Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
File: fj-4U_hAs3cM0_pCs_nS-b59G38.mft (raw, json)
Hash identifier: l8NDIpqz/KOSdANTZ7KI3zM3pBueTOVUUZLYJjUYmaI=
Subject key identifier: CB:A5:DE:91:66:54:59:2B:AC:BE:9B:31:77:1A:51:2F:21:AC:FC:D3
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Certificate issuer: /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial: 019D38661B8725D892822C0B65BC68F56E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
Manifest number: 1741
Signing time: Sun 29 Mar 2026 07:01:48 +0000
Manifest this update: Sun 29 Mar 2026 07:01:48 +0000
Manifest next update: Mon 30 Mar 2026 07:01:48 +0000
Files and hashes: 1: fj-4U_hAs3cM0_pCs_nS-b59G38.crl (hash: CAxUHYuZUwHOSKPkwdicTq859mXM2u3eb8NpHyyPksc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1b:87:25:d8:92:82:2c:0b:65:bc:68:f5:6e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Validity
Not Before: Mar 29 07:01:48 2026 GMT
Not After : Mar 30 07:01:48 2026 GMT
Subject: CN=cba5de916654592bacbe9b31771a512f21acfcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:53:2d:93:f5:08:11:6f:63:4d:a2:4a:a9:
41:a7:9b:24:6a:6b:13:4b:20:ec:82:47:c1:ba:b6:
71:52:d6:d5:cf:ec:9a:a2:35:6c:4b:ca:86:3e:0c:
64:eb:ea:88:fa:56:9a:c9:22:43:98:d8:0d:f0:c2:
97:f3:8c:a2:e8:f9:d4:a3:1e:6c:23:79:c2:9f:8d:
03:d7:76:cd:23:a0:e6:f8:2d:d6:3e:7d:b6:66:e7:
e5:67:a9:24:5e:4c:b4:90:da:f3:bd:0a:4e:b7:e4:
67:06:06:1e:92:0a:f3:5b:b2:b8:28:a9:9b:ed:55:
e0:aa:83:0f:5b:af:51:08:ce:d1:a5:10:fd:7e:4a:
fe:b7:02:ea:d8:5d:11:2b:78:8c:aa:f8:21:b6:d7:
a3:fb:4b:f3:6c:5e:3e:29:d4:15:4e:4d:9b:25:6b:
5a:aa:a2:35:a4:8b:b3:e2:c0:a9:41:04:a5:f0:eb:
e8:57:48:8d:99:9c:a3:77:2b:b4:d4:f5:74:04:99:
42:13:ee:65:80:1f:96:ec:05:5e:4a:db:d5:fd:ec:
77:d0:02:36:45:16:19:b9:13:f1:a4:c0:e9:db:cd:
a6:f0:b4:8b:e3:ce:75:95:0e:0c:48:e0:bd:3c:78:
b3:64:32:ec:8e:d6:e8:a1:3e:84:80:df:91:39:ec:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:DE:91:66:54:59:2B:AC:BE:9B:31:77:1A:51:2F:21:AC:FC:D3
X509v3 Authority Key Identifier:
keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0c:a0:7c:7d:f2:fb:2f:29:98:c0:37:c9:a3:82:99:77:bb:
1a:bf:1b:55:b7:6b:9e:8b:4f:57:a5:d6:17:53:72:6d:65:c3:
44:96:8e:3e:d6:4e:fd:ed:15:a8:f3:6e:20:7b:9f:58:17:61:
4e:46:4a:23:cc:87:ae:31:25:ae:51:94:eb:82:9c:c8:01:ff:
53:9f:4e:9a:5b:26:59:f6:81:ea:c8:47:17:de:c1:3d:cb:af:
54:72:d2:05:89:8d:4b:e4:7a:5c:3e:e1:6a:cb:5a:09:87:90:
eb:2a:6e:07:ae:58:25:e8:9b:5a:6c:cb:c3:d0:94:57:bd:21:
e4:70:d5:d5:14:4e:db:15:95:40:a8:85:10:ce:78:06:7f:a1:
03:5d:b9:11:ec:89:cf:27:9c:f7:9d:70:e5:41:21:29:6e:9f:
71:75:ac:f1:bb:8c:b2:21:f1:cd:ef:bc:3e:3f:5a:9e:54:f7:
bf:c8:f5:d9:43:fb:9f:12:b1:c2:d9:29:fa:c7:46:fe:26:88:
e3:9e:6a:31:6a:c8:aa:80:0a:27:bc:74:5d:30:83:61:dd:f0:
da:58:c1:76:69:49:55:23:d3:64:be:ef:df:1f:30:09:8d:49:
55:d4:eb:b0:ab:a9:4a:f0:31:5f:20:f0:f5:8e:c7:7f:ae:6a:
5c:92:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:10 2026 by rpki-client