Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: qR/kzo9mb5BrxMrwtWW78o2Z/zl/gpPBgLUdTeKMHvY=
Subject key identifier: 47:1C:4A:DE:FB:D4:D6:F0:64:9E:B0:DB:24:FC:92:40:2C:E3:51:E5
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 019D3865F09D94103E8763434B38CA8CD35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 0B68
Signing time: Sun 29 Mar 2026 07:01:37 +0000
Manifest this update: Sun 29 Mar 2026 07:01:37 +0000
Manifest next update: Mon 30 Mar 2026 07:01:37 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: a3MkajLEBeZ+oLpZPbLfAkDqxVCghodm4/mUcSJMEUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f0:9d:94:10:3e:87:63:43:4b:38:ca:8c:d3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Mar 29 07:01:37 2026 GMT
Not After : Mar 30 07:01:37 2026 GMT
Subject: CN=471c4adefbd4d6f0649eb0db24fc92402ce351e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:ab:96:3d:7a:32:63:7a:11:e2:1b:07:2f:
77:de:5c:9e:5d:b3:58:c8:39:05:46:87:d4:4d:fb:
31:49:cf:fc:5c:ac:60:ef:cc:6f:ba:a9:74:1f:4c:
48:cd:98:62:d8:18:ac:e8:7e:f9:6a:5c:47:3b:34:
0c:be:d5:58:a6:53:e5:b6:2f:d3:02:d0:2a:44:0a:
26:a6:c5:3c:1d:08:d7:47:38:3d:01:ce:f0:f2:61:
28:56:c9:5f:f8:3f:2e:8b:49:e3:da:a3:66:63:aa:
f0:f6:27:5e:2e:da:a7:fd:fa:53:da:23:6a:d9:3f:
22:29:38:18:71:63:7e:3c:8d:4b:4a:4b:50:a7:3e:
9b:25:85:a3:dc:3a:d9:f5:1e:3f:07:5d:81:10:a5:
0c:ef:12:4f:a6:e5:50:f8:20:7d:ff:48:7a:0f:79:
4f:77:a1:01:02:9c:01:3f:61:0f:46:bd:bd:de:a5:
c3:9b:74:b7:63:ff:85:40:22:cf:bb:19:5d:17:08:
d6:26:a4:bb:44:b9:f8:84:85:0b:af:d8:37:d4:6e:
07:33:43:d7:e1:fb:aa:59:61:dd:76:19:ad:fa:74:
fb:58:f6:98:25:43:f3:0a:11:4e:53:52:20:74:ee:
8f:6e:d6:36:a5:9f:d0:17:37:4a:0c:5b:0f:32:ee:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1C:4A:DE:FB:D4:D6:F0:64:9E:B0:DB:24:FC:92:40:2C:E3:51:E5
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ec:0e:3c:3e:3b:9e:ae:a0:eb:c3:df:21:f0:2b:ea:bf:e8:
b7:5c:b0:b2:ce:c5:30:7b:56:bc:b4:6e:f9:bb:e3:42:d1:b0:
c1:ee:27:7d:02:73:12:e6:a4:5c:7c:ab:54:de:43:2c:a6:dc:
e3:e2:d7:07:aa:7e:60:47:79:8b:02:89:95:e3:67:b8:6d:8e:
1d:9a:8c:2a:81:72:62:9e:1f:64:fb:f5:77:5e:20:40:28:e3:
f7:c1:df:9d:8c:66:07:12:1b:90:6c:c0:12:12:6b:e9:54:75:
cd:fb:ca:23:4f:a5:56:ba:97:19:fa:7c:c5:6f:58:a8:3e:b8:
dd:04:3e:71:22:c5:85:d5:9c:51:73:c9:0e:f7:b5:80:13:1e:
e0:48:0e:a3:ba:25:2a:c8:d6:52:5e:b8:ee:0b:4e:51:9b:2e:
7d:fe:68:a4:6f:68:4d:e2:2b:4d:21:aa:49:3e:1f:bb:f0:c0:
42:be:e3:b6:fb:97:d6:19:34:02:e2:ad:95:30:e4:32:09:1c:
43:1a:1d:a2:60:09:e3:79:08:e6:08:81:0a:ac:2a:0a:4d:d4:
a3:7f:b2:97:5e:82:78:45:2d:e1:5f:53:b9:e3:ed:3c:60:07:
10:3c:15:00:01:d5:80:3f:3b:fb:cc:af:2e:a0:55:40:c4:b0:
2e:ae:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:49 2026 by rpki-client