Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: ielvqpjUX40YCel/8Wgg0JBK+noojrAD/7u8GC3oRGI=
Subject key identifier: BF:B9:EF:C3:15:84:DE:4E:BF:41:BC:AA:27:B3:0A:2A:AE:9E:F3:BA
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 019D98F49DCB769AFEA469F683F416985AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 0B9A
Signing time: Fri 17 Apr 2026 01:01:01 +0000
Manifest this update: Fri 17 Apr 2026 01:01:01 +0000
Manifest next update: Sat 18 Apr 2026 01:01:01 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: ZmGuTQm0As+gMB6nCGKD6/wbvbIBca+Y0SQT2UMF3Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:9d:cb:76:9a:fe:a4:69:f6:83:f4:16:98:5a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Apr 17 01:01:01 2026 GMT
Not After : Apr 18 01:01:01 2026 GMT
Subject: CN=bfb9efc31584de4ebf41bcaa27b30a2aae9ef3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:f1:9a:24:01:81:f0:7f:d0:7b:62:34:1c:
c1:0c:ad:9e:b3:a4:51:f7:d5:67:80:ce:cf:f3:24:
2d:f2:dd:65:54:73:66:b1:8f:c3:93:8b:22:c7:d3:
b0:b4:74:09:4b:ff:5b:de:8d:5a:a2:a6:76:af:3a:
46:b3:a7:61:57:ac:5e:dd:f7:a4:19:de:8a:1e:fc:
dc:f3:fb:0f:60:24:3b:ed:61:2a:1c:67:36:c0:be:
9e:bf:94:23:82:51:5e:1c:88:58:e5:ad:56:14:68:
34:4e:62:02:01:fc:02:ac:e0:74:a3:c5:cf:4e:71:
78:7a:cc:58:1b:f9:00:96:cd:34:9e:80:93:33:38:
30:e8:81:60:43:9d:f8:ec:4f:9d:d2:ba:dd:89:c9:
72:40:b8:23:8b:7c:41:d1:80:08:59:b0:71:ca:02:
63:07:74:5e:e1:01:13:70:32:1c:71:5a:cd:8b:86:
19:87:2c:85:10:6f:7d:6b:1f:34:81:5c:b9:9b:c0:
e4:8e:75:2a:18:c5:de:4d:a1:c1:42:4c:8d:ae:16:
5e:a4:01:a9:92:2a:84:ce:07:a8:16:bd:40:36:13:
16:41:ca:f8:08:19:1a:60:46:17:90:df:51:59:cd:
5a:e4:8e:1b:1c:5a:88:a5:fb:d6:f5:9c:d7:a6:ae:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B9:EF:C3:15:84:DE:4E:BF:41:BC:AA:27:B3:0A:2A:AE:9E:F3:BA
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ff:0f:9d:4c:57:ef:0e:91:99:70:de:ca:57:ae:cd:f1:9f:
2d:4e:64:98:0b:4b:f2:e8:c8:49:12:d5:5e:bc:7d:c1:a3:03:
73:57:8a:9a:d9:f0:00:aa:09:8b:42:db:07:1d:66:6d:63:7b:
67:33:d5:e8:8e:f7:33:46:fe:6c:42:f1:47:7b:cb:6f:cb:03:
90:b1:b4:d8:89:d3:af:b3:55:cb:6c:05:4a:df:7b:ee:03:b5:
6c:0b:ad:7a:96:90:a3:11:a2:73:44:68:62:91:03:65:dc:d0:
5f:ab:8d:83:f9:19:b7:1e:85:6f:ce:d4:8d:67:12:12:a6:00:
5b:c6:8d:51:c1:4d:2a:d9:e8:6d:e6:ee:d8:60:86:11:7f:cc:
19:68:73:cc:8f:0d:44:55:ba:88:36:4e:9a:0f:d2:41:7f:9c:
ef:9e:56:59:59:cc:78:f1:97:5b:0b:ac:ab:01:56:ea:3c:e6:
9b:7d:30:a6:94:1d:7a:43:9a:28:98:0f:7c:59:67:7d:2d:09:
79:d9:50:b8:cf:dd:3c:b0:38:98:c7:a0:db:9b:25:5a:a6:65:
1b:95:d4:7e:6f:0f:d8:44:67:a0:70:b7:58:29:df:4c:fd:0e:
ff:c5:c0:9c:01:d7:37:28:8a:64:90:77:36:10:c1:95:7e:f9:
ce:5b:8b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:52 2026 by rpki-client