Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
File: fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json)
Hash identifier: UK1IF7YMU6p+pZYt0IGg87s1L2r0pjitVEczNiP1i20=
Subject key identifier: 94:4C:DC:A8:F0:D6:59:C3:F9:CD:B9:DF:71:BA:41:2A:68:68:43:5E
Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
Certificate issuer: /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Certificate serial: 019D333F2FF1C6444830DF45E5C3B0B1DCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
Manifest number: 04CB
Signing time: Sat 28 Mar 2026 07:01:12 +0000
Manifest this update: Sat 28 Mar 2026 07:01:12 +0000
Manifest next update: Sun 29 Mar 2026 07:01:12 +0000
Files and hashes: 1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: ET2xzg8Kc+2AZUAKhwgazcbgC+0OR3lk3DAfb5w+t6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:2f:f1:c6:44:48:30:df:45:e5:c3:b0:b1:dc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Validity
Not Before: Mar 28 07:01:12 2026 GMT
Not After : Mar 29 07:01:12 2026 GMT
Subject: CN=944cdca8f0d659c3f9cdb9df71ba412a6868435e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:39:71:c8:7d:8b:45:b3:1d:76:c9:a5:62:
a9:90:59:66:b4:1e:39:66:0a:ee:16:28:8d:2a:4f:
a4:24:df:d1:c2:76:0d:1c:37:ff:86:e1:c7:4a:f0:
08:5c:eb:bb:2d:54:bf:d2:7e:89:fb:7a:ac:cb:78:
7d:32:89:eb:b1:1c:9f:6c:6b:11:53:23:fd:04:09:
f2:ce:02:af:93:16:45:c2:0e:be:d1:f2:98:61:4f:
76:d8:15:cf:a8:db:0b:b1:7d:2c:98:89:6d:09:25:
03:5f:fb:9b:f6:c2:06:0b:db:9f:91:f9:58:e3:a9:
84:eb:06:71:bb:b7:aa:6a:97:30:17:31:d3:e8:5c:
71:05:69:4e:4f:bd:31:22:92:f2:82:1e:90:59:27:
49:7b:d1:1f:ad:ed:d4:46:f8:ed:14:36:a1:26:60:
8c:69:bd:a3:dc:a5:a2:34:91:43:a7:98:bd:c3:88:
4a:8a:05:2b:46:1a:ec:b0:f9:39:d1:e6:69:8f:86:
e8:7d:16:ef:53:49:8e:5d:f9:76:96:ee:56:e3:28:
ef:45:fe:30:e9:23:27:60:b0:b1:28:6f:53:77:e8:
51:48:4f:c6:af:5d:72:00:fe:ce:57:b3:23:06:a5:
d9:c7:87:52:90:7e:f9:70:9b:02:21:53:a4:a3:5e:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4C:DC:A8:F0:D6:59:C3:F9:CD:B9:DF:71:BA:41:2A:68:68:43:5E
X509v3 Authority Key Identifier:
keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7d:f1:9c:57:0c:61:2b:c3:5f:58:e4:7f:16:93:93:bb:e6:
0c:9b:82:14:41:bb:68:88:68:70:9a:96:4b:74:f9:7b:89:8c:
4f:c3:07:dd:cb:9a:6b:1b:0c:ad:b8:14:e7:c1:45:5e:c4:73:
21:28:ab:a8:01:54:9a:97:47:ec:40:41:cb:2e:30:b4:6b:fd:
ff:78:3c:2d:38:87:2e:b1:b5:9c:78:5d:bf:aa:01:9d:27:f7:
a3:2e:63:42:e8:46:17:f2:37:74:b3:9c:d7:8a:4e:b5:3e:34:
e3:63:11:dc:d5:3e:5f:bc:06:18:4e:3a:07:9f:c3:4e:42:4d:
49:72:39:c5:47:a6:7a:ef:03:3e:7c:60:a4:8f:bb:1c:e6:c2:
24:9e:64:ff:cb:8e:ce:0f:2b:4e:50:01:b2:f5:69:66:32:03:
b0:e3:c6:2d:ac:6f:93:e4:44:5f:dc:e0:72:8d:5a:1d:72:61:
c5:98:48:a6:b8:26:cf:df:24:41:23:b1:4e:1b:5b:f9:ba:e2:
55:d2:65:12:45:1a:f2:5f:4d:81:f4:db:01:52:14:8e:7a:23:
fc:21:b6:dd:be:52:ef:c1:b8:fc:09:57:49:85:a4:bc:be:b2:
ca:15:74:a6:df:b5:9e:48:b6:47:b4:01:39:29:d4:f7:fe:5a:
05:71:d1:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPy/xxkRIMN9F5cOwsdzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTQ5Yzk1ZDBjY2Q5OWM4NWVjMDcyMTA3NjQ0YzhjYzhk
MWUxNzgwHhcNMjYwMzI4MDcwMTEyWhcNMjYwMzI5MDcwMTEyWjAzMTEwLwYDVQQD
Eyg5NDRjZGNhOGYwZDY1OWMzZjljZGI5ZGY3MWJhNDEyYTY4Njg0MzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovE5cch9i0WzHXbJpWKpkFlmtB45
ZgruFiiNKk+kJN/RwnYNHDf/huHHSvAIXOu7LVS/0n6J+3qsy3h9MonrsRyfbGsR
UyP9BAnyzgKvkxZFwg6+0fKYYU922BXPqNsLsX0smIltCSUDX/ub9sIGC9ufkflY
46mE6wZxu7eqapcwFzHT6FxxBWlOT70xIpLygh6QWSdJe9Efre3URvjtFDahJmCM
ab2j3KWiNJFDp5i9w4hKigUrRhrssPk50eZpj4bofRbvU0mOXfl2lu5W4yjvRf4w
6SMnYLCxKG9Td+hRSE/Gr11yAP7OV7MjBqXZx4dSkH75cJsCIVOko17lvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRM3Kjw1lnD+c2533G6QSpoaENeMB8GA1UdIwQY
MBaAFH6UnJXQzNmchewHIQdkTIzI0eF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85ODhjZTUtODRhYy00MmI3LWI2MTIt
ZGQ4ZjY1MjhlYzExLzEvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy85ODhjZTUtODRhYy00MmI3LWI2MTItZGQ4ZjY1MjhlYzEx
LzEvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfX3xnFcM
YSvDX1jkfxaTk7vmDJuCFEG7aIhocJqWS3T5e4mMT8MH3cuaaxsMrbgU58FFXsRz
ISirqAFUmpdH7EBByy4wtGv9/3g8LTiHLrG1nHhdv6oBnSf3oy5jQuhGF/I3dLOc
14pOtT4042MR3NU+X7wGGE46B5/DTkJNSXI5xUemeu8DPnxgpI+7HObCJJ5k/8uO
zg8rTlABsvVpZjIDsOPGLaxvk+REX9zgco1aHXJhxZhIprgmz98kQSOxThtb+bri
VdJlEkUa8l9NgfTbAVIUjnoj/CG23b5S78G4/AlXSYWkvL6yyhV0pt+1nki2R7QB
OSnU9/5aBXHRow==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:16 2026 by rpki-client