Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
File: fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json)
Hash identifier: D+T+JS02O9IEb8KABjrAOPzAmJw5hvCvmRgh5zMZmbE=
Subject key identifier: FA:D9:85:EC:30:E9:C0:34:2E:55:A4:94:2C:38:36:B3:7E:F7:5B:BF
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Certificate issuer: /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial: 01A17C9776E7DB0768B774A5E38B7A2BF763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
Manifest number: 1079
Signing time: Tue 27 Oct 2026 09:01:03 +0000
Manifest this update: Tue 27 Oct 2026 09:01:03 +0000
Manifest next update: Wed 28 Oct 2026 09:01:03 +0000
Files and hashes: 1: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: YkrxFzW5Tn8Eu6ndsgriQUfyYUOaOM3Ti0E1tzyQHaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:76:e7:db:07:68:b7:74:a5:e3:8b:7a:2b:f7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Validity
Not Before: Oct 27 09:01:03 2026 GMT
Not After : Oct 28 09:01:03 2026 GMT
Subject: CN=fad985ec30e9c0342e55a4942c3836b37ef75bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:7a:8d:3e:97:9d:06:58:14:be:47:76:67:
36:0a:62:55:e0:46:53:b3:4d:77:4b:ce:91:6e:ce:
be:64:c5:40:f4:9e:ba:e9:00:5b:31:7f:91:31:9f:
22:6b:44:7c:53:ec:c4:31:5d:7b:db:37:57:48:4a:
c6:70:bc:04:48:d4:84:af:8d:be:bf:8c:32:ae:c0:
34:cc:64:b8:56:39:52:21:af:5a:f7:56:93:34:3b:
b3:0d:d8:59:4d:ae:b0:f6:6c:93:7a:6a:6b:98:4c:
73:5d:c2:e8:48:1d:ff:64:35:ea:e4:5c:ec:c6:04:
47:2b:c5:fa:72:81:30:99:72:aa:99:7b:72:0d:d8:
30:6f:80:83:68:7e:d0:96:62:75:e0:63:4c:6f:a2:
4f:37:50:36:d4:eb:b2:5d:c9:45:2e:27:c1:9b:e0:
58:b1:4c:a5:cc:76:37:27:df:ca:e5:f6:76:62:3e:
b2:c5:2b:b1:99:c3:f9:b5:97:8e:c6:8d:1f:a2:3c:
9f:f2:85:e3:45:d4:82:21:eb:3b:0f:cd:ef:8e:b1:
ca:9b:ca:b7:86:9e:e6:4c:a1:32:6a:af:4b:bd:b1:
48:be:3a:37:b0:b0:11:89:7f:2f:e6:6e:cb:ca:ef:
44:44:9c:61:4e:e7:fb:c2:58:ce:49:c9:1b:b7:a3:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:85:EC:30:E9:C0:34:2E:55:A4:94:2C:38:36:B3:7E:F7:5B:BF
X509v3 Authority Key Identifier:
keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:06:72:46:c8:09:59:dd:89:09:32:24:1f:8d:3c:3a:a3:39:
1f:be:95:b8:c4:4c:2e:38:d8:0b:54:e0:e5:87:8c:46:86:b3:
ed:ef:06:b0:4f:3b:bc:80:d3:74:1b:13:98:f7:01:2a:24:fa:
f3:df:a8:4c:40:de:09:92:10:e4:5d:54:ab:bd:6a:e7:f2:37:
17:1f:96:88:08:45:80:e6:c8:d2:f2:35:3e:c8:3a:14:1d:0b:
8c:da:51:03:d5:01:cb:d2:6f:ae:f8:42:7b:54:7c:fd:14:76:
51:61:97:d7:71:84:74:fa:4e:91:19:66:4c:75:a4:48:cd:de:
fd:3a:85:88:cd:8b:56:17:8e:4b:fe:28:cd:7e:3f:12:eb:d8:
d7:78:85:90:27:62:e7:ad:f2:34:9d:fc:8b:cd:d9:e3:ce:6e:
12:73:72:ae:f5:bc:8c:a0:a2:e8:20:63:42:a7:ff:88:e5:35:
b8:db:22:58:fa:78:06:10:f7:42:dd:38:69:df:80:7d:63:0e:
c0:ae:96:a5:5f:e2:56:55:f5:ef:0c:ad:de:e8:0b:be:ca:bb:
94:12:16:cb:8d:71:ee:7f:03:e2:02:be:b3:4c:a6:de:fc:10:
4c:ee:8c:00:23:ec:6c:91:f9:af:e6:6d:6b:08:23:de:f5:7c:
24:2f:87:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:35:41 2026 by rpki-client