Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier: yQHpahrjNYxMOPTpGrZCerIfziTgov9NM0fI3yVkop4=
Subject key identifier: C5:48:B0:DF:4A:6A:79:04:9F:F8:07:88:25:A2:36:3E:35:24:16:31
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial: 019CA97D333A53B9DD3C48DAE2C980FD8703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number: 04A6
Signing time: Sun 01 Mar 2026 13:01:20 +0000
Manifest this update: Sun 01 Mar 2026 13:01:20 +0000
Manifest next update: Mon 02 Mar 2026 13:01:20 +0000
Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: yZ1HWnB+agxdVWUzNwAD9WqW0ONlZ9eCSnKjyFWAUz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:33:3a:53:b9:dd:3c:48:da:e2:c9:80:fd:87:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Validity
Not Before: Mar 1 13:01:20 2026 GMT
Not After : Mar 2 13:01:20 2026 GMT
Subject: CN=c548b0df4a6a79049ff8078825a2363e35241631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:c8:22:d9:b7:e4:e8:9e:e0:cf:7b:67:15:
14:09:33:ca:76:ec:53:ef:eb:13:2a:0a:73:cc:e1:
75:3f:7b:ef:fe:be:79:1d:0f:ec:b6:e0:6e:d0:d9:
18:d5:5a:67:22:9d:1f:49:83:e4:f5:e9:99:c6:1b:
64:f9:71:be:b4:dc:57:55:d3:2c:1c:a2:c0:bb:3c:
20:57:53:0b:df:05:ba:35:55:c9:84:e2:05:86:ee:
52:c4:2a:c8:9c:c8:42:51:9f:f9:65:64:ef:38:23:
d1:65:bd:d1:66:53:b3:bb:02:0c:78:64:b9:8c:d1:
cc:c7:91:bd:30:81:c5:22:76:59:24:5d:0d:3e:91:
39:84:9b:61:39:fe:a1:1e:0d:41:3d:8f:62:52:c1:
a0:61:a2:f5:20:8e:e9:39:42:7f:f5:f0:ad:fd:92:
4b:ad:d1:f8:69:e9:05:61:23:39:7f:54:8d:79:4e:
d6:00:60:d2:99:0e:38:a6:a2:8e:59:a8:5c:a0:dc:
1b:f5:6c:b6:8d:c5:73:cc:5d:01:86:73:b5:db:57:
17:21:28:e2:d7:1a:6e:56:81:2d:6c:5d:79:b2:3b:
af:e5:61:bc:30:e3:fe:4b:6a:f4:2c:e3:5e:22:bc:
0f:95:c8:a5:7f:59:5a:9e:19:d2:35:45:cf:ad:57:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:48:B0:DF:4A:6A:79:04:9F:F8:07:88:25:A2:36:3E:35:24:16:31
X509v3 Authority Key Identifier:
keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f8:2c:1d:b0:23:21:63:f8:62:7e:7d:35:ba:5d:83:c6:f9:
c6:f2:8b:3f:fb:07:fb:b3:55:c8:8a:b0:a6:85:e6:26:e2:45:
ec:1b:26:0a:dc:12:12:dc:14:45:25:21:1d:6c:73:2f:ea:09:
3c:16:91:42:27:58:3e:90:1b:2e:dd:ea:01:e8:d5:33:c2:05:
eb:03:55:4b:fd:54:a6:b9:59:b4:c8:9b:71:50:77:f8:02:f1:
8d:e8:cd:5b:bf:73:2b:9d:26:df:4e:8d:d6:13:f9:17:82:34:
30:30:bc:ab:ed:fa:04:fc:d3:38:e7:1c:65:5d:bb:4f:83:8e:
e2:32:3a:d6:ef:da:1c:2a:b3:7a:3b:1a:fa:54:f3:51:fa:c0:
f9:29:be:e5:da:04:36:7a:33:74:ff:9b:c0:70:50:40:cd:05:
a9:17:52:f0:9b:f0:a5:7a:83:66:5a:4b:01:98:db:ef:7a:36:
5f:48:4b:14:d4:4e:2e:05:f7:dc:4e:3c:6e:26:ae:21:59:fa:
f2:84:92:0b:36:61:a2:f9:0b:6d:cd:07:e0:d4:ad:fb:d6:e2:
5d:b2:d2:d8:3a:93:52:c2:73:aa:eb:4f:73:ae:e2:83:36:12:
18:a4:e3:0d:4d:d4:09:0d:d7:3e:19:38:0b:ac:d4:bb:a8:97:
3d:f8:44:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfTM6U7ndPEja4smA/YcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOWRhZTU0MWEzYjdjM2VmYjZkZDY2NDY5ZDA4N2U4NWY3
NWVmZGEwHhcNMjYwMzAxMTMwMTIwWhcNMjYwMzAyMTMwMTIwWjAzMTEwLwYDVQQD
EyhjNTQ4YjBkZjRhNmE3OTA0OWZmODA3ODgyNWEyMzYzZTM1MjQxNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUzIItm35Oie4M97ZxUUCTPKduxT
7+sTKgpzzOF1P3vv/r55HQ/stuBu0NkY1VpnIp0fSYPk9emZxhtk+XG+tNxXVdMs
HKLAuzwgV1ML3wW6NVXJhOIFhu5SxCrInMhCUZ/5ZWTvOCPRZb3RZlOzuwIMeGS5
jNHMx5G9MIHFInZZJF0NPpE5hJthOf6hHg1BPY9iUsGgYaL1II7pOUJ/9fCt/ZJL
rdH4aekFYSM5f1SNeU7WAGDSmQ44pqKOWahcoNwb9Wy2jcVzzF0BhnO121cXISji
1xpuVoEtbF15sjuv5WG8MOP+S2r0LONeIrwPlcilf1lanhnSNUXPrVeVjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVIsN9KankEn/gHiCWiNj41JBYxMB8GA1UdIwQY
MBaAFH6drlQaO3w++23WZGnQh+hfde/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNmE3YzgtZjVkYy00MmQzLWI5MDgt
NzgwMTcxNzc5ZTUwLzEvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNmE3YzgtZjVkYy00MmQzLWI5MDgtNzgwMTcxNzc5ZTUw
LzEvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/gsHbAj
IWP4Yn59Nbpdg8b5xvKLP/sH+7NVyIqwpoXmJuJF7BsmCtwSEtwURSUhHWxzL+oJ
PBaRQidYPpAbLt3qAejVM8IF6wNVS/1UprlZtMibcVB3+ALxjejNW79zK50m306N
1hP5F4I0MDC8q+36BPzTOOccZV27T4OO4jI61u/aHCqzejsa+lTzUfrA+Sm+5doE
NnozdP+bwHBQQM0FqRdS8JvwpXqDZlpLAZjb73o2X0hLFNROLgX33E48biauIVn6
8oSSCzZhovkLbc0H4NSt+9biXbLS2DqTUsJzqutPc67igzYSGKTjDU3UCQ3XPhk4
C6zUu6iXPfhEBA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:17 2026 by rpki-client