Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: CPQh3CDnJRFiawI/NR69vN7Fa0Pz8EW5sLsWbo4rUw0=
Subject key identifier: DF:86:6E:79:90:94:74:2E:8D:29:2A:3D:FA:55:FF:74:4A:01:4E:A3
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 019D38668C9A82ACFC0E6C9DFE17B3217D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 0BC1
Signing time: Sun 29 Mar 2026 07:02:17 +0000
Manifest this update: Sun 29 Mar 2026 07:02:17 +0000
Manifest next update: Mon 30 Mar 2026 07:02:17 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: 9HTsnEJZDdlheZ9vrwkM87hxQc+qjig8X0QhKHKtNcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8c:9a:82:ac:fc:0e:6c:9d:fe:17:b3:21:7d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Mar 29 07:02:17 2026 GMT
Not After : Mar 30 07:02:17 2026 GMT
Subject: CN=df866e799094742e8d292a3dfa55ff744a014ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:77:be:d3:89:2b:1d:84:fc:dc:54:ba:28:
8d:78:a4:2f:21:7e:1a:38:36:6f:da:57:a1:54:80:
d2:90:f3:b3:f4:58:94:24:b3:c9:3c:cd:99:d5:dc:
3d:42:bc:e2:a5:d3:96:ac:1b:13:cb:0e:7f:55:ec:
f1:1c:e5:62:ad:99:09:08:e7:84:1c:9d:f4:aa:5f:
4a:83:a9:6f:e9:9b:89:7d:93:45:3d:fe:1d:f8:b3:
87:51:c6:67:d3:09:35:1d:f3:f1:95:87:fb:f7:d7:
10:2f:9b:fb:95:05:99:e1:85:3e:e6:19:54:67:69:
6b:bb:e4:5e:d5:d8:64:f4:a4:7e:61:14:29:cd:c3:
fb:e1:aa:f6:7f:c8:ad:d6:37:46:54:1c:90:09:70:
ad:f8:27:de:8e:ab:8e:5f:ad:63:e3:ab:84:04:82:
7d:56:85:d1:c3:8f:e9:68:ff:1c:82:55:0c:7c:55:
ec:3a:2c:52:32:a5:be:75:7f:8c:b9:e9:ad:9d:3b:
36:cd:a8:bd:c1:c3:37:bd:74:b4:98:30:c7:73:f6:
d6:c5:80:04:a5:23:84:7b:0c:b3:6c:50:5e:07:7c:
6e:91:4c:a4:74:45:49:d2:98:9b:5d:21:8e:f0:3c:
76:9e:9e:82:33:99:e1:07:11:b3:c0:fe:1f:dc:8a:
fd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:86:6E:79:90:94:74:2E:8D:29:2A:3D:FA:55:FF:74:4A:01:4E:A3
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e2:88:7e:1b:ed:79:d0:88:bb:13:86:18:86:64:0a:aa:d1:
36:38:39:1c:70:30:82:f3:7f:8f:28:ab:fa:4a:4a:ac:77:9c:
48:05:12:1e:0d:ac:88:cc:7e:43:21:0d:c1:ce:9d:ef:e8:a9:
43:df:76:dc:bb:f1:0c:b9:67:7e:33:61:de:d3:71:9b:f8:c5:
6d:97:26:52:c9:a4:e5:32:f7:b1:52:9b:8d:32:bb:85:4d:22:
fa:ec:1a:9d:69:0f:a3:49:ad:24:9c:55:3b:81:dd:0e:ff:50:
29:94:5d:98:bf:ce:09:37:67:3a:dd:10:ed:6a:f7:1b:41:5e:
a9:fc:07:76:92:a5:9e:27:1e:9f:c0:55:fd:ed:e1:d7:2e:a6:
4e:bf:2b:87:6d:b8:8f:01:bf:91:3d:8f:cb:fa:60:33:2a:05:
d5:b0:ec:4a:06:2e:c2:8d:33:4b:73:58:8b:b2:32:79:5b:9f:
ce:20:38:4b:10:eb:b8:cf:60:1f:16:2d:e8:0e:1d:a3:83:80:
3b:17:9d:d2:50:8f:0c:80:d6:cc:1b:36:15:c7:29:b1:13:3e:
ca:02:69:83:23:59:51:cb:fd:b4:60:0f:78:92:f7:f1:fe:fc:
de:01:46:fa:86:b2:2f:b1:6c:da:f7:b2:16:38:ae:66:a7:44:
64:df:ae:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:00 2026 by rpki-client