Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: UPYq/9W+aMkycaPmzM0qxJZmLLYT7rlc54isMIve8qc=
Subject key identifier: 95:FC:29:EF:4A:7F:E5:2C:59:23:09:F3:0D:58:9D:8C:D5:E9:34:57
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 019CAC46D7DBF345EE3DFFE57ECA2DCE3DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 0625
Signing time: Mon 02 Mar 2026 02:00:49 +0000
Manifest this update: Mon 02 Mar 2026 02:00:49 +0000
Manifest next update: Tue 03 Mar 2026 02:00:49 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: 6Wbt3jLUf9AJp/w5zVwtOdxy+y+xvQ7989fw83Zf4lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:d7:db:f3:45:ee:3d:ff:e5:7e:ca:2d:ce:3d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Mar 2 02:00:49 2026 GMT
Not After : Mar 3 02:00:49 2026 GMT
Subject: CN=95fc29ef4a7fe52c592309f30d589d8cd5e93457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:71:d0:90:f3:ed:21:c4:8d:4a:b9:19:9c:
4e:30:bb:af:53:07:6e:91:e7:76:d5:d4:54:e0:f4:
de:0c:3f:29:4b:e3:e9:ad:b9:45:f5:c1:b9:75:19:
4f:12:5d:21:02:6e:61:0b:60:5e:f9:f0:1c:42:52:
90:ee:32:84:a1:21:b4:79:00:61:09:9b:d7:fa:8d:
ef:02:13:92:9a:c0:19:26:1b:92:09:08:38:91:fe:
cd:f8:73:fe:37:70:db:f6:57:a6:76:04:ad:63:5a:
d5:7e:63:e0:c3:4d:9f:a1:3d:06:4c:e2:26:26:6a:
3f:c8:f3:61:3b:f6:6c:61:82:9e:a9:4f:a9:d3:76:
51:3c:cf:2c:af:4c:85:8b:78:93:03:dd:59:d3:1b:
67:98:a0:f5:b4:f8:9b:6f:ca:df:22:64:4b:d5:bc:
a9:6d:3e:c0:a2:cb:a9:15:a0:f8:5a:33:24:98:9b:
41:76:94:8b:4f:73:ad:eb:f1:b8:65:e5:eb:3a:c9:
c9:8c:c6:a3:ee:64:9e:3e:6b:77:f1:33:6f:a7:7d:
f4:ed:fe:d6:99:b7:a9:a5:32:40:fc:85:22:a7:e3:
54:d8:ce:d3:e3:ce:c1:19:61:fb:be:73:ac:84:81:
9c:25:38:d6:d5:3e:7c:70:e2:0f:0c:cd:cb:f7:b9:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:29:EF:4A:7F:E5:2C:59:23:09:F3:0D:58:9D:8C:D5:E9:34:57
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:be:e3:9f:56:4d:7a:b9:bd:e4:e0:ff:77:c9:28:29:51:a0:
7f:0e:fa:8a:d4:72:58:62:d4:09:f3:70:e7:84:91:82:5c:1d:
d4:92:bb:f2:15:cf:24:e8:bd:0b:7a:be:39:6b:0e:15:d7:12:
a8:0c:18:a3:c9:a5:6d:0c:f5:67:e9:5d:65:62:32:8f:71:1c:
ea:43:df:0f:f6:86:79:ba:34:44:73:cd:61:ea:2f:ad:30:13:
70:15:86:47:d9:48:d3:a0:67:4d:3a:b0:19:bc:27:3f:1c:6a:
10:5c:34:1a:25:25:65:fb:50:db:b0:33:9e:ce:e0:94:fb:0f:
58:a5:0e:42:b6:be:f8:8f:8c:16:42:d6:79:95:8e:3f:a4:82:
1d:19:0c:5f:52:d6:1d:e7:ea:64:77:73:69:a4:00:5e:ab:90:
c3:cb:b9:21:dd:af:2d:ed:b9:ef:8b:66:47:dd:fb:df:23:75:
1a:df:18:01:ce:11:6f:f1:3c:49:17:12:f8:10:2a:0d:fe:e6:
b8:e2:de:30:3d:75:3c:31:1f:e2:00:0f:b3:3e:1d:07:12:4e:
18:07:23:68:ff:b9:8c:f9:5f:01:86:20:70:8f:31:08:05:85:
a6:7f:a6:77:7a:c0:b2:b7:60:36:06:bd:65:ac:11:25:85:74:
db:ad:fd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:27 2026 by rpki-client