Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
File: ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json)
Hash identifier: LCBQKLNth6k4JWeiQ7B+p2dnpMb9O82Fq8BH4uP4lcY=
Subject key identifier: 5A:6F:99:C2:C3:C4:C7:B4:88:72:9B:5D:54:25:A6:99:EB:FF:29:64
Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
Certificate issuer: /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Certificate serial: 019D38657EF34D7B391F196FDC257A3BE455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
Manifest number: 101C
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: 26lTnswwt0VR6A2kAi/oBs+IrqZdE8Y+JcRrdW71L6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7e:f3:4d:7b:39:1f:19:6f:dc:25:7a:3b:e4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=5a6f99c2c3c4c7b488729b5d5425a699ebff2964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:1e:d7:12:63:1a:3b:20:e2:70:0a:87:6f:
f5:47:51:b9:ee:2a:08:1d:2a:53:53:1b:73:ae:cd:
ba:6e:16:9c:54:76:26:47:29:dc:6f:4f:1f:a6:67:
0f:e9:18:84:dd:16:69:ff:39:8f:0a:81:a4:2b:bc:
11:69:34:49:ad:86:59:68:c2:cc:9f:f6:f5:10:a4:
09:c3:01:87:bc:a9:0b:19:ac:32:68:02:60:8f:b6:
86:94:70:f2:9b:d2:87:e5:48:b7:25:2b:fb:2d:5f:
9a:b1:db:b4:6c:bd:25:b4:5e:cb:e7:c1:61:18:25:
bf:52:63:43:44:32:2f:59:80:a0:e9:41:b4:5c:48:
e1:90:56:e4:34:62:7b:40:ae:6b:88:81:f9:15:f5:
73:3a:dc:86:c1:7a:85:25:44:1d:81:81:52:57:a4:
f6:95:15:6c:eb:ee:21:5f:2e:58:2f:15:4c:16:a9:
7d:18:1f:bf:af:06:f6:bb:5e:dc:de:ff:1d:52:f8:
a1:74:46:bc:ba:1f:5d:a9:83:e6:d6:51:e7:67:4a:
14:31:ed:fc:e8:db:d3:1e:19:c6:15:22:ef:00:d6:
bf:44:4c:44:82:96:e8:ae:18:b3:00:54:18:d4:5f:
8a:7c:90:f0:8e:77:70:ac:b7:8d:21:37:d5:04:b3:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6F:99:C2:C3:C4:C7:B4:88:72:9B:5D:54:25:A6:99:EB:FF:29:64
X509v3 Authority Key Identifier:
keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:01:ed:04:35:87:62:cb:9d:dc:9f:f9:51:5e:1d:65:d8:a5:
c1:83:5c:e1:72:32:61:94:0c:c2:13:84:7f:db:ca:64:1f:99:
26:27:b3:36:b0:33:3e:99:06:18:54:48:49:87:1d:82:4f:b5:
53:3d:3a:db:bd:bf:67:1f:c4:28:8b:b5:1b:02:bb:77:93:87:
a7:55:1a:cd:13:19:95:b3:71:02:7e:cc:6f:d0:ca:fe:82:e6:
1d:fa:ab:c3:15:60:63:4b:89:4e:66:2e:25:8b:37:fe:d9:ef:
96:fa:24:bf:9c:85:0e:f9:fd:11:99:16:5d:95:6d:20:d8:97:
72:80:08:5b:85:e9:d8:ee:fb:e6:2b:27:94:e3:84:e0:7b:71:
1d:32:0d:c3:08:cd:bc:55:9d:1c:ad:43:e1:e8:6a:58:ab:e0:
ff:ef:93:f7:b2:22:ad:62:c1:7c:2b:32:91:26:2c:a1:65:ce:
93:e6:9e:47:ed:fa:1b:bc:78:b4:bc:a5:c4:a4:c9:97:06:84:
55:cd:b6:43:fe:ea:94:c3:23:4b:0b:0d:34:99:a8:9c:ba:df:
ac:7e:25:f3:91:f8:20:77:4b:77:b4:37:3e:64:db:0d:0a:da:
bd:b6:e7:f7:b4:e6:7e:37:4f:43:63:02:f3:6c:31:b2:ce:ef:
6c:59:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:15 2026 by rpki-client