Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
File: FctDavZPjQbSzBktBIAMslYoQnI.mft (raw, json)
Hash identifier: fnXbR/WcRmCUPakh1eVw2EABYfuXubLiQ1fGomIhM9U=
Subject key identifier: 7C:4C:EC:C0:2E:6F:96:24:01:18:91:60:EE:1A:39:A3:3E:91:A8:BD
Authority key identifier: 15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72
Certificate issuer: /CN=15cb436af64f8d06d2cc192d04800cb256284272
Certificate serial: 019D38D3BBE1BE9504E908010644A43AB5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
Manifest number: 038E
Signing time: Sun 29 Mar 2026 09:01:33 +0000
Manifest this update: Sun 29 Mar 2026 09:01:33 +0000
Manifest next update: Mon 30 Mar 2026 09:01:33 +0000
Files and hashes: 1: FctDavZPjQbSzBktBIAMslYoQnI.crl (hash: llOHTA/nWoSsLr3qBZ42XQlYz8vhnmgsta+++nJ2uVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:bb:e1:be:95:04:e9:08:01:06:44:a4:3a:b5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cb436af64f8d06d2cc192d04800cb256284272
Validity
Not Before: Mar 29 09:01:33 2026 GMT
Not After : Mar 30 09:01:33 2026 GMT
Subject: CN=7c4cecc02e6f962401189160ee1a39a33e91a8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:c6:ac:45:bd:61:9a:92:20:c6:90:35:63:
2b:11:29:c5:e4:c2:b3:38:de:b0:de:63:4f:76:f5:
5c:bd:79:98:d1:15:ce:b7:24:87:27:b4:f5:96:fc:
a8:f7:21:ab:39:c8:1a:18:81:15:f0:0a:6b:d5:5c:
2d:58:14:40:63:f5:90:bd:cd:f7:09:16:6c:52:fb:
c4:ee:e2:42:86:5f:a3:6e:a1:bc:68:67:9f:84:41:
85:5a:1c:26:1c:12:38:ad:f8:bb:0e:2a:ff:31:73:
ac:dd:76:7a:c6:8f:85:bd:07:75:20:4c:6b:2a:ee:
9d:fb:0a:65:d0:51:0e:4a:99:a6:b3:65:5b:94:ce:
e3:58:86:79:9b:59:99:9a:bc:c6:01:c6:e6:94:56:
97:85:28:f9:22:c5:77:86:35:af:3a:21:d8:7c:ae:
58:b3:e7:f0:9d:c9:7d:b1:7a:6c:c1:4c:d8:26:72:
cd:54:bf:ce:59:e6:cd:28:99:33:7b:93:00:de:c5:
20:4f:27:42:11:15:fc:cb:68:b1:19:62:45:fb:18:
8b:31:b8:31:6b:fb:f5:d4:c5:ac:b9:e6:f0:0c:d7:
86:79:b5:02:9c:b4:cd:14:84:8d:4c:e9:58:f5:83:
42:75:fe:f7:93:df:7b:d2:ed:cc:62:ee:ab:1d:46:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4C:EC:C0:2E:6F:96:24:01:18:91:60:EE:1A:39:A3:3E:91:A8:BD
X509v3 Authority Key Identifier:
keyid:15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:09:b7:59:1b:72:d1:a3:2e:6c:9e:66:22:d3:d4:53:4d:7c:
e2:a9:e9:0f:a4:ee:d6:0f:34:50:9a:be:a7:86:09:0c:2d:69:
4e:e9:32:64:4b:31:0e:79:59:f0:84:84:5e:68:8f:fa:c6:99:
31:f1:31:a5:dd:f6:d4:8c:36:76:2e:5b:40:ed:32:21:83:c6:
35:48:05:82:a1:8d:2e:8e:74:26:24:7d:7b:11:02:d2:fb:6c:
43:63:15:03:32:3c:38:1b:a5:a1:57:b8:f6:ad:20:3b:7c:2f:
87:cf:a9:00:f7:4b:d8:ad:a0:7d:f1:a3:6f:4b:7d:52:b0:19:
4f:bb:09:8e:8f:4b:55:d9:82:52:95:bd:92:23:5d:c8:06:63:
49:0c:bc:50:83:42:b2:59:80:29:ab:bd:c7:89:a8:95:b1:4f:
fd:72:d3:3f:4a:02:f0:3f:3c:12:01:1c:d2:2b:88:47:e2:a3:
5e:33:07:76:cc:48:d9:40:11:dc:85:16:8e:3a:99:85:64:d4:
21:6d:b2:54:96:e2:f7:23:52:b8:4a:d0:fb:db:f7:0c:5f:5b:
8f:a9:03:e8:7e:3e:16:0f:ee:11:5e:18:e3:a9:13:81:db:9b:
51:31:02:4a:9e:81:d8:8a:38:fd:a3:82:9c:b7:77:4f:5a:8a:
b3:e3:46:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:45:08 2026 by rpki-client