
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
File: fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json)
Hash identifier: BzZwcDa/NQSy77TJ7mcZJ2vPP/i8+GtGWevoj3E9V+Y=
Subject key identifier: 5A:F2:6F:36:6D:94:D1:40:0B:9C:19:8A:1A:93:E0:AD:82:20:36:12
Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
Certificate issuer: /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Certificate serial: 019CAC0FDDA80D9CEA4753F88E2ECDC6A41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
Manifest number: 0485
Signing time: Mon 02 Mar 2026 01:00:46 +0000
Manifest this update: Mon 02 Mar 2026 01:00:46 +0000
Manifest next update: Tue 03 Mar 2026 01:00:46 +0000
Files and hashes: 1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: NG4QMPsfMpdahd281AqdAQjL4XUA+PhrWfr4jII0VtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:dd:a8:0d:9c:ea:47:53:f8:8e:2e:cd:c6:a4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Validity
Not Before: Mar 2 01:00:46 2026 GMT
Not After : Mar 3 01:00:46 2026 GMT
Subject: CN=5af26f366d94d1400b9c198a1a93e0ad82203612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:e0:b4:b1:1a:9d:1e:77:d1:05:75:39:98:
1d:4b:cf:0b:8e:69:eb:b4:62:e2:03:22:f2:86:b2:
43:51:26:c2:4a:8b:f1:31:dc:35:55:31:f3:e8:d8:
bf:f8:40:2c:dc:b1:8e:54:fb:03:1f:26:f5:9e:1b:
a6:0c:70:37:d2:f2:6e:be:16:d5:65:cd:13:f6:b5:
72:db:fd:95:e1:69:4f:81:e7:49:03:2d:3a:1b:61:
6a:2e:48:08:fe:9b:a5:24:ce:b8:d4:93:27:63:ff:
a1:bc:e7:06:7b:71:2d:af:4c:cd:57:20:95:fa:07:
d2:1a:f5:ae:51:d6:ad:1b:20:9a:4c:5e:39:a0:b4:
b7:1c:fa:2e:84:81:5f:de:06:6e:21:62:1a:94:77:
75:ec:37:3c:a8:e0:2e:ea:e4:c0:16:e1:45:a8:f1:
dd:a4:0f:cb:5d:fe:4b:e3:ab:c8:eb:17:36:71:80:
44:ba:9f:4c:e7:0c:1b:0c:5e:30:b8:8c:a3:0a:5c:
52:ec:e0:83:51:15:fb:17:64:47:4f:49:b8:84:79:
9a:6e:3d:4d:e7:8a:e5:6b:59:99:b5:e7:20:a6:1a:
c9:ba:88:ce:ac:ee:0c:8a:70:61:65:88:34:a6:f2:
ed:93:ac:80:f1:46:e6:df:01:2f:98:9e:ef:fe:d2:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F2:6F:36:6D:94:D1:40:0B:9C:19:8A:1A:93:E0:AD:82:20:36:12
X509v3 Authority Key Identifier:
keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:92:08:96:22:1d:81:34:b5:b0:41:1a:e3:f0:6f:b9:13:95:
bf:06:13:6e:78:32:d4:da:e4:00:40:71:5d:0e:62:9f:23:4e:
bc:40:6e:9b:c4:fb:17:65:66:b2:c4:ce:23:b1:4d:33:0c:59:
67:8c:21:e6:60:57:36:84:77:77:a6:cb:64:80:be:7c:70:98:
36:60:58:e2:a0:a4:6b:58:1c:52:83:17:b3:91:00:ea:06:02:
04:10:68:2f:f5:a0:94:e5:64:73:b0:2d:b0:f7:84:f6:c2:45:
53:14:a1:62:9c:c6:d9:34:b1:d5:6b:fc:2d:27:e1:4b:d6:59:
7f:c8:dd:e1:5f:58:53:be:b3:41:c7:a6:0f:fe:35:49:a5:b2:
db:cb:42:6b:45:fc:92:34:89:75:71:5f:8b:75:6b:43:00:59:
17:bf:cb:ce:f1:da:f4:43:e7:97:94:7f:12:2c:73:20:80:f5:
c7:8c:af:ca:5a:ec:93:67:69:8f:9b:79:22:7b:9f:4e:19:8b:
03:cb:18:fb:85:50:8a:23:3a:17:15:c5:5c:f6:29:41:63:10:
fe:04:e2:25:f2:bb:9f:c0:d0:f3:48:22:2e:14:48:e1:d4:ff:
ef:29:42:b0:4e:02:4a:8e:b7:08:43:21:35:57:37:94:89:00:
06:f2:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:45 2026 by rpki-client