Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: 8f+wiD6GWwiepqKmXfGhA+kDKbHkPx+XrV6KvCr91FY=
Subject key identifier: DD:50:13:02:EA:D1:07:95:33:6D:1A:68:88:B8:13:2D:4C:32:1D:F8
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 019D38D2FE0D752042C9C76ED73E0683BBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 1879
Signing time: Sun 29 Mar 2026 09:00:44 +0000
Manifest this update: Sun 29 Mar 2026 09:00:44 +0000
Manifest next update: Mon 30 Mar 2026 09:00:44 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: 2UqtaAqekVNOM7dlhLz1kbly61nykO4LTWKVciRACNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:fe:0d:75:20:42:c9:c7:6e:d7:3e:06:83:bb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Mar 29 09:00:44 2026 GMT
Not After : Mar 30 09:00:44 2026 GMT
Subject: CN=dd501302ead10795336d1a6888b8132d4c321df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:ce:6d:b3:8c:e5:e0:6c:0c:38:f2:b3:69:
5f:eb:b2:b9:87:6a:7f:5b:44:e4:13:9a:fa:db:45:
d3:30:7c:50:21:9d:10:d4:25:85:57:e7:85:e3:b2:
2f:4a:5b:5b:08:f3:b3:c2:0e:6f:78:0c:7b:06:fb:
d2:02:db:31:86:69:ed:61:c4:b4:05:26:a0:76:de:
ad:bb:cc:a6:79:8b:9f:00:df:62:c3:e5:89:34:88:
23:a5:f0:0d:0d:43:c4:90:d9:61:b3:70:86:f8:6d:
78:34:3a:da:89:06:93:26:36:c1:09:31:ca:36:eb:
31:d7:ce:43:51:81:9c:86:ea:f6:e0:e5:be:9c:b4:
91:51:74:c1:64:a3:51:22:a9:6e:10:2c:ed:cd:ad:
26:77:99:48:57:1d:62:74:c6:c0:10:e8:a4:4c:67:
1e:6e:2b:ae:e1:3f:43:63:9e:bd:37:f2:e3:1d:88:
ee:9e:e4:92:fe:ed:7a:ad:e1:2c:a6:1a:f8:c6:07:
ea:24:b5:53:10:e4:50:a2:fe:6e:dc:47:5c:bf:69:
6d:f0:1c:69:29:24:95:6e:a8:27:ff:bf:d8:01:cf:
39:65:06:eb:d6:6e:3c:22:af:03:10:dc:ec:5d:34:
2b:85:ee:61:29:be:93:ad:dd:43:81:7f:c3:67:50:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:50:13:02:EA:D1:07:95:33:6D:1A:68:88:B8:13:2D:4C:32:1D:F8
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ac:a7:fc:86:72:ea:1e:55:4a:00:75:f9:ed:31:47:e0:4e:
be:98:19:4f:01:2f:3e:50:e9:c4:f1:56:43:48:fa:23:75:66:
f9:90:93:16:3f:04:4a:8a:e8:84:37:f2:69:2e:24:fd:81:34:
5a:35:82:ef:f6:91:13:04:f3:a2:c2:37:95:16:a1:78:66:71:
67:12:58:f3:fe:34:28:5c:80:32:6d:c6:e8:6d:17:db:28:29:
dc:53:01:e1:13:3b:ae:bd:ea:9c:cb:4d:62:0b:9c:d8:4f:f2:
d5:09:64:99:82:15:00:34:24:b3:43:89:9a:d7:b3:16:67:d3:
19:ca:3c:ce:ea:ac:7e:d0:4c:5e:ad:04:31:d0:cd:ea:9d:3e:
c8:9a:53:be:cf:8f:2b:de:58:d9:d1:4d:80:02:6d:0e:6f:e1:
9d:ee:ab:d7:15:3d:dc:a8:d8:db:5e:86:0e:31:5a:f7:cc:f1:
fb:b5:09:25:01:83:18:3e:23:bd:7a:53:f0:21:56:2f:80:ab:
77:0c:71:b6:10:cb:ce:6b:7b:28:01:3b:b9:5a:cd:d4:97:13:
98:55:0b:3e:bf:72:ef:1b:9e:89:38:ae:86:1b:35:75:3f:0c:
81:a4:ac:b1:c0:a4:68:cd:b1:4f:38:c0:00:7f:6f:7f:30:09:
0d:05:21:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:52 2026 by rpki-client