
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
File: _ME6qqHk6E6wwly5UOJp_z3bzuA.mft (raw, json)
Hash identifier: Fm/KjITYTc5oGsz7EketRtlMkSPmp2J/l9AwnHs2B4k=
Subject key identifier: E9:E5:67:B8:E6:52:EA:BC:88:D1:73:19:57:C7:63:AA:EA:BE:93:BC
Authority key identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
Certificate issuer: /CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Certificate serial: 019D38D3B6467E25FB7695559616407EA373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
Manifest number: 0A8D
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: _ME6qqHk6E6wwly5UOJp_z3bzuA.crl (hash: /0+cdvZ6RXjkYlgXZy5RnqPcMiIRHNQGbd+W+7hr1Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b6:46:7e:25:fb:76:95:55:96:16:40:7e:a3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=e9e567b8e652eabc88d1731957c763aaeabe93bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:e5:b0:e0:d5:c3:ad:cf:43:22:e1:88:d4:
c7:67:9d:38:13:97:d0:5b:68:aa:78:f0:c7:84:5d:
c5:45:ca:8c:43:29:fc:5b:87:a7:1a:c6:b7:22:6e:
29:0a:4a:b7:6c:6c:4a:95:cf:0f:ef:9f:e7:ed:30:
60:e7:ae:35:f7:68:3a:70:a0:9c:de:34:41:de:38:
50:42:eb:df:cb:2e:01:e9:c7:4c:df:ca:61:6e:7d:
a9:25:0c:7b:da:69:29:65:7f:db:e9:c1:bb:a8:9b:
2c:2c:c1:37:4d:4c:20:cc:12:85:8d:69:15:dc:37:
58:99:f2:96:21:50:f5:12:a9:1a:ba:11:28:f8:15:
bd:da:86:b0:4b:49:97:e9:3f:8a:7c:b2:24:c4:72:
2d:9a:a1:ed:3c:4d:01:39:16:b2:ea:2f:50:fc:2f:
40:3c:70:5a:c9:1a:fe:b7:fe:ca:d2:91:1a:bf:3a:
0a:a8:99:a4:af:96:f9:17:3f:d7:b5:10:ed:62:c1:
07:4a:d6:e6:90:95:49:f1:9c:81:bc:0c:ac:5e:20:
06:14:40:5e:a1:9f:68:be:ed:32:1a:45:1a:91:cc:
c6:2e:79:42:30:c1:bd:16:be:49:40:5d:8b:a9:8f:
04:cb:30:8b:07:23:9d:64:b4:46:e7:a1:15:db:be:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E5:67:B8:E6:52:EA:BC:88:D1:73:19:57:C7:63:AA:EA:BE:93:BC
X509v3 Authority Key Identifier:
keyid:FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d1:22:10:1f:74:1e:4c:38:d2:ec:bf:06:9f:96:5c:09:96:
ac:bf:a1:73:1c:4e:2e:7c:ed:ea:d4:fd:82:92:d0:8b:1a:30:
69:31:ee:6a:54:6d:f6:71:06:7e:84:b7:75:22:d1:98:3d:db:
2a:bd:b1:56:32:12:26:66:d9:2b:fe:ab:04:97:fd:6a:8f:60:
17:bc:bf:d9:db:93:6e:05:77:aa:b4:9e:17:6d:2e:1c:a9:6f:
b9:c1:62:17:75:23:3f:f8:fc:88:f6:51:18:93:e7:16:50:eb:
08:19:4d:28:dc:eb:56:77:95:88:8e:68:bd:93:48:12:36:20:
3c:5b:ab:44:08:45:f7:40:1c:b5:d7:77:85:bf:c1:27:44:82:
94:0c:44:72:2e:26:1e:3f:6b:c9:a3:eb:1e:92:7d:13:be:12:
56:6f:c8:61:cc:13:af:53:dc:3c:e4:21:9e:b6:44:04:bb:5e:
8b:2a:3e:1d:03:b9:c4:25:5c:10:bf:d6:84:e5:06:ff:34:65:
ab:5b:61:be:38:53:b6:fa:5d:7a:df:61:08:25:c1:d5:73:35:
d6:66:63:00:48:be:95:10:fe:ae:e9:2d:0a:38:20:72:3a:47:
b2:90:b9:2a:7a:04:a4:ea:68:8a:cc:09:31:84:16:f4:d6:13:
0d:3e:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:37 2026 by rpki-client