Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
File: FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json)
Hash identifier: W6GUgnG74kvZvMzO+OvmVRusiq/aDpPYSBGpLnyxDos=
Subject key identifier: 7F:DE:F2:2B:02:18:5C:C9:5E:A0:F9:C2:8D:2D:25:F1:E9:5A:6B:CD
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial: 019D3865EB852E0F6B82D0019E8976592F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
Manifest number: 11B3
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: h29PhFK2E0cpqdNMaLT7C9SYMbhdVObOuXPWy/k0LJU=)
2: ujvUCeMeHFa3WfWN6G6OHhHxhuI.roa (hash: pG5oPA2yhKapDXzeja3NTKTYlcJo6W9vaHYK9VMmI4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:eb:85:2e:0f:6b:82:d0:01:9e:89:76:59:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=7fdef22b02185cc95ea0f9c28d2d25f1e95a6bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:9e:5a:b2:e3:c4:15:9a:71:00:eb:a2:b8:
3a:4f:cc:21:52:46:95:18:4e:c0:77:28:78:3e:95:
7e:c1:e2:26:29:a4:e7:37:c6:ad:a1:a1:fb:0a:b2:
86:0a:9a:8c:6a:0a:37:20:20:2d:f9:0c:3e:9f:fe:
3f:fa:57:83:4e:1b:45:f2:a6:75:e4:df:16:10:93:
d9:db:42:fe:db:9b:4d:7f:97:b6:7a:e6:5a:c4:a0:
36:91:0d:be:f4:0d:80:2c:74:07:78:b4:b9:b3:28:
c6:d1:5a:c7:fb:a6:cc:53:2f:9c:5b:de:b0:0a:91:
e1:65:2e:9e:90:2d:24:c0:e2:5f:18:d7:7a:fe:01:
10:d6:57:47:ff:99:0a:8e:34:8e:01:48:af:7e:81:
5c:bd:00:1b:7b:81:bf:d9:72:fd:8c:b2:63:9b:ec:
e1:11:82:a6:6f:c0:bc:62:55:a0:20:72:3b:95:fe:
95:cd:d7:85:b7:1c:71:3d:99:16:a9:8c:85:00:fd:
8b:3a:46:c5:1c:53:c0:67:a0:8b:20:b3:2a:55:af:
24:21:81:d9:97:da:df:8e:da:77:1f:a1:b6:ff:f6:
7b:a1:0b:16:62:d7:14:d3:c4:f2:96:ed:20:6a:9f:
1f:7f:92:94:88:12:42:1d:1a:06:8d:10:03:69:8d:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DE:F2:2B:02:18:5C:C9:5E:A0:F9:C2:8D:2D:25:F1:E9:5A:6B:CD
X509v3 Authority Key Identifier:
keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4a:c7:67:3e:97:e2:fb:d0:fa:00:98:90:66:08:65:f3:45:
be:8f:45:6a:16:33:fa:66:2c:a2:45:72:d8:9c:20:ea:c4:8d:
73:48:4b:53:cf:68:25:83:fa:a8:82:6d:bd:32:04:9a:70:98:
9e:c5:e4:86:6a:2d:90:f5:93:7e:e7:8e:24:6f:2c:72:d7:ab:
23:f6:43:dc:3a:de:45:42:a8:42:fa:83:dd:79:35:60:01:d7:
39:c1:21:bf:49:4e:14:e7:da:a5:39:d0:8f:0c:85:9c:72:5e:
c4:ea:d1:4e:9d:36:30:80:1b:20:81:85:4e:a0:43:0e:5d:b9:
7b:4a:d4:ea:ba:da:ca:78:94:d2:df:bf:8a:d2:ec:9b:8b:28:
0f:9d:1d:a0:a9:f9:87:c8:57:a3:be:c2:c7:88:86:ad:83:99:
0d:d6:82:b6:58:6d:8e:e4:ef:c0:97:14:ce:93:92:c0:87:02:
7e:dc:91:82:23:e1:07:b0:2e:af:12:d5:8c:3b:29:90:ce:45:
e7:c1:f6:16:fb:a5:ab:73:15:f0:23:b4:db:4c:1a:59:b8:52:
e2:59:79:b4:dd:c1:a2:83:6f:08:1d:32:58:1d:0c:96:4c:8f:
b0:90:90:32:4a:d8:0a:76:80:db:f2:99:94:95:60:1e:46:61:
cc:69:e2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:15 2026 by rpki-client