Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json)
Hash identifier: ULfo936FqBHhkTWK6L1iqXdDtAQWxzORfOS4bi6Qy7A=
Subject key identifier: 1A:FE:5D:27:67:58:A0:8A:7D:4E:C2:2D:24:41:89:E0:6E:AC:CD:04
Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Certificate serial: 019D37F72ADB50B97E2AE04124FBD663049C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
Manifest number: 0C9D
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: BEhdH5NccPmxrpFXytSHYTwqLlFTRqxgdt3mc5rp1Uw=)
2: _skMItwD6Eu91kipg5Jm13IU69k.roa (hash: v6QmCXfDrAwGVhq/iR49FnGvFa53FGwkH8sDBGvrAt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2a:db:50:b9:7e:2a:e0:41:24:fb:d6:63:04:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=1afe5d276758a08a7d4ec22d244189e06eaccd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:ce:ed:db:ca:21:f6:84:ea:1b:12:dc:c2:
df:89:f9:ca:fa:23:4e:f2:20:52:da:62:a1:50:2a:
b7:0a:94:90:66:f7:99:10:d5:84:94:c3:be:99:7a:
70:b2:ce:c5:2e:96:05:60:2d:bc:9b:72:2d:5b:e3:
f7:d3:d9:83:4d:97:2d:76:1d:07:3f:75:66:b6:5a:
59:3a:b7:ba:8a:df:cb:07:50:8f:a9:29:4e:b9:1b:
bd:40:10:b2:9c:60:a8:f8:1a:6d:44:a6:c0:50:b9:
cb:15:b6:a6:53:fc:a3:eb:84:9d:88:6e:7e:97:e0:
4a:f4:af:84:86:1b:f3:6b:98:33:48:60:ec:16:1b:
e0:29:55:5a:c5:2d:73:a3:b5:ae:89:31:bc:ad:8a:
1a:6d:be:f4:f7:a4:1a:d1:bc:19:cb:2a:e1:5c:5a:
21:73:b1:83:66:b5:7a:64:3a:9f:43:53:6c:9c:3b:
2a:d8:2d:ec:8e:55:da:3a:54:5e:7a:ee:db:f7:8d:
76:ca:a8:4f:a3:9e:7b:f4:bc:ef:d0:a7:35:cc:5d:
df:88:40:24:9d:8e:87:3e:ca:57:d1:d1:57:5b:f7:
a6:81:ad:9e:d4:75:a4:23:3d:72:8d:ad:9a:f9:57:
45:e0:c3:d3:b0:97:1b:ea:0c:70:94:b4:cd:d8:f7:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FE:5D:27:67:58:A0:8A:7D:4E:C2:2D:24:41:89:E0:6E:AC:CD:04
X509v3 Authority Key Identifier:
keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:94:13:2b:c0:cf:22:56:b5:4c:b5:bf:84:c0:f2:2f:aa:f3:
5d:91:48:cb:43:da:d6:4f:aa:6e:19:79:1f:83:ee:c5:53:f2:
2e:87:d4:8b:fd:0c:b3:48:aa:41:e3:9a:33:c9:63:c7:01:c8:
55:bd:46:9a:e5:e7:9f:f9:c5:4a:cf:02:d3:cd:67:32:b5:c7:
2c:11:20:03:02:bb:ac:3a:03:01:2c:9a:db:97:af:22:8d:41:
cd:07:d7:00:dc:ec:9e:14:c3:dd:9d:27:5f:7d:be:d0:49:f5:
06:ae:9b:95:6e:ea:f9:1e:43:1b:13:33:0c:13:70:5e:c5:e6:
28:bc:3e:56:c0:44:a1:83:bc:c2:34:92:1b:ab:ea:6a:47:dc:
48:70:a0:9f:d4:4e:3b:e2:63:66:dd:bb:9c:9b:c7:f1:78:19:
36:08:ba:e5:6d:47:6a:fb:f1:57:2d:ba:e2:d3:c4:61:96:84:
a1:e6:f1:1e:a8:18:1d:99:3d:14:1e:fd:12:24:6f:a2:3c:b2:
83:62:27:4a:73:ac:80:c6:e8:01:9d:25:9d:89:63:77:ce:92:
87:52:70:0f:5e:97:da:7e:0a:9c:a1:2a:c6:bc:05:b0:f6:28:
05:59:7b:34:63:9e:64:2d:d5:93:cd:c4:a0:02:33:4a:b7:89:
7a:3e:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:07 2026 by rpki-client