
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
File: Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json)
Hash identifier: 6L05BI5qBcvru8MUdG/F76kwEaYUUUdQWXhaaUbOBtw=
Subject key identifier: 47:1F:77:14:74:04:74:F1:C2:27:77:82:55:62:36:39:DE:B5:E0:AE
Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
Certificate issuer: /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Certificate serial: 019CAD59843416E9D1412B295E372CF07FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 07:00:50 +0000
Manifest this update: Mon 02 Mar 2026 07:00:50 +0000
Manifest next update: Tue 03 Mar 2026 07:00:50 +0000
Files and hashes: 1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: ElW+rZGbnfqahcFgCF/lp9F/VV+CvN2I73EI4EQ2Y9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:84:34:16:e9:d1:41:2b:29:5e:37:2c:f0:7f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Validity
Not Before: Mar 2 07:00:50 2026 GMT
Not After : Mar 3 07:00:50 2026 GMT
Subject: CN=471f7714740474f1c227778255623639deb5e0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:ad:cf:62:c3:1d:5c:4c:90:8c:a8:a8:7f:
f5:3b:8c:1e:ec:22:32:7a:37:d8:d3:2a:fe:db:f5:
e0:a8:6c:63:3b:32:62:1d:85:8b:27:37:a2:00:23:
40:a7:38:fd:a7:d6:2f:b8:4a:26:75:b4:dd:02:3d:
49:d4:b2:d9:9c:c7:db:bc:c1:63:ff:5e:31:e5:13:
f2:12:5f:91:ca:cd:07:68:e1:95:a0:24:08:f4:71:
b8:71:39:1d:4c:45:ab:cf:b6:77:7d:0d:39:d8:eb:
d1:f8:91:12:c9:ec:ef:91:92:6c:8f:ea:f0:31:62:
dc:ba:af:f7:56:62:c5:07:93:2d:02:b5:08:ac:12:
aa:a9:18:25:db:33:a2:72:2d:98:0c:95:dc:13:ef:
46:97:87:d8:ca:2f:f4:40:8a:29:6e:83:5d:2b:d8:
f5:9d:67:06:73:11:75:8f:b0:f4:53:c0:74:79:4e:
36:db:d6:18:d8:0b:3c:62:96:94:42:69:4e:4c:a2:
f6:97:8b:53:ee:67:d6:46:81:db:0b:df:9c:dc:c7:
29:0e:ea:96:04:1e:93:73:2b:44:ca:97:59:d4:e6:
01:c1:f2:7c:ac:9f:16:f3:89:1e:64:23:f8:81:c2:
60:0b:1a:61:f5:07:60:1b:cb:37:19:ba:92:80:14:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1F:77:14:74:04:74:F1:C2:27:77:82:55:62:36:39:DE:B5:E0:AE
X509v3 Authority Key Identifier:
keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ce:d4:4f:e7:d4:54:c5:80:7e:b5:9c:5e:2d:66:11:ab:61:
e4:be:69:1e:92:b1:66:73:bd:5e:7d:1d:c8:36:ad:16:28:30:
3c:9a:8a:b9:12:f7:55:29:e2:7a:7a:fb:60:3d:2e:a1:81:a7:
e5:07:28:b7:a2:df:20:1a:29:fb:b9:e8:95:96:42:92:2a:97:
87:36:c0:9e:fb:11:a6:5e:5a:43:0f:56:d6:de:31:bc:f5:35:
60:29:b0:06:16:fe:e0:1a:2a:af:5b:2d:6a:bc:01:0b:61:05:
25:e3:87:b5:3b:a5:8f:39:cd:6a:1d:21:17:cd:7f:0e:24:60:
63:ee:dc:a8:a2:38:f2:dc:7e:e4:e3:3b:00:a4:f6:b2:6f:2c:
92:5e:17:4c:ba:2a:70:f2:28:0b:9b:b0:9c:5d:dc:62:c3:9d:
8c:dc:39:df:9a:9f:4d:a7:f5:f1:e5:91:63:85:6b:82:09:e1:
2f:87:0c:20:2e:62:31:03:a8:f3:10:6a:ba:7e:4d:be:85:8d:
59:95:0a:00:af:3b:0a:fd:68:67:8a:7f:85:f5:10:c6:39:45:
cc:8e:20:57:57:0c:8d:c6:e3:8c:25:27:fe:7f:ee:eb:5c:f1:
32:c1:7a:6b:55:cd:88:03:d9:32:7d:bd:60:02:96:6f:4e:e7:
90:9c:02:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWYQ0FunRQSspXjcs8H+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2QzZDE4YWM5M2I1NmZkMmIzMTgwMDAxNjVkY2Q2Y2Mz
MDEzODIwHhcNMjYwMzAyMDcwMDUwWhcNMjYwMzAzMDcwMDUwWjAzMTEwLwYDVQQD
Eyg0NzFmNzcxNDc0MDQ3NGYxYzIyNzc3ODI1NTYyMzYzOWRlYjVlMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nGtz2LDHVxMkIyoqH/1O4we7CIy
ejfY0yr+2/XgqGxjOzJiHYWLJzeiACNApzj9p9YvuEomdbTdAj1J1LLZnMfbvMFj
/14x5RPyEl+Rys0HaOGVoCQI9HG4cTkdTEWrz7Z3fQ052OvR+JESyezvkZJsj+rw
MWLcuq/3VmLFB5MtArUIrBKqqRgl2zOici2YDJXcE+9Gl4fYyi/0QIopboNdK9j1
nWcGcxF1j7D0U8B0eU4229YY2As8YpaUQmlOTKL2l4tT7mfWRoHbC9+c3McpDuqW
BB6TcytEypdZ1OYBwfJ8rJ8W84keZCP4gcJgCxph9QdgG8s3GbqSgBRuowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcfdxR0BHTxwid3glViNjneteCuMB8GA1UdIwQY
MBaAFBXNPRisk7Vv0rMYAAFl3NbMMBOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmMwOUdLeVR0V19Tc3hnQUFXWGMxc3d3RTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMzI2NjktOTc3ZS00MzA5LWE4ZGUt
NDFiYzI4YzFkY2FjLzEvRmMwOUdLeVR0V19Tc3hnQUFXWGMxc3d3RTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mMzI2NjktOTc3ZS00MzA5LWE4ZGUtNDFiYzI4YzFkY2Fj
LzEvRmMwOUdLeVR0V19Tc3hnQUFXWGMxc3d3RTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy87UT+fU
VMWAfrWcXi1mEath5L5pHpKxZnO9Xn0dyDatFigwPJqKuRL3VSnienr7YD0uoYGn
5Qcot6LfIBop+7nolZZCkiqXhzbAnvsRpl5aQw9W1t4xvPU1YCmwBhb+4Boqr1st
arwBC2EFJeOHtTuljznNah0hF81/DiRgY+7cqKI48tx+5OM7AKT2sm8skl4XTLoq
cPIoC5uwnF3cYsOdjNw535qfTaf18eWRY4VrggnhL4cMIC5iMQOo8xBqun5NvoWN
WZUKAK87Cv1oZ4p/hfUQxjlFzI4gV1cMjcbjjCUn/n/u61zxMsF6a1XNiAPZMn29
YAKWb07nkJwCLw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:19 2026 by rpki-client