Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: BWLGi9hPGdOoM4xu3wgP4NrYCE0Q246ePEqt5Twe1vg=
Subject key identifier: 92:F3:AD:B9:6A:1B:2B:65:69:6F:A1:48:62:AE:78:0D:6E:1C:BD:A2
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 019D27724D65532047FAA3FBA2A6155CF1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: a617jeBMn++AHEP/wOCGNeFRns9YAhi46DjeGYQZkKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4d:65:53:20:47:fa:a3:fb:a2:a6:15:5c:f1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=92f3adb96a1b2b65696fa14862ae780d6e1cbda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:bd:0e:88:e8:86:30:ed:10:ac:ee:10:fd:
64:d0:78:b0:59:44:15:a2:10:fd:75:4e:76:d5:b0:
4e:6c:61:a2:21:8e:81:d2:11:e2:74:48:08:a8:3c:
f3:d3:72:cc:82:c8:72:bd:49:96:40:7f:5c:75:25:
56:25:df:a9:e1:b8:2b:51:b0:11:7b:91:13:39:3b:
e3:3c:7d:2f:fb:92:a4:bf:9f:7d:6e:82:20:67:31:
c7:9c:3e:d5:8b:9f:76:fc:ac:ee:57:d3:12:9d:48:
bb:9a:06:84:30:30:af:51:94:b8:69:12:cf:c6:96:
de:58:07:02:18:27:bf:ea:43:1c:65:09:a6:e7:5e:
3c:d9:35:6e:60:19:c5:31:db:bb:0c:a9:8d:e5:4e:
f0:76:ff:c5:2a:6b:e5:ae:e7:86:2f:f5:83:6f:d4:
43:b4:c9:8f:0e:34:28:c1:ad:dd:f2:e9:f9:a3:d7:
37:57:3b:86:b7:ff:de:8d:09:14:d0:c1:6c:78:da:
78:b1:25:30:c1:9c:93:41:72:4f:01:d8:b8:53:26:
c2:e9:94:01:e6:7d:b4:80:2b:df:a8:1b:50:ce:d5:
7d:dd:d9:fe:2d:05:01:df:cb:a8:aa:a0:8e:97:56:
6e:db:55:13:e4:d2:eb:45:64:e8:39:fb:ae:67:8d:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:AD:B9:6A:1B:2B:65:69:6F:A1:48:62:AE:78:0D:6E:1C:BD:A2
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:58:30:0c:45:2a:fa:4f:bf:a4:3e:5c:15:27:d2:1f:52:0f:
95:1c:e4:94:4a:60:8f:4e:2c:76:b6:e6:02:65:73:de:96:0c:
6e:34:11:19:94:68:c0:e9:e0:26:89:22:cd:3a:07:33:ce:a6:
fa:0d:ae:df:29:bc:62:76:81:1a:3b:58:69:7f:e0:dc:0d:96:
3c:38:f0:97:21:7d:be:54:93:32:e9:4b:76:a3:26:91:ef:49:
d9:27:fd:ea:bb:80:46:46:1f:01:e1:2a:87:e1:5d:73:5f:ae:
53:58:33:a6:98:a8:73:e4:c5:a9:93:93:08:58:9e:c8:bc:df:
ac:24:ab:dd:dd:bb:50:22:d0:8d:fe:e4:f5:88:16:70:57:db:
87:2e:92:03:7f:09:a4:f4:16:5e:63:40:4c:40:2c:1d:d0:ab:
9f:07:2a:8a:ed:7a:d6:2e:09:e6:6f:e3:a2:ae:dc:a2:02:d5:
a4:1a:92:68:7f:e4:5f:0a:73:88:89:35:88:e1:7b:92:d2:3b:
a7:58:a1:37:ac:eb:0a:9f:75:17:68:27:ad:ae:10:82:c7:a8:
36:d8:63:ff:82:cf:ba:f5:a3:27:5a:35:dc:a9:5b:eb:c4:cb:
65:80:a9:3b:b5:f1:5a:85:72:0c:4d:54:7d:f8:88:df:42:76:
fb:b5:48:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:25 2026 by rpki-client