:91:1b:f8:c6:d8:6c:
65:b0:77:2c:62:94:5b:62:17:10:a9:85:5b:58:42:18:df:01:
b5:bb:04:e3:e5:f6:7b:cd:70:f8:87:89:11:c4:45:1f:a2:d5:
3a:19:2a:17:8c:d7:aa:8b:b2:e1:46:80:ac:47:9c:9b:9b:81:
fd:21:30:f7:f4:fc:dd:d5:25:99:fa:9d:a0:1c:3d:3f:1c:01:
d5:72:8c:a6:be:82:ee:2e:8b:3d:9f:a1:22:75:e0:a2:0f:b7:
29:ec:84:d7:31:a1:97:e1:0b:9d:0b:4c:4d:76:9e:3f:51:fe:
dc:14:3c:16:87:ce:66:aa:80:fe:6e:b4:ea:2a:11:71:94:e4:
a1:24:e9:2d:15:68:1e:5e:06:f3:b8:1d:79:c1:e0:d7:85:b6:
1e:d4:75:e9:36:5b:2b:30:c6:c6:0b:db:7b:bb:78:ac:d5:57:
5e:a9:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:52 2026 by rpki-client