Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
File: FzUV9MhBcBT4hBX20EqfcAP8CyI.mft (raw, json)
Hash identifier: r6Ug23p65IzIIB/RIgpLUaSxexYcvR2lI7aUJAAdzhQ=
Subject key identifier: 22:F9:6F:F5:15:09:4A:57:C9:60:F4:10:40:6F:B3:EC:36:F8:0C:2C
Authority key identifier: 17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
Certificate issuer: /CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Certificate serial: 019D2704B5F1B72568F7AA6D1428F0DA9B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
Manifest number: 0357
Signing time: Wed 25 Mar 2026 22:01:53 +0000
Manifest this update: Wed 25 Mar 2026 22:01:53 +0000
Manifest next update: Thu 26 Mar 2026 22:01:53 +0000
Files and hashes: 1: FzUV9MhBcBT4hBX20EqfcAP8CyI.crl (hash: jp6BhMmwnInYJc8r370iqnRK5Uh0H4TidyCJ5TMBlQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b5:f1:b7:25:68:f7:aa:6d:14:28:f0:da:9b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Validity
Not Before: Mar 25 22:01:53 2026 GMT
Not After : Mar 26 22:01:53 2026 GMT
Subject: CN=22f96ff515094a57c960f410406fb3ec36f80c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:ab:be:e3:d0:0e:69:e3:0b:26:02:1a:3b:
e8:d0:66:7b:a4:96:af:99:c4:9f:04:bd:9a:58:38:
76:14:21:1d:9a:3a:c0:52:72:f9:b4:7a:ea:48:8e:
54:4a:e1:47:a7:34:ad:f1:1f:52:44:de:f9:39:99:
b1:a6:9e:70:36:9a:25:c6:d5:bf:db:d4:32:12:29:
51:b2:35:4d:7a:b4:3b:13:21:7c:f9:74:bc:00:e5:
fd:c7:78:8b:43:3d:64:90:17:50:eb:9c:a8:f4:88:
c5:cd:f8:80:50:db:71:25:b6:47:d0:ed:c5:da:9f:
12:87:34:3b:d8:aa:1e:35:a6:f6:ca:12:71:e7:13:
b7:5d:b6:74:e8:0d:7f:83:c3:44:f3:f8:ad:45:97:
75:38:39:73:c5:91:b2:0b:92:3b:f7:83:0f:bb:ec:
a0:56:f8:01:24:5a:ac:22:7c:d6:87:f9:74:31:f1:
d4:f5:ed:d9:ad:f4:53:0a:00:c2:71:20:f6:bf:fa:
50:ac:0a:01:81:2d:da:2c:7c:36:a2:cb:e2:39:40:
f0:a9:a9:ac:fc:42:44:24:55:96:0e:49:5e:9f:0d:
22:38:a3:a8:7e:20:85:63:11:73:6d:f3:69:a8:89:
be:3f:2a:18:f2:51:f8:36:a6:63:d0:8a:04:34:51:
31:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F9:6F:F5:15:09:4A:57:C9:60:F4:10:40:6F:B3:EC:36:F8:0C:2C
X509v3 Authority Key Identifier:
keyid:17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5b:c2:72:8a:20:5a:18:8a:4b:7b:41:a3:d6:6a:ce:72:f4:
72:82:d8:88:11:73:62:25:96:b9:87:85:29:9f:21:0b:f8:3d:
e6:bd:01:0a:31:33:08:1e:44:2c:60:c7:84:b7:ea:d0:e8:95:
ed:ad:17:09:ea:53:b0:5f:e1:cc:8d:86:52:56:2c:69:4c:02:
e7:90:a2:46:4a:4c:31:5b:ba:59:4f:7f:39:fd:de:f7:45:c2:
f3:21:6b:e8:fc:3d:6e:60:76:80:bd:f5:29:0b:5d:20:9a:34:
43:c9:64:5e:71:9f:c0:66:96:1d:52:63:c9:ac:9c:e0:71:0b:
9f:38:68:12:35:db:b8:99:f6:b3:4c:2c:c0:03:b4:82:5b:86:
2a:3e:04:a0:a6:a0:98:86:d0:41:8f:03:1f:6a:10:dc:76:58:
72:eb:01:16:05:c2:36:0d:81:c7:a2:bb:76:33:2c:28:78:1c:
1d:e7:70:38:0d:90:3e:8e:6c:ed:b6:c2:fa:ed:92:22:d6:4c:
dc:a2:50:8b:8a:2b:c3:dc:24:6b:b4:09:5b:f3:6c:bd:fc:30:
be:d7:d5:9b:f5:15:88:af:aa:49:32:73:eb:f3:83:d4:fa:56:
b1:ed:c6:48:ba:c9:f3:1b:70:ac:3a:39:86:96:bb:78:3c:9e:
7b:39:e7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:32 2026 by rpki-client