Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier: shzpgrRgTMh9rc6AKwKBQ56cqavHje1YMFufHjAGcOY=
Subject key identifier: B5:26:2E:48:A6:FC:5C:9B:13:E0:9C:11:94:79:F8:FE:E4:06:B3:13
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial: 019D3A53A6DCF2EFB5F83A5F155FA3DE9D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number: 04F1
Signing time: Sun 29 Mar 2026 16:00:53 +0000
Manifest this update: Sun 29 Mar 2026 16:00:53 +0000
Manifest next update: Mon 30 Mar 2026 16:00:53 +0000
Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: 6uUXGMRWrXjNpkJpFxLPXXOH5gnuqBXoJyA60udYuDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:a6:dc:f2:ef:b5:f8:3a:5f:15:5f:a3:de:9d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Validity
Not Before: Mar 29 16:00:53 2026 GMT
Not After : Mar 30 16:00:53 2026 GMT
Subject: CN=b5262e48a6fc5c9b13e09c119479f8fee406b313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:23:f3:76:b4:4e:b1:2b:3b:6e:f6:58:55:
1c:5a:d8:62:2d:70:71:a9:7c:f5:d7:53:92:b6:42:
1d:c3:18:9c:7c:6b:32:ce:91:f5:7e:e3:ee:88:59:
3c:66:e9:39:be:68:55:5a:18:c9:cb:1c:ee:a5:bc:
00:83:a1:14:66:61:be:b4:e9:13:49:51:e9:1d:ef:
a4:d5:7d:22:36:60:33:90:e1:ba:24:bc:c5:f6:6c:
0c:d0:36:6d:c7:f2:6a:47:21:ea:d7:8f:a7:6e:1a:
2b:22:de:a3:8f:c2:26:71:e6:f3:8b:19:48:df:35:
25:4f:57:43:c9:98:97:09:67:d0:46:be:a1:24:77:
65:e9:2f:ad:d5:ed:ce:a7:94:d8:b4:4d:4e:30:10:
e4:26:66:59:0e:3b:e2:0b:87:d6:e0:05:79:e8:4a:
c8:25:db:e9:07:53:a5:e7:ac:72:86:5b:12:77:7d:
ec:78:4e:08:85:c3:96:ef:60:fd:13:5c:34:86:de:
55:e4:5b:50:95:e8:73:e2:b0:75:62:3a:09:0d:5e:
ee:ff:3b:bf:ce:d1:94:66:a7:8b:e4:fc:af:26:67:
00:1e:1c:f3:bc:31:72:fd:07:06:08:1a:f5:68:a8:
2a:82:0f:0e:40:e7:33:34:a9:9a:9d:80:78:0a:7a:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:26:2E:48:A6:FC:5C:9B:13:E0:9C:11:94:79:F8:FE:E4:06:B3:13
X509v3 Authority Key Identifier:
keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5a:d8:d7:00:47:4f:af:ef:08:d3:67:88:1f:7d:70:9d:02:
5a:c4:bf:f2:59:6a:8c:c2:24:4c:53:4b:86:f8:ea:dd:50:d5:
31:8a:09:76:ab:d1:29:07:88:64:66:40:46:b1:6d:e1:7c:84:
2a:4e:12:2e:df:96:aa:af:5f:b4:fb:85:67:cd:3a:ec:40:e4:
42:02:79:16:47:dc:0b:6e:29:f8:3b:12:06:2f:03:1a:5b:12:
c0:03:e1:a5:54:14:60:1b:6a:1b:8f:a9:32:b3:da:a5:ac:2e:
8e:69:fb:4e:14:66:7c:b4:89:31:79:79:64:11:53:5e:2f:a4:
3e:09:1f:b3:e9:47:04:96:b6:91:30:47:3b:b0:bf:68:35:42:
94:54:5c:e2:9f:fe:0b:e1:ef:12:95:01:ce:8a:af:18:bb:4f:
d5:e9:a1:bf:3f:8f:63:1f:a6:1b:13:7e:28:60:4f:49:27:28:
ce:c8:2f:5c:5d:86:79:4d:ed:37:a4:43:6a:43:f3:7c:24:b5:
9e:6b:ab:90:3f:44:1f:3f:34:f6:89:18:30:c9:2b:f6:4b:cb:
4c:29:97:18:5d:40:67:0c:64:bb:f2:28:f9:bd:c6:0a:d6:18:
4b:cc:03:87:63:05:4a:8c:73:f6:56:e0:e1:0c:fd:b5:3b:b5:
23:e0:f8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:50 2026 by rpki-client