Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File: FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier: LN0vuCNTXfdTDlZ8gZRSMSOMgKkYQ8qbBFj0RbzBuP0=
Subject key identifier: 37:9B:30:43:E4:B8:BA:4F:33:0F:A0:32:9F:54:64:93:63:6C:F3:DE
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer: /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial: 019CAD59C24652A0D59F94B8551D33FF1499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number: 0A27
Signing time: Mon 02 Mar 2026 07:01:06 +0000
Manifest this update: Mon 02 Mar 2026 07:01:06 +0000
Manifest next update: Tue 03 Mar 2026 07:01:06 +0000
Files and hashes: 1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: F7lpTLZh1zhk4ypOK5Vjj7QPalcI49q5x0JdtjrhkEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:c2:46:52:a0:d5:9f:94:b8:55:1d:33:ff:14:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
Validity
Not Before: Mar 2 07:01:06 2026 GMT
Not After : Mar 3 07:01:06 2026 GMT
Subject: CN=379b3043e4b8ba4f330fa0329f546493636cf3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:9a:72:67:79:ac:97:53:8a:58:40:ee:06:
f9:0d:ef:23:47:8a:16:84:32:b4:6a:3b:5e:02:b9:
b8:4a:0a:57:b5:0e:bd:f9:b9:fb:fd:5e:e3:0c:33:
95:6f:42:f6:ee:e4:88:2b:c9:ed:05:e2:8b:1d:40:
05:8a:8c:11:45:29:cd:5f:73:d6:ee:4d:12:7c:28:
be:fa:63:84:e8:ce:8a:2b:78:c6:38:82:4d:c2:bc:
c4:7a:f8:e8:12:d6:86:b4:7a:cb:38:83:83:c9:5d:
c9:3b:47:65:b9:c3:0d:91:6c:13:6c:00:28:db:53:
54:58:2a:3a:1c:a2:85:67:4c:95:5d:fc:8b:af:56:
10:a3:66:92:60:6c:3e:b8:a4:38:6a:52:4b:1c:ba:
75:83:11:d6:75:9b:88:f3:6e:7b:8e:91:13:69:ca:
da:ae:34:b5:11:3a:9b:c6:94:e4:56:e9:cb:f2:42:
a1:60:68:88:f0:a1:a0:30:bd:56:90:88:0d:56:50:
89:df:10:d1:9f:90:08:af:3b:c3:40:64:a0:79:09:
61:7b:79:9c:60:eb:8d:f4:b6:71:24:f0:bd:fa:6f:
47:20:d6:f7:8c:5e:2f:bb:d7:f3:ba:72:f7:a8:f5:
72:47:f0:30:3b:61:d1:aa:3e:4a:5b:31:39:8d:24:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9B:30:43:E4:B8:BA:4F:33:0F:A0:32:9F:54:64:93:63:6C:F3:DE
X509v3 Authority Key Identifier:
keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f9:b9:c7:db:22:28:dd:a2:35:d6:93:69:41:84:21:df:6b:
7c:75:2d:13:cb:86:24:f8:a2:5b:53:39:47:19:3a:9d:e9:4a:
4a:3f:bd:57:aa:59:22:e0:ed:42:05:0b:59:3d:c2:7e:85:ba:
b2:89:25:2e:f1:e1:cd:76:5f:84:bd:de:07:90:cc:4b:3d:79:
1a:f3:a9:10:61:0c:87:ea:cb:24:d3:42:88:ca:02:3e:27:22:
98:8b:56:3d:7e:93:fb:0e:2f:4b:81:2d:b2:97:ce:60:e9:ea:
9b:45:fe:3a:53:07:37:15:cf:4f:2b:9e:16:30:d4:b4:5d:a9:
2c:80:c3:60:cc:55:23:00:72:18:35:61:39:d4:51:7a:64:7f:
3f:36:71:34:e3:03:64:4a:ed:57:57:66:32:37:3f:db:e3:65:
4f:45:11:a2:0f:da:2b:8f:1b:3a:e6:cb:23:68:75:07:88:96:
72:c9:b7:0c:91:6f:f2:d2:0d:38:ca:dd:a9:72:34:4f:15:fe:
21:6c:42:30:d0:36:77:9e:21:f3:99:bf:7a:93:0a:14:c2:b5:
0c:b6:15:2f:ca:5c:58:19:c8:2f:17:46:b0:d6:46:5c:3a:fe:
c2:7c:1a:fa:55:f8:52:9f:b1:8e:47:4d:a8:cd:0c:cb:43:69:
9a:bb:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:41 2026 by rpki-client