Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json)
Hash identifier: SzfzEQGEcU93plsfL6gvWSf1gdMOQAPjJePm5zcv5SA=
Subject key identifier: 73:65:85:9D:60:EF:AC:B8:E5:E2:37:F1:82:0F:C9:C1:F1:69:4E:C2
Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Certificate serial: 019D389BE27A092EEA806C071A9979C5FDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
Manifest number: 1824
Signing time: Sun 29 Mar 2026 08:00:33 +0000
Manifest this update: Sun 29 Mar 2026 08:00:33 +0000
Manifest next update: Mon 30 Mar 2026 08:00:33 +0000
Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: 82/2Qbz2q3kjxUCpnptcCDZGIqppKhy8F/p/JO+Q3Ec=)
2: GmYrfW3k8osvPQTynxaphEXGOF0.roa (hash: KL4WvC6vPGKTcuwvQwS3AK/arMjab0ANyIFkXhXDgSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e2:7a:09:2e:ea:80:6c:07:1a:99:79:c5:fd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9
Validity
Not Before: Mar 29 08:00:33 2026 GMT
Not After : Mar 30 08:00:33 2026 GMT
Subject: CN=7365859d60efacb8e5e237f1820fc9c1f1694ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:18:0d:b8:a0:f2:be:67:4b:ad:f8:7c:04:
7a:2e:01:9e:b3:c6:ee:a7:8a:76:a7:d9:89:45:c4:
58:ab:4b:d9:d5:d0:aa:98:0f:f5:93:eb:0d:0e:5d:
81:cb:b3:f8:60:d3:e1:99:d6:55:f0:9a:cf:a7:6f:
50:9d:3c:fe:ce:cd:36:08:44:79:b9:7f:3f:ce:8d:
29:a3:95:f1:b5:ee:5c:ad:3c:02:f3:9a:a2:5c:e5:
57:21:5e:d5:57:07:e6:6b:09:94:a7:d6:d0:95:50:
c6:65:7f:42:27:6b:a8:8c:52:fb:65:c9:f8:28:0c:
7d:85:67:04:a6:05:97:0b:5e:31:2c:16:02:00:bc:
59:86:ec:93:fb:88:ee:23:95:6c:e7:da:d8:99:65:
3f:b7:e1:1d:7a:95:69:6e:6e:5c:12:e7:b4:ba:a6:
69:3d:63:18:d7:a6:03:9d:7f:15:46:d8:e4:8b:c1:
d3:92:46:ed:00:72:18:d9:47:53:27:8c:b3:36:52:
34:af:39:c8:53:c9:93:71:0a:0f:a1:55:4e:dd:7c:
dc:2d:60:4b:94:c9:e9:5f:4d:95:9d:67:38:16:09:
a5:d3:72:60:1d:85:0e:47:69:b2:92:1f:60:1f:7f:
2c:b2:28:c9:3e:84:7a:67:39:b5:80:1f:ff:44:06:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:65:85:9D:60:EF:AC:B8:E5:E2:37:F1:82:0F:C9:C1:F1:69:4E:C2
X509v3 Authority Key Identifier:
keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fe:93:63:18:bb:d2:08:54:1f:73:33:3b:c6:0d:9e:4b:e1:
04:e8:64:4c:9e:21:67:27:6d:f3:b0:2d:d0:88:4c:d3:d2:41:
8b:36:9f:8f:1d:d1:ec:5f:6f:f6:c6:44:78:0b:68:1e:d3:69:
46:37:52:f1:c7:46:1c:a1:75:0b:bd:0e:86:00:4b:a1:40:7b:
da:29:61:b3:d3:cb:f1:3b:d1:1f:77:86:d8:95:47:bb:1b:db:
b8:08:a2:13:53:5b:5d:e1:9c:0b:ac:b1:7c:7c:51:57:4d:81:
47:cb:9a:ec:7a:63:b7:86:0d:29:37:d6:24:ff:cf:0a:78:68:
b4:15:d6:fa:bd:24:65:73:3a:b8:b1:b5:8b:fe:cb:41:6c:73:
28:46:57:0e:42:44:bc:ec:5b:a1:68:2b:8e:be:ce:4c:f1:d0:
68:6f:00:6f:0a:5d:06:34:d7:34:02:a8:10:d1:3a:c9:04:b4:
67:60:d2:b8:87:44:b5:78:b6:f1:6b:08:73:e1:e5:26:6b:94:
ec:ee:6e:ff:39:6a:91:9a:79:3b:7a:dd:fa:97:cb:01:4f:a5:
50:29:36:16:cd:30:d4:43:b7:4c:14:d4:07:14:70:81:b7:85:
0c:da:40:82:e1:5e:f8:40:a5:e1:e5:e0:bc:65:0a:de:67:85:
a1:04:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:37 2026 by rpki-client