Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
File: fm16FsP81nnQXSjtkgk1wIaujP0.mft (raw, json)
Hash identifier: ouBTWr21ohycxB/2x1KzD3j0dt0bZlkEafLz1NnTdzs=
Subject key identifier: 24:F7:E7:2B:D9:D7:A2:05:3F:0C:0C:2A:D8:84:86:80:99:EB:30:73
Authority key identifier: 7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
Certificate issuer: /CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Certificate serial: 019D38667C9A8AC68A3AA710D3DEC65AB56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:02:13 +0000
Manifest this update: Sun 29 Mar 2026 07:02:13 +0000
Manifest next update: Mon 30 Mar 2026 07:02:13 +0000
Files and hashes: 1: fm16FsP81nnQXSjtkgk1wIaujP0.crl (hash: oulziwpIhe71fIm8H5/3IJVIEn3fAAIbVkZuTCBkTM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7c:9a:8a:c6:8a:3a:a7:10:d3:de:c6:5a:b5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Validity
Not Before: Mar 29 07:02:13 2026 GMT
Not After : Mar 30 07:02:13 2026 GMT
Subject: CN=24f7e72bd9d7a2053f0c0c2ad884868099eb3073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:97:c1:1f:87:af:19:42:11:db:54:0b:ac:
11:66:14:82:dc:6b:21:19:5f:05:17:36:7b:d7:07:
9e:99:99:fa:41:c4:aa:7c:04:c6:23:a2:f1:7e:66:
4d:88:dd:05:c5:bd:5b:84:e0:1a:c5:4e:ee:06:85:
27:8f:1b:4e:1b:52:34:d8:d7:3a:68:e5:d6:93:e5:
21:70:d2:f1:50:75:63:11:37:a2:63:31:52:4e:18:
d2:88:75:4a:a2:1f:0c:98:5c:c1:ac:c0:65:d1:6c:
af:aa:44:6a:c1:9c:18:e5:b2:ca:8b:c6:fa:41:66:
ed:2e:5e:ad:39:07:f2:57:ab:7b:3a:07:5e:ec:d0:
4a:8a:3a:b6:77:58:48:a4:f9:67:56:12:86:82:51:
80:0c:02:5b:f6:76:20:98:5a:d9:d4:52:ce:e5:4b:
18:a8:bc:14:af:6d:31:ed:51:85:43:bb:6c:17:40:
78:6b:f3:9e:be:8a:26:c6:a8:42:99:3f:67:fe:af:
ad:ac:29:58:3d:f5:86:ee:90:10:01:56:c7:00:d9:
69:71:58:bb:1f:6a:d5:61:a2:1d:ac:93:68:48:89:
39:a9:cc:15:79:cf:15:be:fe:d7:93:51:cb:d2:92:
49:0f:f1:75:46:91:6f:07:ab:a5:d9:16:5e:1b:74:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F7:E7:2B:D9:D7:A2:05:3F:0C:0C:2A:D8:84:86:80:99:EB:30:73
X509v3 Authority Key Identifier:
keyid:7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:16:01:35:25:a3:c8:31:d0:27:2f:b3:2b:ba:43:58:4e:28:
2c:49:94:5f:fd:54:ea:d2:31:a5:e4:21:f2:06:3b:a2:5f:ae:
81:60:5b:16:da:7a:7d:c5:24:b0:eb:e0:cc:38:ed:0a:1a:81:
d0:d3:65:c8:77:31:a3:73:90:d4:5e:e5:80:a3:77:29:98:de:
62:fc:d7:2c:9f:6a:fa:1b:f5:57:c5:a6:1f:2e:20:c4:2c:9a:
d5:b7:98:e4:e5:13:c4:d1:15:46:dc:bb:a5:3a:38:6a:c3:9b:
aa:ed:4f:f7:e4:01:fe:09:d6:1f:1f:03:c9:02:d2:ec:a7:7f:
7b:62:8c:af:7c:f8:19:e3:aa:ea:f6:71:6c:fb:94:8a:f3:8c:
d4:2e:53:bb:6a:8f:13:93:99:67:5a:51:e1:e0:79:06:16:2a:
fd:f2:24:0d:f0:f6:8e:2f:8d:aa:ce:6c:3c:59:b3:8c:6d:db:
03:09:bb:fc:da:97:db:3d:2a:42:2e:08:5e:60:89:46:b0:06:
f1:19:cb:e2:a3:5d:63:b0:fe:e3:d2:29:1e:8a:79:f8:2c:11:
b7:36:1d:f7:4c:7c:71:2f:a8:eb:7f:33:96:34:12:50:d6:7f:
dd:17:d9:3a:62:98:15:63:e0:70:c9:ba:2e:f9:35:f8:5c:19:
b7:b2:d6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:20 2026 by rpki-client