Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier: 0YWFN6um66w26SBiiOKPgavWVjqUSPC4/tMLlzUEE0E=
Subject key identifier: 15:12:7B:2E:8B:EE:44:99:DD:57:70:00:A8:0A:E8:77:52:39:04:92
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial: 019CA97D502DEC9D52A4AF2E26DF14BFF479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number: 094C
Signing time: Sun 01 Mar 2026 13:01:27 +0000
Manifest this update: Sun 01 Mar 2026 13:01:27 +0000
Manifest next update: Mon 02 Mar 2026 13:01:27 +0000
Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: scBMFL30VtzC7Uzt0la0hkknhIRpIsb7hgl4n/6YuWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:50:2d:ec:9d:52:a4:af:2e:26:df:14:bf:f4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Validity
Not Before: Mar 1 13:01:27 2026 GMT
Not After : Mar 2 13:01:27 2026 GMT
Subject: CN=15127b2e8bee4499dd577000a80ae87752390492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f5:4e:05:7c:a0:cd:fb:a7:f8:ff:60:cd:46:
4b:38:ae:66:55:13:ac:98:61:52:56:3b:11:5d:25:
8e:3f:05:e8:0d:5c:92:51:0b:1e:8a:2a:59:4d:70:
71:36:a2:5c:e2:d2:c1:73:f2:2e:98:2f:c2:ed:34:
6f:ab:8f:f6:75:0d:77:b5:11:af:b8:e3:d8:86:32:
26:2b:9d:66:b7:4b:de:aa:ed:08:79:ba:2c:63:06:
de:f4:57:b9:db:34:86:39:d1:7f:6b:b6:a0:ae:fc:
76:86:3e:07:2a:48:c0:3b:95:d8:cb:59:d9:05:a1:
27:16:e2:44:6d:a8:96:93:6e:15:54:88:90:78:52:
7b:eb:64:f3:c2:41:72:7a:94:0b:de:4e:cf:70:dc:
1c:79:36:99:7d:e8:11:98:13:55:f7:89:12:1c:4b:
6b:18:bc:3a:f3:78:e4:12:19:8e:44:18:69:4d:91:
9a:0c:de:70:87:c1:0a:34:fc:41:b8:44:93:f4:f7:
fe:2c:97:c2:65:6e:2f:53:fc:ab:2f:50:f5:45:6b:
60:e5:b2:e7:35:e5:bd:46:fa:6d:e4:a8:bb:85:b2:
6e:29:e5:81:0c:6c:1f:f4:26:53:0d:0c:5c:32:60:
e4:18:b5:19:76:07:93:a9:f9:68:96:78:ca:93:1b:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:12:7B:2E:8B:EE:44:99:DD:57:70:00:A8:0A:E8:77:52:39:04:92
X509v3 Authority Key Identifier:
keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9a:e7:67:d9:c1:49:4d:f2:2a:fd:4c:2f:ee:84:33:1b:bd:
1a:85:66:20:b8:3e:ff:d9:94:14:04:a6:ad:82:8b:27:c1:23:
e0:f6:fe:a5:cf:4e:ee:af:a2:4b:84:d7:7d:e1:ea:01:b1:45:
55:b2:9e:bd:06:2c:51:9f:d1:f7:69:c4:a2:c8:01:3b:ac:df:
96:91:1c:e8:d9:7b:74:7d:17:ca:1e:ac:fe:9e:81:df:c1:cd:
ea:45:a9:da:f1:8a:3a:e5:73:4b:8d:38:cc:8b:a9:57:42:a8:
da:67:01:ac:b0:76:3d:c6:50:95:af:9b:7c:d2:b3:6a:e3:ae:
b4:06:dc:52:36:76:72:32:1a:d4:97:bc:5d:23:8b:6d:ee:b3:
f1:21:99:63:eb:5f:0a:18:84:81:79:00:a2:a2:d3:e4:bb:0d:
ca:54:f4:70:61:e8:bf:d9:8d:ef:1d:76:cd:e5:7c:c4:01:cf:
da:2d:fa:a4:21:2a:50:fd:ce:b4:15:b1:85:8b:b5:01:64:78:
2d:33:9a:96:6e:56:21:d2:fe:d5:c0:7c:c2:66:e7:95:a1:c6:
99:40:e7:40:7b:ee:4e:83:cb:b5:9a:ee:1e:bd:85:c8:97:06:
9e:28:32:6c:54:3e:71:65:88:d9:74:38:f4:d8:90:f2:37:b2:
51:0d:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:42 2026 by rpki-client