Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier: xpMpLHtXw9mkqamlD9fMu4bh/boEPgBa+NCA6OzTYMs=
Subject key identifier: 0F:BE:15:28:F9:D0:F9:63:F9:96:2A:92:82:E6:04:6D:B0:1C:08:94
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer: /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial: 019D386660F480091E9FE39B2487873A24DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number: 1432
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: 3VNBg6PpAHVHKHgSPDXVfb3wR1rc4CyHTtvyii2ZUYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:60:f4:80:09:1e:9f:e3:9b:24:87:87:3a:24:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=0fbe1528f9d0f963f9962a9282e6046db01c0894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:f8:8f:a0:08:bd:b7:17:ba:93:4a:1e:63:
8b:b6:3d:dc:82:1b:93:80:01:50:bc:00:34:55:a1:
6a:b3:6c:79:d0:23:e0:2c:24:f2:71:13:b8:53:22:
9b:ec:10:3e:c4:b8:92:46:ce:db:bd:bc:f7:43:1f:
a6:a6:47:10:1e:19:af:99:8e:63:e8:b7:89:21:36:
32:05:b3:56:1c:9a:7b:6d:e0:4a:03:73:ec:4d:82:
f0:ac:62:72:12:9c:6d:2f:4c:fd:66:4e:2b:9d:91:
ee:d0:5f:7b:57:4a:7f:7a:84:07:26:9d:88:dd:71:
c7:c0:63:68:2a:b6:91:39:03:10:04:0d:c7:bd:a0:
67:a0:17:52:d3:af:49:31:a9:52:e9:7c:6f:04:1d:
38:4e:81:9c:cb:38:e0:20:b8:78:49:c9:ef:5b:9a:
b6:c3:d4:be:14:d8:51:b5:87:cd:cf:ed:21:24:cb:
06:5b:f2:43:f3:d5:85:e3:65:4a:bc:f8:a2:71:f3:
ad:4e:c7:f2:3e:a9:24:5c:28:57:af:b5:33:2b:59:
93:43:65:e7:51:9c:2e:00:a8:3b:53:48:4d:d6:77:
1c:4f:36:ed:4b:f3:ef:44:f9:82:f4:b6:08:b8:a7:
64:e2:53:5c:0c:9e:1d:a9:b9:75:76:6e:aa:97:9f:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BE:15:28:F9:D0:F9:63:F9:96:2A:92:82:E6:04:6D:B0:1C:08:94
X509v3 Authority Key Identifier:
keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:a0:60:59:23:17:f5:d5:90:5f:7c:79:02:8a:38:83:d7:14:
a1:98:15:c6:32:8c:eb:76:54:0c:c4:05:a7:81:92:3b:4f:0c:
ad:a2:40:35:24:20:0b:a4:4e:20:83:08:74:2c:bf:54:0e:b3:
b5:92:a3:6e:f8:06:fb:85:cc:72:ed:76:1e:b6:29:6f:3b:52:
99:82:0a:93:a0:fd:60:d6:b3:b7:9e:f6:04:53:6f:82:e7:92:
a1:3d:f9:8f:40:10:89:d1:5b:d0:0c:35:94:07:bb:a6:fc:ee:
c3:37:f1:28:2a:45:d9:36:86:f6:2e:b7:76:88:87:e6:b5:ff:
b0:10:64:c9:6a:53:66:f3:ad:51:98:6c:4c:28:98:75:02:b0:
03:2b:c3:6f:10:39:bf:dc:af:81:3b:11:d4:22:5b:6f:db:93:
70:9f:4a:d2:94:80:b0:c3:1d:f0:a7:6e:79:f9:16:5f:6c:d2:
8e:12:7c:70:9b:b8:7a:bc:f1:e3:61:de:6b:09:b1:e2:a4:8c:
b7:9a:67:2e:d5:30:76:7d:e9:88:eb:55:a0:69:e2:b0:09:e4:
80:0b:e8:4e:46:da:a9:dd:13:5d:12:bd:f1:bf:f8:c3:f2:fe:
14:54:1a:7b:11:fb:02:ed:08:61:d2:20:ea:b2:83:33:b4:56:
e3:b9:44:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:12 2026 by rpki-client