Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
File: fPxZzhNuPpOobeVfBdSaWeFcu78.mft (raw, json)
Hash identifier: V5iaraERQMXLQvnsmGeV+OCKynRWgRZ1IwmA7hCXxPk=
Subject key identifier: C3:91:5D:B3:B1:0C:B6:DD:F6:98:28:6B:53:F1:FE:88:50:6A:71:79
Authority key identifier: 7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF
Certificate issuer: /CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf
Certificate serial: 019D37C113AFA13BB397856A2003ADBD63FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
Manifest number: 0C2B
Signing time: Sun 29 Mar 2026 04:01:33 +0000
Manifest this update: Sun 29 Mar 2026 04:01:33 +0000
Manifest next update: Mon 30 Mar 2026 04:01:33 +0000
Files and hashes: 1: fPxZzhNuPpOobeVfBdSaWeFcu78.crl (hash: 9HU5fYOFMtjhmuna7UFw56xLhfZY5NAntbDaQHUAWUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:13:af:a1:3b:b3:97:85:6a:20:03:ad:bd:63:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf
Validity
Not Before: Mar 29 04:01:33 2026 GMT
Not After : Mar 30 04:01:33 2026 GMT
Subject: CN=c3915db3b10cb6ddf698286b53f1fe88506a7179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:43:da:60:ab:1d:d1:e0:67:e2:ad:d8:69:
06:a7:ea:c5:ca:bb:1e:17:9a:95:e5:4a:d3:8b:d6:
79:04:f8:48:5b:54:6c:eb:74:e6:df:cf:93:f1:cc:
06:07:34:74:51:b8:5d:82:9a:b7:e4:e0:83:c1:9b:
14:ee:6f:f3:2b:86:76:9f:d8:b6:52:95:a9:03:da:
82:8b:10:2d:79:20:e9:c3:dc:b1:fc:e3:e2:ad:44:
36:94:0f:67:d2:1e:9b:d1:8c:fd:27:3a:a3:3a:88:
de:39:79:a4:d5:9a:62:f9:16:0b:7c:7e:c3:6f:5c:
fd:22:a5:ad:3a:57:48:8b:b0:76:63:5a:47:3a:79:
73:3c:48:e0:e8:52:ed:73:2c:9a:4b:18:e7:52:62:
bf:70:6b:56:45:17:95:4f:57:5c:51:4a:06:85:02:
c3:fc:b2:38:4e:fb:e5:6f:83:14:03:53:3b:2f:4e:
48:73:52:be:52:a5:fc:3d:ca:57:f7:9c:5f:fd:90:
a7:45:c7:ce:3d:14:7e:f4:69:88:0b:ec:d6:53:da:
64:22:53:36:ec:01:96:fc:7c:9e:2c:72:4d:ae:91:
5a:8c:b3:9c:e6:02:70:7b:0b:9a:c6:51:43:82:6c:
84:b1:2e:0d:44:4c:85:63:72:18:f0:9a:cf:f3:f2:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:91:5D:B3:B1:0C:B6:DD:F6:98:28:6B:53:F1:FE:88:50:6A:71:79
X509v3 Authority Key Identifier:
keyid:7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:eb:b7:e9:aa:e7:8d:a4:54:ec:50:2b:a9:8b:5e:dd:fe:98:
68:68:17:6d:c4:39:2c:4d:f3:08:8d:63:f4:4e:2f:61:91:50:
9b:da:b3:2e:3e:e5:1b:ae:d1:bc:09:71:79:7c:dd:73:cd:68:
f9:1c:a8:45:b7:e0:76:ce:a5:a0:bd:89:77:36:eb:1e:69:33:
67:88:f1:82:0e:38:86:2e:af:7c:1d:57:94:8a:47:ce:ce:9e:
16:6f:a9:3e:87:a3:d8:d1:a5:de:10:c8:c8:2f:22:54:74:82:
b1:5f:5b:0c:0b:fd:04:e6:72:2e:67:84:ed:69:ab:2d:ca:58:
60:b7:24:ef:5b:d0:77:f7:cb:de:a9:fa:c3:48:6a:81:9d:e4:
ca:47:0d:fa:1f:82:64:1c:d1:a0:cf:95:72:8f:1b:f7:e7:5c:
d3:48:fe:7a:9d:c5:8e:cf:10:9e:10:11:7b:ac:25:80:6e:e7:
99:5a:fa:12:71:38:6b:ba:60:ac:be:f9:bd:5e:b1:b2:7b:0b:
d5:f1:33:a0:02:0b:3d:f0:2d:af:8c:89:55:ee:50:73:73:84:
4c:cd:1c:1d:84:f5:5c:f1:82:5e:67:e8:0c:15:27:e3:fc:2a:
cf:30:38:35:fa:f6:3d:f8:50:b4:5a:99:c3:12:0a:74:fc:1b:
79:c8:25:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:18 2026 by rpki-client