Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File: ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier: hbWPAd8fwbI4kL/de1fbm3rXLjrLo+BVV1Nn60k0qKU=
Subject key identifier: 55:83:EC:5B:98:90:1B:3A:29:64:4E:40:F9:3E:26:44:39:5E:5B:07
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 019D389C0876B1DA85F77BD7BF2851C99B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number: 097E
Signing time: Sun 29 Mar 2026 08:00:42 +0000
Manifest this update: Sun 29 Mar 2026 08:00:42 +0000
Manifest next update: Mon 30 Mar 2026 08:00:42 +0000
Files and hashes: 1: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: 1dkrbTL06zzyuRY9Ppdt33VvlrO3QlAvnLR0vn3cMPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:08:76:b1:da:85:f7:7b:d7:bf:28:51:c9:9b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Mar 29 08:00:42 2026 GMT
Not After : Mar 30 08:00:42 2026 GMT
Subject: CN=5583ec5b98901b3a29644e40f93e2644395e5b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:76:e2:bb:1c:86:9a:a2:0a:84:96:c6:c6:
60:f3:b3:0a:5e:49:13:74:2d:30:16:54:9d:27:ca:
26:7c:42:1f:49:0d:7c:c8:b9:87:f6:e9:4d:e0:bf:
84:c0:fb:24:da:53:ce:3b:83:dd:6f:87:8b:7e:c5:
5d:46:59:85:11:17:17:15:34:e7:f2:a5:fb:ae:04:
40:eb:08:ae:6c:c1:3c:de:45:4d:71:03:11:2b:ae:
49:48:db:6b:9e:ef:bf:5d:1f:30:97:bb:eb:39:6a:
a5:9e:ff:15:87:ee:23:fb:cb:8d:f0:56:f6:6a:a0:
35:24:c9:e9:37:a5:84:a3:7e:f5:10:de:fe:24:e8:
66:cf:a8:fd:b3:6f:d5:56:e2:d7:85:f5:31:37:af:
9b:b3:c9:2e:75:34:ee:56:7a:38:89:05:df:98:1c:
1d:7d:05:1f:82:cc:ab:6d:c6:fb:45:3c:00:23:d0:
45:a7:57:fe:2f:f0:a0:4d:11:99:a3:fc:50:25:4f:
72:86:79:95:89:ad:6e:fb:6a:6e:1a:8e:6e:3a:74:
a5:98:62:8a:fd:e9:33:00:00:c5:8a:3b:e6:ea:d2:
2e:3e:95:d8:55:22:e1:72:65:bb:25:7b:4c:69:bd:
13:5f:85:91:a7:bc:05:27:4d:9c:3f:db:79:16:4a:
27:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:83:EC:5B:98:90:1B:3A:29:64:4E:40:F9:3E:26:44:39:5E:5B:07
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:be:74:3e:95:f7:94:4f:ac:40:72:46:82:82:e4:8a:30:2a:
7c:e3:3b:8e:ce:0d:76:80:fd:c3:8f:e4:63:9f:db:14:3f:d2:
ce:99:44:1b:6b:b1:e1:b8:31:38:4c:f2:d6:3b:cd:ae:9c:72:
66:cd:be:54:50:87:f4:42:fe:53:2b:92:ab:bb:e6:10:6d:a6:
03:60:21:21:a4:8a:02:e8:04:6d:66:39:97:ba:dd:7c:12:d4:
33:81:a1:5c:0d:76:55:04:ce:a1:a1:e5:f6:d1:ad:da:2e:6f:
d6:ce:2d:b3:80:ab:69:48:90:08:46:cc:7a:37:f5:db:b9:d9:
d7:59:05:90:72:c3:e2:60:ab:01:8d:78:54:b9:ef:71:c1:70:
c6:64:57:d8:ff:71:5f:b6:6d:1d:37:86:d9:77:3c:f6:cc:8c:
c2:9f:5c:c5:bd:fb:e4:c0:91:c1:50:68:60:00:7b:20:c0:29:
1f:07:aa:2e:7f:f5:66:3c:2e:39:c1:2c:e2:bb:e6:0a:8c:d6:
ae:04:57:e9:16:2c:fa:4d:d1:22:f8:ba:98:e8:0a:09:14:f1:
53:96:e6:9b:b5:14:a3:06:11:a4:98:9b:f3:37:b3:c4:b6:0a:
42:4b:09:ee:c3:01:f7:65:ac:12:b8:d5:2b:27:08:22:2d:d0:
e5:18:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:46 2026 by rpki-client