Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: 7gbQzR6n2yhktGisA865YJZPE/en/ohhl3ThnN7f++c=
Subject key identifier: 5C:29:5F:31:45:C2:1F:9D:1E:22:83:00:5C:CA:9D:71:42:CF:92:2C
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 019CABD90366BC2888C39AFB5B8869C73D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 1830
Signing time: Mon 02 Mar 2026 00:00:51 +0000
Manifest this update: Mon 02 Mar 2026 00:00:51 +0000
Manifest next update: Tue 03 Mar 2026 00:00:51 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: 7YnMC7+q4f7HGXM5Yw6Bj9AwLfN38rOqF2rWTS7uGjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:03:66:bc:28:88:c3:9a:fb:5b:88:69:c7:3d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Mar 2 00:00:51 2026 GMT
Not After : Mar 3 00:00:51 2026 GMT
Subject: CN=5c295f3145c21f9d1e2283005cca9d7142cf922c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:9d:f1:83:d6:71:9c:6e:25:26:50:03:df:
29:b6:f2:65:7a:3b:4a:97:28:a4:5a:10:b6:99:35:
65:d3:07:45:3b:0b:b9:71:e0:16:fb:e6:95:9d:69:
f4:ef:2c:a4:60:f2:db:7a:26:f2:4d:86:ef:9f:9b:
ed:55:8b:eb:1c:69:4e:68:d6:52:1c:75:d7:b4:0e:
fc:36:e0:ff:2a:0d:e1:da:fc:a7:46:37:c1:d6:c8:
bf:6d:70:a6:38:fb:1b:fb:bb:84:26:fe:a2:99:3a:
c9:ab:3b:eb:da:4a:28:11:0f:68:c8:9b:0b:48:a5:
ea:f5:4b:f9:77:4e:36:91:b0:c5:dc:1d:cc:1f:d4:
39:df:e9:6d:cc:07:65:7e:26:ce:8d:19:2c:27:e5:
28:a8:7c:74:24:cf:7d:8d:76:24:f4:08:0a:40:65:
89:9d:a5:f0:a8:24:3a:64:f4:dd:76:86:a0:8f:f9:
b2:d6:58:5f:d6:e8:27:32:de:19:1a:78:e2:02:6a:
fd:70:77:c1:68:30:e4:83:79:d8:e6:4b:bb:aa:2a:
3d:45:f3:86:bc:d1:57:c6:11:f6:89:26:cf:df:11:
8a:75:59:84:eb:78:14:30:af:04:8c:3c:1c:cd:29:
b9:09:45:ca:be:b9:21:45:db:2a:dc:a7:56:e1:24:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:29:5F:31:45:C2:1F:9D:1E:22:83:00:5C:CA:9D:71:42:CF:92:2C
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:37:0c:ea:b4:c1:38:22:4e:00:56:2a:79:51:de:84:97:8a:
56:23:06:d3:fc:8d:11:24:90:27:6d:fa:56:98:92:ce:95:e2:
38:24:5a:83:d0:95:eb:c3:72:a3:d3:21:8d:94:86:2d:85:45:
48:2d:7b:54:c0:2b:9b:78:e2:6f:47:0a:e0:e0:65:97:ba:a2:
59:14:62:63:70:4b:f5:a1:16:b5:5e:cf:42:77:26:e4:b1:11:
29:c7:44:02:85:07:c6:da:e1:69:43:c9:75:5c:e6:f9:6f:81:
5b:fe:fc:e0:d6:7d:1a:26:b6:b1:0a:ca:c6:ce:31:35:d3:e8:
7f:c2:bd:5a:49:00:8c:64:ce:d6:9d:dd:f5:50:64:63:45:5e:
ac:23:7d:de:75:ac:a3:79:0c:74:83:02:b3:68:69:7b:e8:6c:
bb:be:73:f7:05:0f:6b:80:10:f5:a2:b6:64:c3:9b:f0:20:5f:
b6:66:6e:2d:22:4d:33:08:5e:a5:a9:bc:39:9b:61:ee:6b:2e:
01:5f:c4:10:51:82:7c:66:19:08:5b:8e:28:b9:eb:58:00:1d:
95:f8:da:6a:d9:b0:49:a8:f8:de:5d:6b:ed:d2:a8:e8:8d:df:
42:82:b2:e2:b6:8b:31:b9:db:78:47:21:1e:f5:2e:e2:45:9d:
fb:7f:a9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:38:06 2026 by rpki-client