Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft
File: fxCetjA1fr3GKYEaYuYrGFenEyo.mft (raw, json)
Hash identifier: 9HUk7xegx6bENsppMMZy6cNDIYQq7vjwC+Fet3TiYRg=
Subject key identifier: A0:CD:62:DC:E3:C6:F6:1A:2D:8C:D5:D4:FF:FE:5A:FD:88:BF:92:44
Authority key identifier: 7F:10:9E:B6:30:35:7E:BD:C6:29:81:1A:62:E6:2B:18:57:A7:13:2A
Certificate issuer: /CN=7f109eb630357ebdc629811a62e62b1857a7132a
Certificate serial: 019D3941B388A822CFE43E151809DC039E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxCetjA1fr3GKYEaYuYrGFenEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft
Manifest number: 0124
Signing time: Sun 29 Mar 2026 11:01:40 +0000
Manifest this update: Sun 29 Mar 2026 11:01:40 +0000
Manifest next update: Mon 30 Mar 2026 11:01:40 +0000
Files and hashes: 1: fxCetjA1fr3GKYEaYuYrGFenEyo.crl (hash: vM9SNDx/gdqUnUPI9HwK06bvX+MUgQ1Czw3+f14te40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxCetjA1fr3GKYEaYuYrGFenEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:b3:88:a8:22:cf:e4:3e:15:18:09:dc:03:9e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f109eb630357ebdc629811a62e62b1857a7132a
Validity
Not Before: Mar 29 11:01:40 2026 GMT
Not After : Mar 30 11:01:40 2026 GMT
Subject: CN=a0cd62dce3c6f61a2d8cd5d4fffe5afd88bf9244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:f5:d0:3e:76:dc:9e:51:b3:e7:8f:60:46:
b7:79:9e:ec:96:9d:a2:8a:c6:55:7c:df:33:18:93:
1a:64:32:3f:eb:f9:f9:98:7d:61:be:7b:e0:58:82:
b3:c2:71:d7:6b:00:43:1d:7b:24:d3:b4:e4:e4:cb:
2e:4c:01:d7:52:0a:7d:3c:b6:0e:0f:e6:43:88:0a:
b3:0b:ab:11:a2:40:59:5b:4c:ed:0f:e8:46:66:97:
02:3c:0c:31:5b:1c:56:1c:46:ad:71:af:c4:fe:60:
37:fd:64:96:1f:11:b4:f8:9a:e7:23:03:5a:5d:a8:
f8:61:0b:f8:3e:a7:b6:fb:39:cd:8a:7c:b4:c3:79:
b2:40:c1:5e:f3:50:14:0e:b4:cf:c1:90:e5:19:6c:
90:7c:c7:46:1a:10:39:82:a9:76:c2:c9:c5:bd:29:
45:25:b8:aa:bf:a2:bb:21:a1:28:59:60:46:4c:cb:
fe:ec:3e:60:cd:41:6e:a5:bf:8c:dd:52:7a:a6:6c:
bd:1c:e8:1c:31:97:5f:78:06:8b:53:b3:1a:c0:9c:
9b:69:48:8b:37:84:17:67:1e:e3:f8:c1:87:9c:d4:
19:f9:29:30:b9:c2:77:83:89:4f:c5:e6:9d:19:5e:
f5:0b:60:71:97:7f:f2:94:d1:4a:ed:20:b1:c5:a5:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CD:62:DC:E3:C6:F6:1A:2D:8C:D5:D4:FF:FE:5A:FD:88:BF:92:44
X509v3 Authority Key Identifier:
keyid:7F:10:9E:B6:30:35:7E:BD:C6:29:81:1A:62:E6:2B:18:57:A7:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxCetjA1fr3GKYEaYuYrGFenEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/95030e-c5cb-45bf-a3d9-f8b63dede56c/1/fxCetjA1fr3GKYEaYuYrGFenEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9d:96:04:e0:d9:3e:6e:4a:4a:b9:22:99:d1:1f:3d:43:a0:
48:7f:1a:c4:aa:42:c3:35:26:6b:a8:d7:54:07:5e:f2:35:ec:
9a:fe:2d:7a:91:30:24:f2:0e:28:4e:5b:de:5d:66:9f:0a:8e:
9d:fc:c0:80:58:a3:56:55:f6:39:6b:9b:76:39:1b:23:95:3f:
84:b8:13:d3:47:fe:a2:84:49:d4:d8:4b:d9:f4:40:a1:00:a2:
43:1f:f1:44:f2:da:3b:a6:5c:59:c9:9b:31:56:49:99:85:b2:
19:e9:b4:1e:a5:c2:1e:6e:0d:06:ac:2c:26:56:e9:8a:eb:20:
10:cd:02:58:4c:af:fc:0a:3c:0f:cf:5b:c4:96:07:09:30:64:
81:d1:a5:fb:9f:e3:8f:ed:4f:70:38:ec:5f:e6:0e:8b:75:c3:
f4:72:9b:82:fc:1a:b5:61:24:bf:b1:85:5c:5f:7b:3d:ec:e1:
24:04:19:b9:9e:70:87:7b:6b:83:d4:19:5c:39:a1:12:83:f8:
90:a9:8b:ef:88:af:8a:3d:87:02:e9:97:9c:66:73:11:5f:21:
26:6a:33:40:c3:ba:5c:e7:1b:cc:84:bb:ea:bf:fa:ce:50:77:
8e:fe:67:ca:6f:26:50:8e:dd:ec:83:20:7d:df:e2:fe:73:15:
d0:cc:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:04 2026 by rpki-client