Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File: FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier: r+xFITh+RoHKppm/Ew5N8DmZ9t24tf56+8AXB4r16y4=
Subject key identifier: 41:DB:04:A5:13:BD:93:70:6B:C6:DC:8B:58:E2:78:FD:AD:97:3D:4A
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer: /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial: 019D98F4CD7DE4B8C13BC072EA8D487A0E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number: 0AA1
Signing time: Fri 17 Apr 2026 01:01:13 +0000
Manifest this update: Fri 17 Apr 2026 01:01:13 +0000
Manifest next update: Sat 18 Apr 2026 01:01:13 +0000
Files and hashes: 1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: WzQyJqMzyuWjTHFE1MFSvm97PGCbrNlltj5SsggOMkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:cd:7d:e4:b8:c1:3b:c0:72:ea:8d:48:7a:0e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
Validity
Not Before: Apr 17 01:01:13 2026 GMT
Not After : Apr 18 01:01:13 2026 GMT
Subject: CN=41db04a513bd93706bc6dc8b58e278fdad973d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:b7:b6:eb:ff:08:31:43:c1:24:ab:30:cf:
b2:c1:da:72:9a:23:92:32:9f:60:a7:a1:e3:7d:b1:
a1:09:0f:f9:f2:06:f7:7e:ef:b9:c3:fc:c6:30:40:
0b:44:3d:6d:7e:27:b4:08:50:71:c8:b5:45:6c:c5:
ae:a9:da:ec:b4:75:69:27:89:ff:90:7d:e3:df:19:
48:5d:88:b9:67:d4:2c:23:45:02:1d:e9:48:24:58:
59:95:2d:be:0d:fa:ef:c8:49:04:5d:9d:26:5e:e1:
da:05:5a:17:23:90:9a:4f:32:1a:0a:77:6d:05:ef:
dc:97:0c:3f:cb:5d:71:39:1f:0e:f1:fb:97:e9:93:
b6:86:f0:1a:0b:19:f6:e5:9e:0d:9c:2d:02:60:a5:
91:d1:f8:5c:2e:16:57:77:48:77:5b:12:b2:bc:d5:
3a:21:32:54:a3:67:e2:96:4e:b3:d4:5d:c8:37:21:
2c:0c:00:22:6e:ba:8a:f7:c9:63:21:38:44:02:5d:
1e:fe:f5:83:0c:8e:9c:df:88:a9:00:76:12:03:f4:
b4:ee:5d:22:42:5a:7f:f8:80:70:f8:2d:6f:da:0c:
6c:11:98:8c:89:75:22:48:ac:a6:97:40:d0:fb:95:
b8:a1:ee:ab:f8:fa:61:3e:8b:c5:d2:3f:b9:14:69:
f7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DB:04:A5:13:BD:93:70:6B:C6:DC:8B:58:E2:78:FD:AD:97:3D:4A
X509v3 Authority Key Identifier:
keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3b:18:b2:f0:71:d0:dd:b1:28:2d:54:7d:30:f1:ac:0d:8a:
ce:5c:ca:b1:bc:d6:e4:b5:06:a7:90:2a:56:64:6a:cf:b8:5e:
dc:1e:3c:c8:89:09:94:09:26:08:09:54:0f:c1:e5:88:e2:33:
07:bd:cd:f0:a7:2c:ef:b3:91:16:c8:9c:c4:13:ca:dc:c2:8b:
e8:2e:04:e6:93:78:7f:97:a1:95:fb:7f:09:ce:b4:dd:fb:dc:
9e:25:17:3c:d6:e5:b6:a9:eb:56:21:e9:a0:1e:a1:54:1f:d8:
83:e4:75:25:14:8c:b1:9a:c0:f1:10:cc:b0:52:b1:22:69:21:
2b:db:41:ad:88:1a:74:a8:e5:78:50:d0:8e:ec:88:1d:81:88:
3d:af:09:04:f9:f7:01:e2:da:c1:aa:c0:66:35:d6:db:ad:e6:
ae:0b:7a:58:a2:62:45:16:77:44:a2:3b:60:44:7f:27:68:6a:
71:99:3d:75:13:d9:fc:a3:4f:67:8b:8f:09:62:61:1f:f1:83:
eb:06:d6:30:05:47:5e:36:f9:da:5e:25:fc:3b:bc:9b:0b:9b:
71:c2:21:80:f4:b9:04:45:8e:d8:6d:81:47:66:f3:23:fa:87:
f5:63:e4:f7:37:d3:fe:6f:e7:11:86:12:6e:3f:71:67:77:2c:
00:17:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:55 2026 by rpki-client