Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
File: fjGzT4SD1T_rGSrhFFSs43vH9YE.mft (raw, json)
Hash identifier: LYRahqMlZUnUAfs7iSSC3IyhuAeCYMh6QhqDf72Bs5Q=
Subject key identifier: E9:6A:A3:50:61:03:16:7B:57:59:EB:C3:76:B9:09:EF:48:B8:54:D6
Authority key identifier: 7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
Certificate issuer: /CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Certificate serial: 019D38D36519B2FFA7706B3BE59E8790341A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
Manifest number: 065D
Signing time: Sun 29 Mar 2026 09:01:11 +0000
Manifest this update: Sun 29 Mar 2026 09:01:11 +0000
Manifest next update: Mon 30 Mar 2026 09:01:11 +0000
Files and hashes: 1: fjGzT4SD1T_rGSrhFFSs43vH9YE.crl (hash: 2otxnh5a4x5KyQp50XnEmDq6IyeSQoMDxBpJ15e9RjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:65:19:b2:ff:a7:70:6b:3b:e5:9e:87:90:34:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Validity
Not Before: Mar 29 09:01:11 2026 GMT
Not After : Mar 30 09:01:11 2026 GMT
Subject: CN=e96aa3506103167b5759ebc376b909ef48b854d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:95:98:8b:2a:a2:9c:da:72:f3:9c:e4:5e:
37:7e:33:c5:49:71:8f:5f:2a:ad:ac:bb:bd:7e:22:
81:b3:24:7b:d3:70:00:37:ac:60:a8:c1:04:82:d8:
8e:81:19:e0:b7:b0:76:59:b2:27:9a:82:eb:f9:93:
57:36:63:11:3d:bb:6e:0d:7a:0c:bb:a6:ae:32:05:
bf:3c:44:1a:44:10:e2:f1:29:be:48:74:3b:90:11:
f3:e7:47:37:ad:e9:e1:ba:ae:a0:81:fd:3d:25:12:
c6:95:f6:cf:b2:6c:62:8d:f3:57:16:ee:76:36:d5:
87:0f:68:bd:02:41:1f:68:fb:ed:c2:3d:62:e2:84:
18:37:05:6b:23:1e:58:d9:25:93:34:1b:3d:55:d7:
7c:63:79:5b:23:2d:de:f2:ec:29:cd:5e:e7:f6:d7:
22:69:b4:8e:c0:19:16:fe:c9:05:4f:92:39:7f:e7:
02:40:56:3e:58:d6:37:f8:22:2a:1c:cb:49:c8:fc:
f4:f4:ed:cf:84:83:29:69:c6:b2:1e:52:40:a4:88:
f2:89:08:33:4c:41:e8:70:6c:c3:6f:45:23:49:3e:
a2:68:e0:d3:da:8a:a4:57:b4:cb:e4:17:90:81:69:
99:32:80:24:40:73:da:cb:c2:d8:1e:24:40:c1:af:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6A:A3:50:61:03:16:7B:57:59:EB:C3:76:B9:09:EF:48:B8:54:D6
X509v3 Authority Key Identifier:
keyid:7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:16:35:ae:ac:07:86:6c:fb:ec:b4:b2:0d:77:0b:27:4c:71:
f5:bb:d4:b8:0a:c4:65:b7:48:16:49:1a:ff:be:72:96:78:7d:
16:2a:b2:32:ee:5d:41:3a:f9:96:8a:a7:0d:41:69:80:eb:65:
9d:e3:c8:11:3f:57:cc:83:9a:41:d4:5a:41:d4:f7:b6:d6:07:
41:cf:2f:5d:62:b2:33:a0:25:5c:1d:2d:eb:ac:f8:41:89:2d:
5f:4f:32:11:ec:8d:57:8b:6a:30:f3:e9:b8:63:15:ef:a5:37:
2e:3d:b1:1a:77:ef:62:d2:ae:f2:15:b5:3d:9a:21:97:6d:54:
07:f3:c6:ac:cf:46:cf:1d:78:20:dd:17:76:b4:3b:d0:7a:96:
cc:d3:ca:de:97:9b:47:78:e1:1c:98:e2:53:61:b4:c5:3d:3f:
12:de:77:1a:ef:e0:c8:ec:35:37:e1:69:c8:a4:6b:eb:ca:14:
34:14:78:7e:05:f7:fe:a3:b5:2b:3b:ad:7b:aa:28:08:f5:06:
2c:97:78:f4:84:c2:88:ba:d1:99:34:29:48:72:ce:5b:e9:d0:
cf:4b:5e:74:bc:4a:67:65:ba:28:05:6f:d0:b2:40:42:5e:da:
ad:20:13:5d:55:41:5b:a1:e5:f1:1e:84:77:ad:4e:f2:2d:e9:
0f:99:ec:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0402UZsv+ncGs75Z6HkDQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMzFiMzRmODQ4M2Q1M2ZlYjE5MmFlMTE0NTRhY2UzN2Jj
N2Y1ODEwHhcNMjYwMzI5MDkwMTExWhcNMjYwMzMwMDkwMTExWjAzMTEwLwYDVQQD
EyhlOTZhYTM1MDYxMDMxNjdiNTc1OWViYzM3NmI5MDllZjQ4Yjg1NGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8eVmIsqopzacvOc5F43fjPFSXGP
XyqtrLu9fiKBsyR703AAN6xgqMEEgtiOgRngt7B2WbInmoLr+ZNXNmMRPbtuDXoM
u6auMgW/PEQaRBDi8Sm+SHQ7kBHz50c3renhuq6ggf09JRLGlfbPsmxijfNXFu52
NtWHD2i9AkEfaPvtwj1i4oQYNwVrIx5Y2SWTNBs9Vdd8Y3lbIy3e8uwpzV7n9tci
abSOwBkW/skFT5I5f+cCQFY+WNY3+CIqHMtJyPz09O3PhIMpacayHlJApIjyiQgz
TEHocGzDb0UjST6iaODT2oqkV7TL5BeQgWmZMoAkQHPay8LYHiRAwa9/2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlqo1BhAxZ7V1nrw3a5Ce9IuFTWMB8GA1UdIwQY
MBaAFH4xs0+Eg9U/6xkq4RRUrON7x/WBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmpHelQ0U0QxVF9yR1NyaEZGU3M0M3ZIOVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jMmY2ODYtNDJiYS00NzhiLTljOWQt
NjEyNmFkZWMyM2FiLzEvZmpHelQ0U0QxVF9yR1NyaEZGU3M0M3ZIOVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9jMmY2ODYtNDJiYS00NzhiLTljOWQtNjEyNmFkZWMyM2Fi
LzEvZmpHelQ0U0QxVF9yR1NyaEZGU3M0M3ZIOVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBY1rqwH
hmz77LSyDXcLJ0xx9bvUuArEZbdIFkka/75ylnh9FiqyMu5dQTr5loqnDUFpgOtl
nePIET9XzIOaQdRaQdT3ttYHQc8vXWKyM6AlXB0t66z4QYktX08yEeyNV4tqMPPp
uGMV76U3Lj2xGnfvYtKu8hW1PZohl21UB/PGrM9Gzx14IN0XdrQ70HqWzNPK3peb
R3jhHJjiU2G0xT0/Et53Gu/gyOw1N+FpyKRr68oUNBR4fgX3/qO1Kzute6ooCPUG
LJd49ITCiLrRmTQpSHLOW+nQz0tedLxKZ2W6KAVv0LJAQl7arSATXVVBW6Hl8R6E
d61O8i3pD5nsqg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:03 2026 by rpki-client