Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.mft
File: fAZh3JBogykjw7tyv8knJTtL2bg.mft (raw, json)
Hash identifier: lmisZzCw+uEIm6jHALQvPjlmAHNhAZqsJpdXz7DrQHI=
Subject key identifier: 3F:E1:B9:89:76:24:DD:66:9A:AA:F4:E6:E7:7B:1E:70:CD:A3:6A:9F
Authority key identifier: 7C:06:61:DC:90:68:83:29:23:C3:BB:72:BF:C9:27:25:3B:4B:D9:B8
Certificate issuer: /CN=7c0661dc9068832923c3bb72bfc927253b4bd9b8
Certificate serial: 019D38D2E8B9DC421736E6FC29C992E0993F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAZh3JBogykjw7tyv8knJTtL2bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.mft
Manifest number: 01F1
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: fAZh3JBogykjw7tyv8knJTtL2bg.crl (hash: 1FKJb7z/lc4aVzp4D2zox3OjulIehH8r02LOEbGDv8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAZh3JBogykjw7tyv8knJTtL2bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e8:b9:dc:42:17:36:e6:fc:29:c9:92:e0:99:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c0661dc9068832923c3bb72bfc927253b4bd9b8
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=3fe1b9897624dd669aaaf4e6e77b1e70cda36a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:32:ec:e2:53:16:1d:8d:4e:c2:ea:ac:bc:
9a:32:4f:5b:c2:e2:59:02:e4:da:ee:80:8d:e4:fd:
ea:0e:b1:ea:2a:98:82:af:24:aa:06:11:b1:97:ae:
e4:5c:ee:a6:04:72:92:22:70:a1:21:b1:86:58:22:
5d:ef:3e:4f:43:40:4a:8b:9f:b8:d9:9a:12:86:cd:
58:6b:35:c5:9b:5e:ed:d7:7d:44:d9:78:95:e7:29:
4e:06:33:72:1b:b9:e5:b3:44:05:91:95:04:3b:03:
ac:2e:91:e2:ee:db:fc:f3:cd:f4:8c:5d:19:5b:b5:
5a:46:93:10:31:63:d9:a9:dd:0e:83:f8:05:bc:dc:
09:85:8b:44:4e:7d:13:84:0a:f4:ac:9b:04:c4:28:
0d:d2:cc:b9:f8:6b:8c:00:87:11:46:bc:70:74:6c:
da:c8:fc:e7:ff:ef:38:2b:70:86:a6:67:07:81:48:
1c:3f:a0:3e:5e:d6:2e:1c:07:b7:8f:c4:cb:34:3d:
aa:1f:0f:20:87:88:b6:6a:83:15:32:50:0d:78:66:
d0:d3:19:f8:1d:ad:f3:ad:3f:d9:47:8f:c4:1b:32:
2b:eb:44:cc:dc:3f:d9:96:49:2c:ed:a9:7c:08:50:
cc:4e:55:36:79:f6:32:0f:5d:2a:e9:37:3f:13:54:
80:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E1:B9:89:76:24:DD:66:9A:AA:F4:E6:E7:7B:1E:70:CD:A3:6A:9F
X509v3 Authority Key Identifier:
keyid:7C:06:61:DC:90:68:83:29:23:C3:BB:72:BF:C9:27:25:3B:4B:D9:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAZh3JBogykjw7tyv8knJTtL2bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:80:2d:81:49:6c:93:d2:81:ff:2c:ee:fd:13:5d:c6:35:70:
64:a7:1b:19:3e:d1:94:92:ef:c2:81:80:90:c8:bf:0c:fc:08:
0d:90:91:ef:79:ef:da:73:cb:20:8a:78:8a:4e:1a:52:a5:e9:
90:1a:c2:cd:a3:66:69:e2:1f:90:6b:b7:15:fb:1f:e6:7b:04:
85:03:77:ce:1d:13:73:c2:ee:fe:94:59:7c:77:50:a5:95:11:
84:59:d4:78:bc:fb:2b:22:06:6b:8e:f2:94:80:27:ef:16:02:
b5:6b:2a:80:ee:a4:70:58:bb:68:a4:9e:59:2e:63:62:0a:cc:
ea:31:00:f5:e5:e2:ca:b7:4f:5c:19:41:d3:e5:8f:1e:9e:b4:
c9:de:f5:65:d5:ca:d5:01:84:da:85:88:d6:1e:10:29:80:4f:
7b:a3:32:49:2d:71:97:20:b2:15:ad:bc:b6:06:07:c4:2c:9f:
df:44:84:b3:a4:7c:4b:f4:8b:b1:79:16:56:a8:b2:c0:10:35:
40:8b:65:27:5b:6d:8e:ed:07:35:db:55:7d:ab:b1:34:27:dc:
72:17:0d:1b:1e:89:e6:e4:37:88:f9:36:b2:93:19:fc:63:24:
75:ab:37:6d:e8:7b:71:81:37:13:5d:0b:24:5a:f4:ab:70:7e:
62:b0:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:17 2026 by rpki-client