Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json)
Hash identifier: zXcBmdbhsybaob+ehv1YwVL9c3RnEgqAmTDGRn5wNd8=
Subject key identifier: A9:B7:B2:1D:ED:0B:C4:4F:B6:00:6D:FA:93:A4:9B:01:EF:66:69:AF
Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Certificate serial: 019CAAFD0543197F12C192958C3827C519D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
Manifest number: 0C54
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: OM/OwY2cRJfy5SDIe+y4AJo43cXz9MWq5YjLCApIENU=)
2: _skMItwD6Eu91kipg5Jm13IU69k.roa (hash: v6QmCXfDrAwGVhq/iR49FnGvFa53FGwkH8sDBGvrAt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:05:43:19:7f:12:c1:92:95:8c:38:27:c5:19:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=a9b7b21ded0bc44fb6006dfa93a49b01ef6669af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:b4:ff:43:e5:e0:8d:38:a2:4e:ff:07:83:
8f:f2:67:e5:82:7e:23:ac:a3:14:53:94:16:02:ed:
2c:24:ea:44:9a:2e:ee:fa:68:77:dc:19:7e:73:46:
52:24:65:96:b2:7b:55:20:3c:dc:ab:bc:d4:67:db:
ca:20:4b:22:b6:5e:5f:91:71:b6:dc:5d:01:bf:86:
87:04:63:57:c1:b2:4d:4b:29:a6:91:b2:ee:87:70:
8d:2d:0d:20:6c:4d:d3:7e:d5:4e:4c:8c:58:db:11:
3c:d8:b6:8a:17:52:d4:b6:04:c4:dd:84:d1:3d:41:
1e:f3:02:e3:51:91:ef:88:61:88:9e:42:8d:9d:b5:
df:4e:f9:1a:40:ac:d5:3a:9d:f1:46:fd:4c:9c:0a:
b2:65:f6:ba:bc:98:4a:d9:f1:a9:51:bf:e4:20:54:
5c:4e:9e:6d:08:1a:b0:98:88:2f:ab:dd:f7:95:72:
40:8e:be:36:c7:58:72:98:09:62:50:6c:89:82:bb:
5c:ad:eb:8e:0b:4d:f7:12:32:0a:4e:b5:2e:6e:4d:
a6:19:96:72:7c:2e:93:a6:42:a5:be:7a:3e:18:84:
d9:63:3e:d2:61:f6:8b:e2:ea:4a:48:3e:93:7d:c6:
6a:13:9b:6b:53:8d:d7:49:6e:07:02:41:6a:08:9e:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B7:B2:1D:ED:0B:C4:4F:B6:00:6D:FA:93:A4:9B:01:EF:66:69:AF
X509v3 Authority Key Identifier:
keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fa:b5:5f:25:ea:ef:40:8e:55:91:6e:86:ff:b1:b3:e2:09:
f2:0b:82:96:82:c2:bf:43:6f:92:27:ef:88:1d:41:bc:bd:ae:
cc:f7:27:28:c5:2b:11:a1:f5:5a:63:6f:df:2f:dc:c6:09:71:
72:5d:ed:f2:a3:17:27:88:9a:2a:67:c1:31:3a:d9:c7:e9:50:
92:e3:ee:1b:dd:fe:a3:8d:41:82:8e:74:c8:7d:a8:30:42:b4:
f5:bf:32:f0:7a:69:2c:7f:02:a5:90:15:5a:53:62:94:f3:fe:
ac:9f:55:88:4b:70:e8:78:0b:a2:15:85:f0:71:5c:5c:c6:31:
67:c0:30:2a:77:b1:c1:64:a5:dc:d4:93:fc:4b:47:46:86:a6:
60:0f:ff:3d:6c:72:14:4f:dc:20:ea:e5:ee:77:17:c5:74:a6:
ae:74:e8:28:b2:aa:90:40:cf:37:5f:c6:0a:73:24:4c:3f:98:
ce:76:ac:61:a0:de:d7:3f:c6:28:44:3e:27:93:f6:be:62:23:
4a:3e:ae:8e:87:ea:7b:ed:6f:7c:08:52:ac:89:ab:92:59:0c:
21:a2:0b:f6:83:9c:b5:70:db:c7:c5:90:6f:cf:b5:d4:53:8c:
03:46:52:62:25:ea:c3:22:2d:6a:64:fd:20:61:43:bd:a7:21:
db:9a:3a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:41 2026 by rpki-client