Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json)
Hash identifier: bHKAvj+sVVWYsqTllENGqcRNKm2aEBd/nrhj9NYOpN0=
Subject key identifier: 30:11:68:61:A3:12:6F:31:21:39:C7:45:04:3F:DD:57:1C:FF:A6:CE
Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Certificate serial: 019D3AC11D0FD2B7F8CE0EE9758409308260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 18:00:27 +0000
Manifest this update: Sun 29 Mar 2026 18:00:27 +0000
Manifest next update: Mon 30 Mar 2026 18:00:27 +0000
Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: YMo9T0eglgSFu8YugvYCAVmcegVeQsdDNVYRfWaLODc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:1d:0f:d2:b7:f8:ce:0e:e9:75:84:09:30:82:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Validity
Not Before: Mar 29 18:00:27 2026 GMT
Not After : Mar 30 18:00:27 2026 GMT
Subject: CN=30116861a3126f312139c745043fdd571cffa6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:d7:d9:05:43:90:a9:22:74:f6:57:25:da:
11:13:52:50:ee:35:48:95:d9:76:94:c3:d4:aa:de:
d8:62:a3:d4:5a:10:70:8e:52:38:ff:87:02:8a:60:
71:c0:da:8d:a3:b2:d1:3e:cb:57:b5:14:c9:ea:80:
0b:9d:ff:84:36:d0:db:b5:21:a4:65:5e:49:bb:20:
4a:d5:ac:6a:5e:bf:01:3e:46:c3:06:ae:e7:3d:56:
20:4c:4d:5b:b8:08:41:71:ba:6d:9d:df:66:1d:8b:
b5:04:d2:d4:a7:43:c4:7a:9e:c9:c6:57:80:9c:68:
fa:3e:03:b5:9a:d8:a1:17:53:53:2f:15:12:f1:a9:
73:a1:df:18:df:be:6b:cb:94:2f:a7:db:a7:aa:1a:
8e:26:8a:8c:7e:bb:9e:ec:c2:39:70:0b:d9:d9:21:
5c:ba:5f:95:75:56:b5:3b:99:55:87:c1:b9:58:60:
e0:df:e8:b5:86:f3:e4:0e:07:10:aa:10:52:88:06:
86:d1:4e:96:85:1d:69:69:5a:96:b9:6a:76:29:4c:
00:36:4b:28:d8:46:ef:1c:f2:60:f0:b7:e0:5c:9b:
50:ef:ce:a9:8f:46:29:e9:d4:64:f3:70:20:ed:c7:
39:6f:34:bb:51:cd:56:88:8f:46:6c:53:82:22:a0:
15:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:11:68:61:A3:12:6F:31:21:39:C7:45:04:3F:DD:57:1C:FF:A6:CE
X509v3 Authority Key Identifier:
keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4e:48:f8:2f:8b:d1:1d:ea:d0:25:26:fb:30:e8:00:55:8f:
de:a5:56:a9:43:5c:07:b9:40:fc:44:49:59:9b:a1:c7:be:73:
cc:a3:b0:a5:9b:26:1a:99:fb:9e:53:43:ca:fe:37:1d:e4:17:
8c:1f:f0:d5:d9:46:0c:d2:c8:b3:03:9b:f1:e8:5c:8e:09:44:
fe:51:bf:f4:0c:9e:03:64:df:68:a4:74:73:77:0c:4b:cf:46:
21:30:23:c7:25:3e:fe:a0:14:14:02:d9:02:10:42:a5:d7:38:
37:83:2a:85:ec:30:d2:39:ee:c1:9c:14:ea:4c:30:e6:fc:87:
8c:78:6c:07:07:72:5c:9f:9a:b7:72:97:35:88:39:fe:71:89:
4d:a7:bf:90:c2:89:73:90:e3:cf:06:aa:b3:a1:0c:93:a2:ab:
92:13:29:98:9e:b7:1b:0d:75:1e:c1:0e:b6:93:4d:fc:0d:93:
80:c0:45:06:b5:49:d7:36:88:cc:9c:db:8b:17:98:cc:83:09:
99:48:9b:29:0b:29:f7:0d:ae:db:a7:8f:a2:51:c0:7c:eb:71:
30:04:fd:b0:ed:ba:b1:78:7a:05:49:12:93:b1:0f:f5:d6:0b:
9a:9a:00:53:76:d8:1b:d0:95:02:3b:3a:95:ed:08:79:1c:bf:
ad:3f:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:37 2026 by rpki-client