Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: dEi/Dsn5KuIS++mRECjNrF4pq7O2nP1+hg5/oEYoYtE=
Subject key identifier: 8A:33:71:04:57:3F:D6:33:E0:02:0E:43:6A:BB:C6:53:32:2B:46:F8
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 019D375328D61DB4A3D14EDA90AA060790C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 066D
Signing time: Sun 29 Mar 2026 02:01:29 +0000
Manifest this update: Sun 29 Mar 2026 02:01:29 +0000
Manifest next update: Mon 30 Mar 2026 02:01:29 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: t2C00mxBpohasjdxWoZn2o9TkLCyjuoj7zr91yjXxLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:28:d6:1d:b4:a3:d1:4e:da:90:aa:06:07:90:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Mar 29 02:01:29 2026 GMT
Not After : Mar 30 02:01:29 2026 GMT
Subject: CN=8a337104573fd633e0020e436abbc653322b46f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:21:e3:77:73:03:3e:bc:a4:9e:10:cc:67:
1e:a8:10:d6:8a:29:a6:e5:a5:e1:47:e3:22:d4:a9:
52:e3:b3:49:36:4b:08:7b:72:d7:b0:0b:17:07:b2:
34:e9:eb:6b:43:5c:72:23:2b:07:d7:83:3a:bb:8d:
fc:5f:e4:d7:8b:52:8b:23:a2:9c:c7:6d:e4:fb:35:
e7:2c:59:d2:5b:84:43:44:c1:e7:d8:1c:aa:4a:f4:
ff:8e:a0:9e:88:66:16:d6:12:84:e6:0a:a1:4a:4d:
3c:c6:d3:73:d7:9b:d6:3f:29:f8:19:ff:d5:37:23:
2b:3b:7e:a0:2d:9a:26:87:68:da:84:32:7c:20:d7:
06:37:3a:5e:ef:b5:a3:69:40:6e:0d:d6:de:ae:24:
35:e5:a7:d2:32:de:26:37:96:4a:c8:63:17:50:40:
65:c3:8f:38:11:e0:51:b1:23:f1:a0:7f:72:19:50:
52:f8:73:1f:4e:af:35:a6:0a:15:43:2f:bc:d6:2b:
ba:7e:81:5a:a4:07:4d:67:4b:b1:15:44:af:0a:5a:
bc:fb:c6:98:83:83:2b:fe:d1:c5:53:c7:b0:6e:27:
bf:b4:58:06:95:5c:e7:0b:6e:40:45:a2:0a:eb:64:
3c:50:89:00:ef:70:aa:c0:e9:e4:e8:5b:28:b1:90:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:33:71:04:57:3F:D6:33:E0:02:0E:43:6A:BB:C6:53:32:2B:46:F8
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fd:34:1d:68:45:b9:b6:9a:f4:1d:d8:83:5c:fa:ff:d8:0c:
9b:90:fb:cc:b1:7f:78:94:39:0a:e9:8d:53:8f:81:05:6d:ff:
2f:b4:78:23:8a:4d:72:f1:f8:8f:9d:7e:89:fb:2e:18:35:d5:
8d:d5:a2:e0:92:e8:77:54:35:ce:fd:5a:77:ca:1e:33:5d:c9:
94:e9:d5:56:34:ee:ca:9b:05:88:27:84:db:6d:8b:48:80:50:
97:ff:ae:42:2f:3c:7d:5a:bb:63:4f:cd:0a:51:68:36:3b:ac:
23:48:51:3d:86:32:70:a5:18:3f:74:64:1d:26:47:86:7f:0a:
dc:fb:f0:eb:8d:9a:93:c4:61:60:62:6b:43:cd:37:7a:d3:e6:
05:49:e6:0f:9e:76:96:0e:ad:7f:c2:db:f9:2a:2f:9b:61:40:
6f:55:a1:75:1f:36:ed:78:64:ac:c2:cd:e9:58:37:b3:b6:38:
6a:69:30:5f:76:ac:ea:d7:72:82:28:28:c2:fe:dd:14:6b:16:
d8:52:c9:7a:85:9d:8d:30:a2:c4:83:b6:e1:fc:a7:d5:a3:7a:
0f:7a:3b:c4:6e:a2:16:1f:65:f0:e9:e4:00:2e:a1:5d:19:27:
62:79:d3:28:d2:0f:0b:3b:fd:b1:72:a4:ae:60:f2:40:c1:05:
80:26:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:44 2026 by rpki-client