
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json)
Hash identifier: CLX5Y5SGNiyCkXJIceqZyM9DDfv4c1CF2uGIzD6QzR0=
Subject key identifier: 1A:A0:14:3A:76:33:5B:9E:59:28:7D:F7:E5:40:9D:B0:9A:18:15:9C
Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
Certificate issuer: /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Certificate serial: 019CACEBD5C1B034C106BF38A5ACBD238570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
Manifest number: 0553
Signing time: Mon 02 Mar 2026 05:01:02 +0000
Manifest this update: Mon 02 Mar 2026 05:01:02 +0000
Manifest next update: Tue 03 Mar 2026 05:01:02 +0000
Files and hashes: 1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: vWpphzRfe2YCSNS7GDuCzUhqGVMvPHzpKWIvdWWawB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:d5:c1:b0:34:c1:06:bf:38:a5:ac:bd:23:85:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Validity
Not Before: Mar 2 05:01:02 2026 GMT
Not After : Mar 3 05:01:02 2026 GMT
Subject: CN=1aa0143a76335b9e59287df7e5409db09a18159c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:5f:1c:33:8e:d6:12:5d:fb:d7:30:8d:71:
7b:91:72:f0:ac:19:b2:d6:a7:8b:b1:14:fb:6e:f9:
63:8a:22:5b:40:8e:89:08:7b:5c:20:9a:34:35:1d:
24:24:2d:63:9d:ae:3d:a8:36:ab:6f:69:b9:fd:18:
8f:ad:18:8a:30:53:61:1b:8a:6b:a1:26:a5:fa:22:
9a:22:31:6b:6b:f8:f3:1e:82:5c:07:cb:c3:12:c4:
f8:a1:5b:65:64:c7:be:5d:8c:a5:b0:e1:6a:2e:ca:
13:e7:d5:57:19:ac:bb:f8:fe:ed:b4:bd:7d:80:06:
6c:31:5d:aa:21:30:8a:73:d9:9b:53:86:d8:0f:b3:
8f:3a:3d:ef:b8:16:c5:8f:74:8a:c4:4f:bd:f8:f1:
dc:fa:9b:4d:e3:c7:af:c2:11:ae:8e:4f:6b:da:20:
38:50:b3:ff:58:c3:97:c2:34:72:7d:f1:14:ec:43:
26:c6:ca:32:26:e0:89:d7:23:f3:dc:da:9f:9c:92:
38:c0:14:04:ca:97:2e:37:72:1f:5d:3c:f3:94:40:
6d:e6:42:23:d4:7a:c4:a0:f5:ea:d6:c2:ea:45:6a:
82:5d:5a:51:fd:85:e4:2e:e8:a8:d9:ef:59:97:97:
d1:63:14:f8:50:e6:54:42:e6:85:08:bf:aa:e9:bb:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A0:14:3A:76:33:5B:9E:59:28:7D:F7:E5:40:9D:B0:9A:18:15:9C
X509v3 Authority Key Identifier:
keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f6:c7:2f:3a:7f:01:0e:62:60:8c:8c:42:bd:5f:11:fb:15:
22:97:d4:84:18:0e:67:80:8c:3b:7f:82:00:40:f7:fa:24:19:
4a:47:27:17:48:56:9f:63:8e:c8:c2:bd:7e:4c:d4:4b:87:40:
72:20:a4:c0:6f:ee:70:76:85:eb:39:f8:02:2d:aa:96:63:2f:
8d:06:fc:c1:24:f1:d2:cf:cc:d3:1d:94:88:5a:ef:4e:07:86:
f0:c6:db:5b:45:34:07:b4:cc:94:f5:f0:9c:c2:5d:b7:ac:e2:
46:a3:c9:10:5a:76:7a:f2:f0:fe:0a:08:db:13:a8:ee:eb:25:
77:52:ec:1c:87:d6:f5:43:72:ff:22:75:ab:f9:39:bb:3f:2d:
2a:88:eb:2c:92:90:42:d9:56:0a:97:c3:b1:f1:d4:aa:d5:31:
4d:64:c1:15:74:04:1b:3e:48:e1:b0:7d:34:f8:01:21:b1:a6:
a3:59:f5:b7:4c:14:d1:57:58:f9:d4:19:6c:d6:6a:bf:d8:25:
e1:4a:5d:7c:54:84:26:e4:73:2a:70:fb:d0:83:43:0c:9d:10:
2c:73:8c:45:37:a0:6c:7f:c6:32:f3:c5:6f:38:f6:fc:ed:ed:
47:f2:18:53:1e:05:04:47:18:78:91:b0:42:71:80:f7:c1:64:
c1:75:e6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:35 2026 by rpki-client