Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier: xk40lwH4pRyWkLnBV8aLuq6JlsTTw/Gur0j8iRx5BLk=
Subject key identifier: 32:3F:FC:1C:05:D1:93:AC:7B:96:8F:54:8C:E7:9D:34:22:91:4E:8A
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial: 019DA29C4B9EE6A281C2C246FE46DE0AEBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number: 09CD
Signing time: Sat 18 Apr 2026 22:00:45 +0000
Manifest this update: Sat 18 Apr 2026 22:00:45 +0000
Manifest next update: Sun 19 Apr 2026 22:00:45 +0000
Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: vOdtJN2K2/QdiKDlxbR9G53AxuusaMAn9SvWvfHIueQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:4b:9e:e6:a2:81:c2:c2:46:fe:46:de:0a:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Validity
Not Before: Apr 18 22:00:45 2026 GMT
Not After : Apr 19 22:00:45 2026 GMT
Subject: CN=323ffc1c05d193ac7b968f548ce79d3422914e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2e:0e:19:76:76:28:b6:76:15:bc:96:6f:08:
c9:33:c4:a7:36:64:15:2b:4a:f6:55:c4:05:07:5d:
48:a1:b5:37:f3:08:c6:af:80:ab:05:cc:9a:4d:2f:
e6:f0:80:96:a4:6a:bd:ab:9f:4a:7d:ab:da:5a:69:
68:85:c0:c0:e5:24:84:e3:7c:b4:1b:ee:50:8f:49:
0f:bc:fe:78:5f:c7:34:e5:a5:08:30:c3:a0:36:d2:
86:5e:2d:78:9b:6c:d9:62:51:ec:1e:89:39:93:94:
0f:0d:58:ce:1a:e8:66:93:dc:94:79:6f:5f:30:c8:
ce:aa:ec:94:6f:d4:fb:65:e8:33:98:d1:72:d5:ba:
f2:76:05:87:e8:2b:78:11:8b:1a:c0:d0:4c:0f:fe:
25:ce:30:cc:28:ae:70:d5:13:27:b1:70:88:c2:92:
42:13:8a:c5:bb:58:b6:5d:eb:8d:cb:cd:f3:ae:4c:
0f:83:00:0a:d2:ba:57:39:c3:57:38:41:20:f9:78:
c6:7c:1e:b1:f9:17:4b:9d:f7:b2:6b:c1:36:2c:2c:
73:70:0c:6b:1b:12:2d:3d:4c:01:51:2e:95:3c:ec:
21:b4:0b:0c:d3:66:a7:bf:a8:72:59:9a:5b:6f:d8:
fd:d0:fd:24:3f:6d:dd:87:a0:d1:0a:16:cc:df:22:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:FC:1C:05:D1:93:AC:7B:96:8F:54:8C:E7:9D:34:22:91:4E:8A
X509v3 Authority Key Identifier:
keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f3:e0:7e:a2:0d:79:38:a2:15:df:3b:41:fa:90:bb:18:13:
78:65:c9:1a:7a:8e:09:44:a4:54:93:00:c1:26:c9:5a:46:53:
d9:ec:58:ad:e2:32:14:76:59:73:19:63:84:bd:f8:5f:0a:f3:
bc:bf:69:53:c7:a5:c6:69:f8:d7:52:17:cb:e8:e3:ee:4e:1a:
1d:2c:f4:68:29:b9:b5:4a:b2:15:7f:5b:2f:2a:e4:11:76:48:
5b:2a:7a:9a:ad:61:46:10:f8:7a:b0:95:e9:cd:97:97:52:b3:
ab:48:86:12:02:39:03:11:c3:d7:37:5e:0a:5c:96:e9:50:9e:
67:42:66:89:04:76:f4:73:64:5d:c1:63:18:87:43:a8:b3:2c:
d5:91:a9:0e:2e:56:40:d7:c1:2d:51:3e:58:e4:0d:70:e8:3e:
eb:a9:11:90:f5:63:9f:f4:de:27:5e:8c:55:ba:85:74:6f:f8:
7e:65:eb:94:89:19:1f:77:48:b0:76:58:24:1f:d7:a2:2c:36:
0d:8f:b9:77:0b:e4:62:1e:d7:50:cd:54:34:9d:a4:db:4f:6d:
c0:25:4f:1e:a2:ec:17:60:ea:0d:79:de:2c:97:6c:4c:09:6c:
50:ab:84:00:79:79:e7:c8:2c:39:1f:e5:19:88:54:fc:b6:d9:
af:c8:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:53 2026 by rpki-client