Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier: Esw2XQ4FfZ1tYqKUguxlWZzBMwbn9qDjT/K81n6lzcM=
Subject key identifier: 25:E6:D7:4E:19:9A:92:FD:88:35:B7:85:2E:AD:8F:F4:D5:E4:C2:DA
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial: 019D39AEFDA893BBB81E9C512338D6F5B0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number: 15E5
Signing time: Sun 29 Mar 2026 13:01:02 +0000
Manifest this update: Sun 29 Mar 2026 13:01:02 +0000
Manifest next update: Mon 30 Mar 2026 13:01:02 +0000
Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: Wm7klTtnPvYW0sAMvyaFYfZec2wkhyyj6a8iWKQFOQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:fd:a8:93:bb:b8:1e:9c:51:23:38:d6:f5:b0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
Validity
Not Before: Mar 29 13:01:02 2026 GMT
Not After : Mar 30 13:01:02 2026 GMT
Subject: CN=25e6d74e199a92fd8835b7852ead8ff4d5e4c2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:71:25:7b:94:da:fd:a7:ac:7e:b0:72:2c:
0d:92:18:a9:d2:cf:fb:1a:93:3f:43:10:87:2c:f5:
10:45:f9:22:fc:15:d0:40:f9:09:a2:37:47:a6:df:
27:88:4c:45:02:97:1f:57:0e:5c:54:25:8a:18:22:
e4:17:ab:b3:6d:42:fc:7b:c2:fc:ac:ad:a0:f3:61:
3c:33:ee:06:5f:fc:a3:ce:5f:d1:f7:de:f4:60:c6:
59:6f:07:4a:fa:a6:18:20:f1:d7:21:31:13:6f:31:
03:8b:4d:25:24:70:2e:44:6f:25:57:b1:a2:00:35:
bd:5a:4a:74:b4:66:47:ab:d0:58:6a:a0:bd:b7:82:
52:28:e2:8f:0b:51:73:3c:73:b5:37:69:64:aa:0d:
61:89:c5:8b:6a:7e:bf:66:5e:78:3b:14:79:74:d5:
f0:0f:67:de:cc:c0:d2:c5:4b:25:be:3c:0b:04:81:
5c:7a:40:9b:16:80:2b:3f:d5:68:cc:34:33:ae:ca:
ca:f3:b7:1f:5a:41:50:e7:ae:b8:85:22:4b:9d:19:
20:9b:5c:8e:27:a9:35:29:61:5b:bf:aa:56:20:4b:
65:18:8c:ab:88:b9:38:18:64:04:82:71:d2:1b:9e:
97:19:63:87:7f:c0:8f:43:d3:8a:aa:ec:91:13:51:
9d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E6:D7:4E:19:9A:92:FD:88:35:B7:85:2E:AD:8F:F4:D5:E4:C2:DA
X509v3 Authority Key Identifier:
keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7c:0a:36:4c:4a:f0:43:67:7a:0a:aa:dc:7d:ec:53:89:fa:
23:47:80:bc:7b:00:f4:56:8c:df:a7:3b:e5:21:e2:41:85:d3:
09:fd:23:dc:2a:d4:4d:5d:4b:c8:df:5e:66:b8:1c:69:2e:ae:
74:d7:4f:e8:4e:dc:46:18:db:34:10:59:41:28:11:b0:85:be:
75:a3:fe:8d:9a:8a:00:fa:df:98:a6:e9:f4:27:34:12:73:4d:
be:d8:79:cb:e5:fa:35:6a:5f:e6:f1:2e:fe:9e:c7:28:1a:52:
2b:e5:53:cd:e0:52:9a:95:e2:89:ea:ae:eb:aa:ab:87:ea:f3:
c6:39:b2:1a:0f:c3:e4:f2:2a:14:8b:c3:b0:52:c2:ad:22:68:
6e:3d:19:77:8f:6f:eb:87:86:b7:4c:1b:cb:bb:59:63:f9:8f:
fe:29:ba:af:0f:3b:e6:74:a4:0d:0c:b2:ee:56:30:6f:5b:85:
c5:52:52:66:cb:8e:b5:ca:71:f7:75:16:90:d7:a2:7c:03:4d:
a8:c6:cd:a4:5d:31:21:19:fe:b1:91:55:19:59:b8:2e:37:34:
5e:c1:b8:61:7c:96:64:1c:96:7d:7d:cd:a9:36:c4:fc:17:c9:
6d:26:a3:7b:ee:a3:9a:e0:aa:63:ec:9e:a6:ff:6d:1b:1b:fa:
27:f3:20:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:19 2026 by rpki-client