Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json)
Hash identifier: gp9UTrhBYMnGpJOcI+/aVqRzDtYZ1AkvMg4LXHfgqMw=
Subject key identifier: CC:D9:D4:3C:BA:44:5D:C8:DE:84:F6:BE:B3:44:6C:14:E3:B0:BC:9A
Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
Certificate issuer: /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Certificate serial: 019D9A7516B588A5A824D6CFB95EBECDF6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
Manifest number: 05CE
Signing time: Fri 17 Apr 2026 08:00:57 +0000
Manifest this update: Fri 17 Apr 2026 08:00:57 +0000
Manifest next update: Sat 18 Apr 2026 08:00:57 +0000
Files and hashes: 1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: RezpZbGBQvPKjNfsW+h97hck0NziqnMOp8eKNDj+lE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:16:b5:88:a5:a8:24:d6:cf:b9:5e:be:cd:f6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Validity
Not Before: Apr 17 08:00:57 2026 GMT
Not After : Apr 18 08:00:57 2026 GMT
Subject: CN=ccd9d43cba445dc8de84f6beb3446c14e3b0bc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:4f:2d:5a:c3:dc:c8:a6:b5:38:80:1e:96:
d3:e3:3b:92:ec:58:c9:99:9f:62:5b:e1:6c:7e:c9:
5d:3b:a4:b5:75:7f:30:aa:39:89:8f:25:62:16:d9:
6a:12:69:9b:4a:06:de:d1:9e:ea:df:43:13:7f:53:
98:e1:ee:fc:72:ca:82:44:60:e3:48:67:32:4b:30:
24:ab:7b:b0:4a:3a:b4:73:cb:e4:65:fb:94:9f:86:
1f:c7:d0:bf:6a:a2:31:26:ef:d6:e0:e4:29:a3:1e:
0f:0f:c2:02:80:bb:38:e8:3d:c7:43:4b:db:13:3b:
20:e3:87:5f:7c:1a:46:2d:50:5b:39:f3:50:70:29:
b2:60:35:f1:a9:a3:a5:c2:24:6b:28:0c:33:eb:3b:
68:3a:9f:b6:21:1d:f8:10:dc:ee:77:74:05:f5:00:
d1:65:9c:f8:9c:2c:24:e4:dc:0c:f1:51:5f:04:21:
4e:5d:7b:b0:39:d6:d1:bf:3c:49:a3:c1:68:9d:d5:
55:15:84:2f:73:0b:0a:fd:43:0a:87:f4:61:a1:45:
cf:49:a3:0c:e4:77:ab:48:09:38:08:e1:67:19:10:
da:e2:cf:29:34:26:05:8e:8d:57:9e:64:d7:d0:03:
9a:b0:dc:1d:dd:26:43:9a:fa:73:5a:83:f4:b1:79:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D9:D4:3C:BA:44:5D:C8:DE:84:F6:BE:B3:44:6C:14:E3:B0:BC:9A
X509v3 Authority Key Identifier:
keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:69:1f:30:e6:74:99:bd:4f:98:98:58:f1:fd:0a:19:b8:69:
92:fb:e8:1d:fb:db:2f:af:eb:c0:10:b7:df:a8:ca:ad:25:6d:
32:ce:fb:e6:6b:26:c2:ca:66:e7:2e:7b:43:07:96:60:f7:17:
05:02:60:5e:6b:3f:90:92:b0:fb:39:f1:f6:9d:26:d2:ea:e2:
23:4f:a4:8e:f6:de:cb:89:9c:78:21:0b:51:e9:cf:0d:90:cc:
38:02:ae:70:1a:67:8a:c3:95:9f:6e:49:31:c6:56:4a:ca:6d:
75:cc:0e:c6:dc:fe:c7:05:bb:7d:8d:23:af:ea:3c:03:23:76:
8d:5c:c3:44:58:41:ec:55:63:68:fe:14:67:fd:66:56:1c:3f:
1c:ac:20:26:44:cb:bb:55:10:e7:a9:e9:fc:31:cf:14:12:09:
eb:83:06:6f:b3:18:f1:95:81:24:62:29:c3:2c:2c:d4:54:ca:
71:0a:25:fb:eb:6c:6e:97:14:5c:a3:9f:6a:0e:b4:da:60:8a:
ca:ff:c0:4c:91:32:ad:4e:64:f3:76:35:6e:69:b2:a8:e6:c3:
c7:18:e9:a5:64:db:53:01:32:03:a0:df:6d:8a:14:7f:04:90:
73:ab:a3:27:03:8a:6d:1d:27:a4:dd:63:36:a9:83:71:70:41:
1f:ba:ed:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:17:51 2026 by rpki-client