Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier: rHt5HUn37A1XFeXUgp7vpe0b97j4wHJvAjCwncWG204=
Subject key identifier: 1E:8E:01:9A:75:6F:DE:31:29:A9:4B:17:3A:C9:54:BC:25:B1:3C:6F
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial: 019D38667F941B696FD12F551F185F320F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number: 0996
Signing time: Sun 29 Mar 2026 07:02:14 +0000
Manifest this update: Sun 29 Mar 2026 07:02:14 +0000
Manifest next update: Mon 30 Mar 2026 07:02:14 +0000
Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: COrE2cWTmzc7y84Wdj+nyOUMa+ChiUPEHRhUHoQaozY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7f:94:1b:69:6f:d1:2f:55:1f:18:5f:32:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Validity
Not Before: Mar 29 07:02:14 2026 GMT
Not After : Mar 30 07:02:14 2026 GMT
Subject: CN=1e8e019a756fde3129a94b173ac954bc25b13c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:ad:d0:ad:86:9d:83:f9:c1:e6:c3:12:66:
09:cf:4a:70:da:6e:0e:b0:8f:6c:bb:96:63:90:cb:
48:9f:bc:ed:5b:69:ba:21:1d:8b:fa:4f:fb:7a:69:
57:52:fc:3d:be:e7:f4:18:5a:dc:0f:a3:2c:84:c1:
8b:77:1a:57:28:c1:2c:4d:c3:38:41:16:69:51:9b:
e8:50:78:f4:37:81:ba:cc:64:8f:ee:a2:64:3f:9e:
09:43:df:36:37:c6:29:e6:85:fa:a1:04:70:d2:cd:
92:86:ed:ba:e0:79:07:77:b3:ab:d4:62:3a:e5:14:
a9:92:aa:c8:c1:15:6f:b0:59:12:55:cc:86:ca:d6:
59:9a:7c:c3:0d:7d:7f:53:e0:3a:a2:f7:25:01:59:
e0:27:be:b4:7c:88:e7:72:4e:99:f6:5d:40:f5:df:
ed:ce:d5:ec:54:54:93:7b:23:9a:af:a3:75:61:30:
9c:95:6e:bb:7a:f9:fc:e8:60:b5:4c:66:50:12:b0:
52:d5:76:e7:f7:45:a8:90:1e:dc:0a:b9:05:86:66:
5c:c6:dc:de:ec:66:9e:16:fe:55:5a:5e:dc:54:a7:
70:9c:8d:ab:9d:d9:ac:0f:f4:2f:62:92:3b:71:cb:
64:b7:07:35:00:61:be:66:b2:7e:ee:dc:90:f4:4a:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8E:01:9A:75:6F:DE:31:29:A9:4B:17:3A:C9:54:BC:25:B1:3C:6F
X509v3 Authority Key Identifier:
keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:de:e7:c6:4d:c9:33:41:78:82:b4:86:a9:08:50:ae:1f:e3:
a5:a4:08:57:7e:60:d6:ef:88:57:b2:cb:9d:5b:cb:c7:8b:ad:
2a:9f:55:fb:c1:09:88:95:7a:83:b3:c7:77:6e:4b:84:6b:27:
46:cd:fc:98:d1:aa:80:08:f5:69:30:38:dd:cf:2a:49:44:e8:
49:23:59:03:39:2c:5e:1d:53:4b:58:07:e8:e9:cb:87:3d:c9:
33:4d:a6:e2:e7:f2:cb:6b:99:f0:70:e9:e2:7a:e3:b9:ed:46:
c1:76:33:df:2c:20:c9:95:dd:a9:ce:52:03:74:78:b2:0f:4c:
28:bb:c6:76:f1:fb:b8:c1:2e:67:71:c4:94:2f:b8:3d:2e:8a:
94:54:c9:f8:26:8a:90:dc:37:11:82:9a:b5:d3:61:27:81:f0:
3e:f9:7c:d7:93:73:86:40:23:80:94:5b:2b:cb:df:01:6a:ae:
1f:ff:a9:45:55:26:a1:92:8d:4e:82:82:a4:ba:0b:00:91:70:
50:4b:50:ca:ca:ce:de:13:c4:f1:d3:f1:ad:3a:34:4d:bc:ed:
72:10:48:03:3b:e4:bf:48:71:47:e3:13:46:c6:60:88:b7:db:
af:a4:d0:4f:87:19:2c:75:e7:b9:21:dc:15:6d:9f:d9:33:94:
ae:a2:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:09 2026 by rpki-client