Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
File: FCKHkIfdKSaAJjvDlOMch1lyLZA.mft (raw, json)
Hash identifier: 60iGI35a+Hw5bzYPf+yMJY26Lv9T+MvzXLoNV3EKvpY=
Subject key identifier: C6:65:DE:98:0C:99:74:FA:99:C4:F3:07:EF:AA:46:EE:D7:8F:3A:F0
Authority key identifier: 14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90
Certificate issuer: /CN=1422879087dd292680263bc394e31c8759722d90
Certificate serial: 019D37C0E4B08221C419442D3379B5E5542C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
Manifest number: 0253
Signing time: Sun 29 Mar 2026 04:01:21 +0000
Manifest this update: Sun 29 Mar 2026 04:01:21 +0000
Manifest next update: Mon 30 Mar 2026 04:01:21 +0000
Files and hashes: 1: FCKHkIfdKSaAJjvDlOMch1lyLZA.crl (hash: c7vVmgFQhK+Dc97f215Afd8ZOHNrEJ99b+wp8sm01sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e4:b0:82:21:c4:19:44:2d:33:79:b5:e5:54:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1422879087dd292680263bc394e31c8759722d90
Validity
Not Before: Mar 29 04:01:21 2026 GMT
Not After : Mar 30 04:01:21 2026 GMT
Subject: CN=c665de980c9974fa99c4f307efaa46eed78f3af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:9a:f7:8e:ce:7f:98:e7:b5:b3:20:05:7f:
ab:38:66:95:36:93:3d:00:77:d1:f3:26:4a:64:93:
90:b7:fc:b3:fe:e7:40:36:19:a2:35:4e:6c:89:f9:
f8:3d:04:82:b0:fb:6e:d3:23:f9:15:5b:cf:44:0a:
97:89:ab:00:dc:69:31:50:6a:ca:2e:20:65:00:61:
84:f0:95:cf:32:cd:00:13:33:de:06:b4:d7:98:3e:
93:2c:dd:02:91:0c:1c:ca:bf:2c:73:50:b5:7e:d2:
ac:94:7b:99:13:12:e8:ca:a8:13:4d:ce:6f:bf:9e:
d6:fd:f2:37:d7:58:b8:2e:7f:d4:10:a6:fb:50:3d:
88:aa:9a:81:94:36:68:ea:29:05:30:e6:40:4c:14:
8d:2c:ad:d5:72:e4:3d:64:c0:4e:dc:46:a5:82:6d:
e4:53:a0:ab:d9:3f:d1:f7:8f:15:37:d4:8b:75:a2:
c8:ef:b0:14:ef:b6:ed:b6:ba:94:f8:39:a3:da:5b:
d8:d0:5f:2f:20:e5:60:92:b8:32:ef:20:dc:a5:f7:
eb:76:9f:5f:d1:7c:76:43:e3:e4:dc:00:1c:62:1c:
fd:3c:8c:1e:bd:55:21:d1:58:97:dc:77:c2:72:87:
62:b4:94:9e:e6:44:a8:45:d9:40:c7:a6:8f:a7:dd:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:DE:98:0C:99:74:FA:99:C4:F3:07:EF:AA:46:EE:D7:8F:3A:F0
X509v3 Authority Key Identifier:
keyid:14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b0:96:54:89:b0:73:69:b8:dd:bf:a0:d4:39:a6:1b:43:46:
a6:29:bf:d8:0f:cc:43:50:7e:34:ca:b7:5b:85:c5:a9:94:0c:
aa:f9:85:a8:70:a6:d2:7d:ff:22:0b:9d:50:c5:e0:8e:e1:3b:
fa:1a:68:23:2f:fc:7b:6a:b6:8d:fd:1d:4b:18:96:d3:95:e7:
cd:8e:b8:ce:75:cb:9a:c5:ab:51:c9:a0:87:39:6a:63:a3:4e:
53:d8:bb:d7:37:3b:ec:87:d6:3c:c2:bc:58:80:26:bc:59:cf:
db:ad:63:45:1c:1a:96:d0:cd:26:dd:0a:c0:76:45:eb:e5:75:
49:c8:31:81:54:1e:88:06:f4:72:17:64:8f:fb:5d:35:28:c0:
18:30:fc:64:e6:03:a2:ad:84:f7:0a:66:f0:71:73:17:2a:18:
cc:7e:e0:1f:4e:28:3b:c5:4a:e9:f4:79:fd:5e:06:e5:01:9b:
ab:90:ce:3f:1c:cf:1a:3b:33:06:55:31:06:59:9b:a9:dc:ff:
38:cc:4b:f4:35:c8:c6:02:6d:80:4c:b6:dd:3b:a9:81:99:2d:
f3:15:2b:1c:c6:d1:96:f7:50:2e:a1:2d:78:48:40:58:53:1e:
e2:5b:3d:0d:d9:87:40:c4:6b:f8:45:5c:56:32:91:1d:c9:41:
35:6a:d5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:12:41 2026 by rpki-client