Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: iwWHevLey8ZceQdjGE2n/loqu6XlXENp4IgRU/VPnZc=
Subject key identifier: 29:37:B2:B1:45:48:D3:56:1E:93:8C:4B:B1:CC:8E:AA:0B:0B:EF:7E
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 019D27A8C10702F4EE2012CDBC6A49268440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: cbvVExVV14S3sC72YHfWBqOLz15LaP018FKQ/gEPLxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c1:07:02:f4:ee:20:12:cd:bc:6a:49:26:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=2937b2b14548d3561e938c4bb1cc8eaa0b0bef7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:4e:57:d2:97:de:62:9b:d0:27:cc:37:67:
9d:1d:d3:1e:a8:3c:55:1b:05:dc:19:6a:91:91:f8:
0c:81:b3:6e:a8:75:22:1e:80:84:dd:bb:b0:26:03:
b1:fc:33:d9:66:85:f2:f8:c0:16:0f:19:34:6b:2a:
46:6a:f0:3d:99:d9:f0:7e:32:85:8e:2f:80:b4:19:
25:6a:18:d0:b5:43:aa:c5:1c:ad:3e:f5:b1:d5:03:
ef:dd:47:17:2e:07:c3:fa:e3:da:7f:76:3e:12:18:
54:12:13:c3:e6:80:5d:85:b4:0a:50:f5:b8:77:2e:
40:47:20:38:4a:22:73:9c:cc:73:85:6f:bc:92:ea:
09:dc:bc:0e:f9:97:83:e8:f9:6d:8c:c2:17:5a:e7:
2f:f0:c2:c4:28:45:0d:90:a3:b2:bc:1b:f6:27:96:
c1:fb:46:c1:45:4e:44:19:af:6f:ad:d1:41:09:0a:
6a:de:28:d5:27:01:e9:08:b7:86:e9:40:f7:42:2b:
f9:1d:62:9e:4a:4c:09:24:96:2f:8c:b9:10:8e:ad:
ef:a7:62:c5:f3:d4:d5:57:cd:be:ce:40:ee:42:73:
50:0f:94:96:fb:07:67:21:cf:d5:1d:5d:52:c3:bd:
d7:11:41:49:34:dd:b4:74:28:98:19:81:e0:39:81:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:37:B2:B1:45:48:D3:56:1E:93:8C:4B:B1:CC:8E:AA:0B:0B:EF:7E
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0d:e4:27:85:56:ba:fc:5d:f9:e2:a3:a5:b6:3b:9c:61:fa:
a1:cf:20:72:5d:ad:5c:79:91:0b:24:ff:aa:00:c2:43:a8:68:
cd:28:29:ad:33:37:ad:bc:b1:f6:c5:3b:a0:dc:5a:dd:d3:b3:
8e:55:a5:77:99:33:e4:d6:f7:8f:ac:ac:fa:3c:79:82:ca:60:
21:5a:4f:c4:be:43:f8:f1:1a:61:32:fa:7b:b4:f6:e9:97:74:
63:65:9b:4e:1e:42:be:57:80:67:ee:ae:24:24:22:3a:fd:45:
53:7c:02:de:57:b0:61:24:67:cc:95:a3:2f:a3:70:9f:c6:1c:
63:f9:e7:85:79:2b:51:5e:51:09:41:50:56:1d:a3:e6:72:d8:
bf:54:c2:d4:eb:4b:1f:d1:21:f1:f3:aa:c5:43:ca:62:90:33:
59:30:2b:7e:98:73:c0:94:f2:7e:30:0f:0f:e3:d3:d1:70:8b:
e7:47:b1:26:83:7b:ef:58:87:c4:15:65:7f:ff:7b:33:87:02:
1f:a2:8a:44:a5:a1:38:d0:78:4d:6c:4a:36:e4:f8:23:b9:7f:
27:3c:d7:89:53:8a:80:15:87:d9:be:52:b5:4d:55:ef:38:c6:
bd:21:81:0c:15:89:b6:96:39:0f:f6:45:a0:5b:01:2e:83:44:
d0:a5:c8:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqMEHAvTuIBLNvGpJJoRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Nzc2ZGY2YzI2YTBmZjM5YzQzNTM5ZDAyNDcyOTIxYjg2
MWU0ZWMwHhcNMjYwMzI2MDEwMTAzWhcNMjYwMzI3MDEwMTAzWjAzMTEwLwYDVQQD
EygyOTM3YjJiMTQ1NDhkMzU2MWU5MzhjNGJiMWNjOGVhYTBiMGJlZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrdOV9KX3mKb0CfMN2edHdMeqDxV
GwXcGWqRkfgMgbNuqHUiHoCE3buwJgOx/DPZZoXy+MAWDxk0aypGavA9mdnwfjKF
ji+AtBklahjQtUOqxRytPvWx1QPv3UcXLgfD+uPaf3Y+EhhUEhPD5oBdhbQKUPW4
dy5ARyA4SiJznMxzhW+8kuoJ3LwO+ZeD6PltjMIXWucv8MLEKEUNkKOyvBv2J5bB
+0bBRU5EGa9vrdFBCQpq3ijVJwHpCLeG6UD3Qiv5HWKeSkwJJJYvjLkQjq3vp2LF
89TVV82+zkDuQnNQD5SW+wdnIc/VHV1Sw73XEUFJNN20dCiYGYHgOYENkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk3srFFSNNWHpOMS7HMjqoLC+9+MB8GA1UdIwQY
MBaAFBV3bfbCag/znENTnQJHKSG4YeTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZWM4MDgtNTJlMS00ZjY2LWIxNDUt
NGFjY2Y5ZjUzOTI3LzEvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZWM4MDgtNTJlMS00ZjY2LWIxNDUtNGFjY2Y5ZjUzOTI3
LzEvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgw3kJ4VW
uvxd+eKjpbY7nGH6oc8gcl2tXHmRCyT/qgDCQ6hozSgprTM3rbyx9sU7oNxa3dOz
jlWld5kz5Nb3j6ys+jx5gspgIVpPxL5D+PEaYTL6e7T26Zd0Y2WbTh5CvleAZ+6u
JCQiOv1FU3wC3lewYSRnzJWjL6Nwn8YcY/nnhXkrUV5RCUFQVh2j5nLYv1TC1OtL
H9Eh8fOqxUPKYpAzWTArfphzwJTyfjAPD+PT0XCL50exJoN771iHxBVlf/97M4cC
H6KKRKWhONB4TWxKNuT4I7l/JzzXiVOKgBWH2b5StU1V7zjGvSGBDBWJtpY5D/ZF
oFsBLoNE0KXI+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:59:30 2026 by rpki-client