
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
File: fj-4U_hAs3cM0_pCs_nS-b59G38.mft (raw, json)
Hash identifier: B50ptzrdocV2nxKuI3wjVBfKnSZVWOTa/bGHqv6LXHM=
Subject key identifier: 7E:F6:3A:B3:05:B5:5A:68:1B:54:70:0E:D6:3A:FB:37:E9:C1:70:29
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Certificate issuer: /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial: 01A1322232DC7208FA28B59B8B59F07B6092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
Manifest number: 1950
Signing time: Mon 12 Oct 2026 22:01:04 +0000
Manifest this update: Mon 12 Oct 2026 22:01:04 +0000
Manifest next update: Tue 13 Oct 2026 22:01:04 +0000
Files and hashes: 1: fj-4U_hAs3cM0_pCs_nS-b59G38.crl (hash: s8Fa/9vNEck9CrwSfNqF4b+aCC8VkNgMhKyD8WmEq8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:22:32:dc:72:08:fa:28:b5:9b:8b:59:f0:7b:60:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Validity
Not Before: Oct 12 22:01:04 2026 GMT
Not After : Oct 13 22:01:04 2026 GMT
Subject: CN=7ef63ab305b55a681b54700ed63afb37e9c17029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:72:fa:9c:39:7d:ce:5a:ad:0d:b9:22:fb:46:
c6:d3:15:53:90:29:2d:6f:01:fa:ac:c3:61:8c:4b:
78:c1:79:52:d0:4e:f8:f8:96:d7:a1:92:6b:d9:18:
55:93:dd:11:26:3d:e7:84:01:75:56:43:d3:3f:b7:
5e:e0:52:ed:04:e3:11:78:3f:18:28:83:f1:27:5c:
b6:7c:7f:1f:2a:09:da:3a:9a:5b:e1:ae:d6:ae:d0:
a9:9f:93:ed:39:40:4b:2c:56:8f:95:0a:19:64:35:
35:d5:a4:66:a3:8e:9a:6c:19:fc:3c:62:99:3f:79:
5b:36:1e:f0:5e:08:ee:04:33:74:ed:0c:1d:31:2a:
f7:2d:c0:e8:ef:6a:56:db:08:7f:f5:9d:cc:12:d5:
9d:ef:66:77:65:eb:87:b3:a2:5e:2f:58:51:ba:3f:
6a:f2:ea:a8:31:e1:8e:3c:b2:98:c4:2f:3e:48:94:
54:c9:70:f7:06:4e:2c:55:9b:ce:42:d0:24:7b:36:
bb:32:30:15:4a:6f:b5:cb:e4:07:8c:af:e0:79:5e:
70:44:1d:70:f0:ff:25:db:30:6d:70:99:db:75:dc:
b0:d5:61:e3:21:44:b7:6f:fe:84:71:3e:50:99:95:
b1:de:3a:81:15:18:9f:7a:53:60:35:92:6a:f5:93:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F6:3A:B3:05:B5:5A:68:1B:54:70:0E:D6:3A:FB:37:E9:C1:70:29
X509v3 Authority Key Identifier:
keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:63:e9:52:00:36:0b:52:fc:1b:c0:66:54:7c:80:b1:93:55:
81:2f:e6:d1:40:e5:0c:fb:10:fa:3f:ef:b0:e0:03:03:03:cb:
6f:64:94:1b:b2:65:fc:1c:8c:0f:8b:46:c6:6c:f0:bf:87:5d:
cd:3e:42:79:7a:dc:7d:78:b8:b3:e9:9c:ff:40:5e:b4:70:a5:
06:a0:5e:60:af:65:4b:33:49:4a:c7:7a:46:16:7d:c6:9a:3a:
40:ed:6e:62:5b:9d:87:52:5b:c5:c7:d1:2f:a7:c1:9b:7d:c1:
17:b5:4d:16:82:35:fb:cf:78:7a:e3:c3:82:89:a1:aa:40:59:
8f:d4:e1:ab:43:17:7a:45:ec:e0:aa:e6:6a:c6:e1:3f:f1:dd:
6c:6c:7b:51:15:e2:46:64:6a:42:93:5a:61:37:eb:3b:46:e6:
92:35:96:ad:a0:83:47:ff:81:1e:53:01:9b:93:6a:10:ee:bd:
0f:9d:ae:cf:b2:09:fd:78:01:24:65:6f:f1:0c:c0:a8:18:f5:
e2:ab:15:3d:c5:92:d5:7d:50:15:b0:5d:b1:0a:a1:b7:c7:ab:
6b:e6:c7:c9:68:ac:bb:59:1d:f1:17:66:42:2d:69:8d:3e:eb:
05:ea:2f:a9:1d:c3:6b:85:0d:76:53:29:47:db:57:46:66:fa:
5d:3b:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:17:07 2026 by rpki-client