Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
File: FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json)
Hash identifier: Z7+EUyuYmTdP+l+bnkFBFVnkKtl6xyNVAscM1W3qse8=
Subject key identifier: DA:75:2C:B9:EE:93:7E:7C:88:A7:31:D2:C4:C1:93:92:32:9A:7A:58
Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
Certificate issuer: /CN=17279aad17df6bf657565ae5a93eb90985374a3c
Certificate serial: 019CAD22401A26C5B5BDD55C331EE71F7CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
Manifest number: 17D7
Signing time: Mon 02 Mar 2026 06:00:28 +0000
Manifest this update: Mon 02 Mar 2026 06:00:28 +0000
Manifest next update: Tue 03 Mar 2026 06:00:28 +0000
Files and hashes: 1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: QucpfgqX5QXVlaoaJ3HgE5aUOyJSpt91mgHeVx6Su0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:40:1a:26:c5:b5:bd:d5:5c:33:1e:e7:1f:7c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c
Validity
Not Before: Mar 2 06:00:28 2026 GMT
Not After : Mar 3 06:00:28 2026 GMT
Subject: CN=da752cb9ee937e7c88a731d2c4c19392329a7a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:a5:80:03:83:d6:8b:0a:4b:9e:6a:05:5f:
fc:6b:2f:42:67:c4:8a:60:31:9e:c5:80:5a:1c:1c:
c7:7e:40:17:bb:f7:6a:5d:4f:f8:7e:aa:66:4c:ab:
ad:52:2a:47:14:07:cb:cf:e8:b5:32:f5:e9:31:1d:
40:c2:fa:cd:d2:b1:57:0b:0e:7d:cf:35:8c:de:f4:
30:12:31:49:eb:7f:c2:32:f0:f3:4f:23:b9:d8:44:
2b:86:92:5f:c4:47:5b:37:93:4f:a8:d5:40:a2:43:
7b:75:76:6b:d5:05:25:6e:74:ae:fe:61:fe:74:10:
57:49:59:24:88:db:fd:e3:47:11:03:29:14:bf:f4:
0d:ee:52:6b:6e:5d:c8:b6:ab:50:3b:2d:30:02:b0:
25:03:82:31:32:04:99:df:bb:66:ab:db:2b:83:ca:
65:c2:5c:04:01:e5:a3:a3:4a:0a:4a:ac:56:00:42:
44:f3:36:c9:62:50:d6:c1:e1:69:71:06:1e:8d:10:
7b:9e:4b:ec:e8:39:36:10:67:a2:08:a4:8b:43:14:
be:6a:62:16:d6:bf:6e:94:86:1c:bb:6d:23:80:09:
1e:cd:95:48:e0:69:73:5d:28:79:bc:b4:f2:01:38:
ef:6d:4f:97:ca:38:96:a1:80:c7:ba:d2:c1:f7:c3:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:75:2C:B9:EE:93:7E:7C:88:A7:31:D2:C4:C1:93:92:32:9A:7A:58
X509v3 Authority Key Identifier:
keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6d:1e:0f:32:b2:d3:ac:79:7b:82:1b:76:4b:d3:d6:da:c3:
18:07:c8:24:16:4b:52:a6:cb:5e:8c:a6:d3:2e:44:65:cc:f6:
3a:d0:2e:3d:c1:5b:03:0f:39:0e:36:5e:b7:e7:aa:8a:f8:77:
43:df:8e:fb:b4:c0:99:93:18:fc:d1:20:6c:c1:f7:49:e1:02:
0f:af:a4:1d:4e:a2:fc:51:49:80:f7:1e:91:8e:49:9c:62:b8:
c2:e9:6c:39:70:55:f2:c7:aa:8a:20:e2:48:5e:b2:18:d3:7d:
3e:b6:19:bc:b4:7b:d3:8c:0c:5a:62:ed:70:c9:a4:59:35:45:
73:42:e4:b4:39:e5:05:e5:a7:8c:3e:96:0e:4c:78:95:a8:16:
45:91:83:f2:6b:1e:7a:62:fc:38:b0:96:cf:a6:b4:60:ed:9c:
ae:fd:0d:98:0b:c9:99:d8:ff:b2:c5:ca:14:57:24:f0:cf:8b:
d1:78:e1:50:b7:ac:56:be:e8:fa:d8:95:4c:be:ba:01:c9:da:
ef:a0:7b:79:ee:f2:37:36:2d:42:65:d3:b3:20:bc:ac:69:63:
16:c9:c6:57:cb:c6:cb:c7:ea:a7:a2:2d:92:77:b8:28:96:4a:
ff:a0:cc:ed:4a:94:df:2f:34:15:9d:10:01:fe:5d:92:43:c2:
1e:86:23:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:04 2026 by rpki-client