Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: h/kLyqR8exCIAd1VN6hpVgBo+TSLpUk3ccqdzMr2dL0=
Subject key identifier: 5B:66:99:CA:6B:F9:90:F4:F9:45:70:66:F5:47:97:2F:90:27:DF:72
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 019CAB6B91E09C27557F9A69089CBAC45839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 0B78
Signing time: Sun 01 Mar 2026 22:01:19 +0000
Manifest this update: Sun 01 Mar 2026 22:01:19 +0000
Manifest next update: Mon 02 Mar 2026 22:01:19 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: FCndrmjiTJ2+DmULvRc+GWeSQgy9XOQ3Qmc+NkuYngY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:91:e0:9c:27:55:7f:9a:69:08:9c:ba:c4:58:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Mar 1 22:01:19 2026 GMT
Not After : Mar 2 22:01:19 2026 GMT
Subject: CN=5b6699ca6bf990f4f9457066f547972f9027df72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:e5:7c:a5:f2:93:8b:fe:a8:4f:6c:e1:65:
18:82:74:c6:95:8d:0e:8f:0b:fd:82:8f:f2:41:f3:
ad:f8:ee:cb:da:80:5e:30:56:07:a6:58:a6:b1:a0:
12:e0:fd:66:53:f0:b4:b5:b7:2b:49:84:2f:61:4a:
ab:16:ef:23:2c:85:47:29:95:ac:bd:32:55:e9:6f:
2a:c3:36:b2:ec:e2:01:e8:ba:5d:bd:0e:4e:71:12:
40:34:11:6a:54:b1:fb:4e:c5:56:48:29:26:7e:6b:
2a:09:41:e7:fe:61:71:85:17:b8:29:41:f9:41:9d:
0e:5f:45:fe:af:da:07:23:b8:14:7b:21:52:00:76:
6d:e1:53:64:66:e3:15:51:23:bc:c0:cb:09:93:4e:
b4:fd:2d:35:a0:45:74:b1:e3:e9:ca:42:d8:51:42:
0d:94:0e:b9:3b:2f:de:6f:f2:57:fe:29:01:71:fb:
5f:3e:00:0c:c9:d5:40:57:96:af:1a:01:55:e3:fb:
09:f3:cd:b4:95:0f:f8:57:4c:0e:5a:c5:fc:91:b5:
e8:25:ff:91:5a:02:a7:03:c9:27:94:4b:ad:51:98:
5e:28:37:b5:2c:18:39:f7:26:d9:5c:be:92:0c:a7:
88:55:0c:0b:b4:e6:25:b8:dd:fd:d6:93:c4:1f:66:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:66:99:CA:6B:F9:90:F4:F9:45:70:66:F5:47:97:2F:90:27:DF:72
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:43:2d:39:38:68:48:53:74:8a:53:07:54:a5:d8:71:11:70:
a5:8a:9b:f5:64:cd:7b:4f:cd:43:76:0b:3b:93:7b:e7:ce:d3:
85:90:15:00:d0:1a:8f:e2:cb:20:7e:f8:55:fe:70:2c:e2:44:
65:c3:11:09:4b:70:97:13:f2:8a:6a:18:56:44:52:7d:ee:0a:
72:5a:b0:ef:9b:0f:ad:dd:cb:84:cd:bd:bf:dd:6e:38:a8:5d:
40:bd:ce:86:33:a5:0c:5a:5c:1e:67:fe:4f:90:56:99:ad:9d:
2c:b3:de:2d:61:e5:7d:98:48:5c:af:28:0f:ab:10:92:b0:62:
bd:7d:ca:c6:e8:5a:7b:1f:35:c6:b3:08:08:b9:71:a3:5b:59:
2e:45:55:29:29:0f:b7:95:55:95:03:eb:04:1e:34:b1:38:58:
c4:da:bd:7f:2b:da:a5:90:26:04:83:65:8d:fa:6b:4e:55:47:
4b:cd:db:bf:18:59:70:d1:dc:a8:52:76:40:2c:55:73:d9:37:
a7:e7:6e:5a:6c:9e:5e:87:48:01:51:09:17:a1:55:41:67:33:
06:cf:69:59:b4:9a:e6:36:e9:a7:1e:06:c6:e8:93:f2:df:ab:
2a:c4:08:55:98:6d:47:35:e2:42:06:72:3e:be:8a:0d:11:e5:
c5:b8:d4:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra5HgnCdVf5ppCJy6xFg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzM2M2E1ODRlNjZlNDBjNDgxNjRkMDBhOGY2YzE4NGM3
NGI2NzEwHhcNMjYwMzAxMjIwMTE5WhcNMjYwMzAyMjIwMTE5WjAzMTEwLwYDVQQD
Eyg1YjY2OTljYTZiZjk5MGY0Zjk0NTcwNjZmNTQ3OTcyZjkwMjdkZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFHlfKXyk4v+qE9s4WUYgnTGlY0O
jwv9go/yQfOt+O7L2oBeMFYHplimsaAS4P1mU/C0tbcrSYQvYUqrFu8jLIVHKZWs
vTJV6W8qwzay7OIB6LpdvQ5OcRJANBFqVLH7TsVWSCkmfmsqCUHn/mFxhRe4KUH5
QZ0OX0X+r9oHI7gUeyFSAHZt4VNkZuMVUSO8wMsJk060/S01oEV0sePpykLYUUIN
lA65Oy/eb/JX/ikBcftfPgAMydVAV5avGgFV4/sJ8820lQ/4V0wOWsX8kbXoJf+R
WgKnA8knlEutUZheKDe1LBg59ybZXL6SDKeIVQwLtOYluN391pPEH2ashQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtmmcpr+ZD0+UVwZvVHly+QJ99yMB8GA1UdIwQY
MBaAFH7DY6WE5m5AxIFk0AqPbBhMdLZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMmY3YzMtOTYxZi00ZWQ2LWFmNWQt
NzIwOWEzNjJiNjJiLzEvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jMmY3YzMtOTYxZi00ZWQ2LWFmNWQtNzIwOWEzNjJiNjJi
LzEvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUMtOTho
SFN0ilMHVKXYcRFwpYqb9WTNe0/NQ3YLO5N7587ThZAVANAaj+LLIH74Vf5wLOJE
ZcMRCUtwlxPyimoYVkRSfe4Kclqw75sPrd3LhM29v91uOKhdQL3OhjOlDFpcHmf+
T5BWma2dLLPeLWHlfZhIXK8oD6sQkrBivX3Kxuhaex81xrMICLlxo1tZLkVVKSkP
t5VVlQPrBB40sThYxNq9fyvapZAmBINljfprTlVHS83bvxhZcNHcqFJ2QCxVc9k3
p+duWmyeXodIAVEJF6FVQWczBs9pWbSa5jbppx4GxuiT8t+rKsQIVZhtRzXiQgZy
Pr6KDRHlxbjU/w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:15 2026 by rpki-client