Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
File: fAMRalBjzm8X_OpTUcneSgxosN0.mft (raw, json)
Hash identifier: s9yVQIR466rQarUF23Sx459/AMSTwBBqoDSTy16Sb6o=
Subject key identifier: 0A:44:4E:49:F1:00:CE:FF:B0:11:8B:35:39:F4:7C:E4:C4:91:EE:1D
Authority key identifier: 7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
Certificate issuer: /CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Certificate serial: 019D382E8FA9FC69C1457BE6327187D90CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
Manifest number: 0D46
Signing time: Sun 29 Mar 2026 06:01:08 +0000
Manifest this update: Sun 29 Mar 2026 06:01:08 +0000
Manifest next update: Mon 30 Mar 2026 06:01:08 +0000
Files and hashes: 1: fAMRalBjzm8X_OpTUcneSgxosN0.crl (hash: o4Jg2T9RbYfRpakLTyCdrw8JcdKY5ozp9yBdAlSNn7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:8f:a9:fc:69:c1:45:7b:e6:32:71:87:d9:0c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Validity
Not Before: Mar 29 06:01:08 2026 GMT
Not After : Mar 30 06:01:08 2026 GMT
Subject: CN=0a444e49f100ceffb0118b3539f47ce4c491ee1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:b3:68:ef:a2:b4:ec:c5:ae:59:72:8e:45:
91:df:15:39:66:58:ba:01:57:b1:34:c4:b1:b5:fb:
7a:90:99:00:62:64:01:8c:fa:49:89:d5:ad:b7:c0:
5a:8b:a5:dd:79:43:8a:d4:6a:d8:83:54:22:5a:eb:
24:16:72:f2:28:a1:10:f6:38:1c:60:b2:53:b2:66:
b4:de:6d:d3:7e:cb:b2:33:63:f0:5e:e4:08:2e:f0:
6e:f6:0a:5b:30:de:e9:e8:b3:88:91:a9:5a:a3:aa:
8c:5f:d7:a5:4b:ab:62:27:09:1f:cc:5d:17:68:62:
14:85:d4:99:60:3f:f7:92:b6:c1:5b:40:6c:52:03:
c6:cd:a6:ec:cb:fd:69:cb:d8:f4:b9:e3:12:b4:6a:
c2:b6:18:01:e9:ea:ad:cf:c1:89:5f:7b:2f:4f:49:
35:5d:0c:31:7d:4b:3f:f6:11:b3:31:02:b2:65:59:
8b:d0:f3:43:c3:b1:11:91:e7:92:6b:87:69:d4:27:
18:1b:40:f9:6a:0c:1f:ef:dd:5f:f1:93:9f:69:11:
9a:15:82:aa:c4:d7:71:aa:fa:d4:0f:3f:a4:93:a0:
63:01:7d:58:4d:68:da:1a:5c:64:17:62:5c:2c:ad:
c0:e0:a3:d9:6f:4d:ff:c3:ed:55:ab:bc:37:58:2f:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:44:4E:49:F1:00:CE:FF:B0:11:8B:35:39:F4:7C:E4:C4:91:EE:1D
X509v3 Authority Key Identifier:
keyid:7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5b:67:c3:5b:02:b2:0d:1e:c9:9e:32:77:b7:d5:14:0a:7c:
9b:1c:f7:50:30:f9:03:06:9d:48:ea:f3:54:f5:ef:16:47:c0:
17:a7:ed:9c:a1:aa:68:e2:e7:09:5f:b1:49:d7:c8:8e:00:8d:
32:23:ef:1e:3a:0e:31:6f:4f:ea:99:40:d9:be:cf:d2:20:1f:
14:e4:7c:35:e7:3f:33:29:ea:21:3a:d7:c4:45:63:6e:60:43:
0e:98:69:d3:26:5a:37:10:9e:db:1b:d9:a7:86:7b:6c:cc:b3:
45:51:a9:a0:6d:2f:ae:57:0a:34:ea:c8:65:3c:d9:a0:12:47:
d4:f9:ab:83:f0:79:5c:b8:cc:f6:8c:ca:72:c9:f3:72:8e:ea:
52:01:1b:1d:86:5d:a2:b0:bb:f5:f9:b1:f6:05:8d:9c:a4:36:
35:a7:b2:1e:78:e4:3c:58:b0:1d:3c:ae:13:a1:a7:22:34:02:
7d:90:6a:37:9f:57:f6:59:b9:47:80:33:cf:60:de:56:09:97:
97:6a:75:7e:c1:fd:f0:7e:74:12:96:7a:3e:83:07:f0:7f:b8:
bd:c8:e2:48:68:c0:dc:fe:d4:f2:8c:13:b7:67:a3:58:b8:43:
73:53:5e:49:27:59:f8:57:e9:22:25:97:6e:53:a8:6e:c2:13:
40:02:8d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:06 2026 by rpki-client