Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
File: FSj8hxfpGa4HJhquKNjIRWTIpxI.mft (raw, json)
Hash identifier: v/UTSzhMeHquoTTF9jzPJRGvlAoMGOVs2+R0Da2h2EU=
Subject key identifier: 21:01:F5:EC:64:09:D4:F9:63:96:CC:49:A0:2E:D6:10:D0:84:61:77
Authority key identifier: 15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12
Certificate issuer: /CN=1528fc8717e919ae07261aae28d8c84564c8a712
Certificate serial: 019D3909AC3EFED513A5906A912841B8847D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
Manifest number: 11EF
Signing time: Sun 29 Mar 2026 10:00:28 +0000
Manifest this update: Sun 29 Mar 2026 10:00:28 +0000
Manifest next update: Mon 30 Mar 2026 10:00:28 +0000
Files and hashes: 1: FSj8hxfpGa4HJhquKNjIRWTIpxI.crl (hash: 5Hbsv4Kc9j1edp6gUYNgvMh3xinJTO4umMRqLicoYAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ac:3e:fe:d5:13:a5:90:6a:91:28:41:b8:84:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1528fc8717e919ae07261aae28d8c84564c8a712
Validity
Not Before: Mar 29 10:00:28 2026 GMT
Not After : Mar 30 10:00:28 2026 GMT
Subject: CN=2101f5ec6409d4f96396cc49a02ed610d0846177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:cb:e7:a3:c2:0a:2a:02:c7:57:76:a8:f6:
ca:d9:6b:28:23:23:86:c7:b6:80:23:8a:41:c1:d7:
9d:bb:0d:ac:90:1f:0e:cb:d3:af:e3:36:4a:42:8a:
d1:b5:a5:e3:cf:9b:38:59:56:c1:d0:d4:a3:53:62:
7a:04:d1:ff:1e:04:4d:b3:ef:ca:02:e9:f4:e0:0f:
14:75:ed:15:d9:95:ea:40:dc:d5:c6:1f:db:84:7a:
65:a7:04:0a:ee:47:47:c0:5b:0b:71:00:51:36:3a:
4e:d3:ae:4d:af:02:ef:80:f3:7b:69:bc:d7:3b:47:
94:8e:00:eb:ef:5a:77:6e:76:3a:38:30:f0:ac:b8:
d4:42:3c:8a:34:43:d8:74:4b:00:92:c0:5e:d8:37:
c7:e1:41:0a:a0:1d:b2:85:b3:f7:de:0c:cc:7f:4e:
61:61:ee:0e:b9:a0:48:7b:65:ab:c0:62:34:2e:11:
0d:79:80:47:5c:d7:49:c8:45:74:91:6e:e9:ef:9b:
8f:91:ef:b3:47:81:24:04:44:fb:f5:29:b8:51:e2:
45:41:9f:af:b3:20:36:82:39:9c:c5:e5:19:6f:a5:
be:68:ca:39:37:80:55:99:0d:b7:dc:1e:78:50:90:
17:c0:27:79:60:b1:e7:c6:6c:32:77:c3:a8:ac:b1:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:01:F5:EC:64:09:D4:F9:63:96:CC:49:A0:2E:D6:10:D0:84:61:77
X509v3 Authority Key Identifier:
keyid:15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:34:8f:23:1a:4f:8c:3d:a5:1d:cc:a2:2a:70:0a:2e:d0:a7:
24:24:7c:b2:ff:92:91:71:a7:d3:45:6c:8c:96:6d:4f:c1:a7:
3d:21:b0:79:c9:c7:2f:84:7a:93:d4:6f:47:57:5f:ab:2f:8e:
b0:6e:8f:b9:98:b2:f9:56:d4:9c:c6:95:9a:79:40:70:4d:c6:
78:94:75:c2:91:a1:bb:cd:c6:c4:55:4b:84:d6:81:98:1c:b3:
e1:a8:39:19:24:5a:41:5c:be:18:02:36:db:79:39:19:cc:c2:
ca:7a:58:23:ac:28:d6:8b:9b:55:ee:8f:f1:d6:37:d1:4a:07:
e7:6b:56:f4:2c:82:b1:bf:07:ec:29:8d:df:03:cf:a8:85:74:
6c:80:d1:4b:29:24:5b:7a:1c:37:6c:9b:99:e0:a8:f6:22:c6:
95:64:5a:18:b2:8d:0f:26:8d:82:69:c4:3f:d8:cf:2c:99:c4:
a9:4e:19:b4:93:7f:c4:fa:0c:52:5f:aa:49:16:5b:2f:cd:7c:
0b:af:15:7f:5f:1a:c2:05:5c:fd:25:e5:55:d8:1f:59:cc:9e:
5f:8a:15:0e:50:47:07:5f:8a:ec:2d:5d:d3:34:b9:86:93:60:
cd:27:cb:08:05:95:79:09:dc:7f:c0:94:f5:1a:2b:0c:47:9b:
67:ea:4a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:50 2026 by rpki-client