Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json)
Hash identifier: E4LDjfgSM0wn7Xb+1MkGUzRGIijM7nxL/zyscYF1Ll8=
Subject key identifier: D1:6B:E1:39:B4:92:A2:75:0D:5B:7B:C9:41:42:7F:1A:3D:32:11:91
Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
Certificate issuer: /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Certificate serial: 019D37F77B2967D9E5EAE381C58AC2445802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
Manifest number: 059B
Signing time: Sun 29 Mar 2026 05:00:58 +0000
Manifest this update: Sun 29 Mar 2026 05:00:58 +0000
Manifest next update: Mon 30 Mar 2026 05:00:58 +0000
Files and hashes: 1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: QVVAjcCl/QetzjZpg8jb1gF8iiW+rmGso10odN30S+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7b:29:67:d9:e5:ea:e3:81:c5:8a:c2:44:58:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Validity
Not Before: Mar 29 05:00:58 2026 GMT
Not After : Mar 30 05:00:58 2026 GMT
Subject: CN=d16be139b492a2750d5b7bc941427f1a3d321191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:0c:ec:69:dd:f9:fd:4b:9f:48:3b:65:1b:
62:28:e5:2a:ac:fa:f7:6c:f7:e2:01:97:f9:ab:6b:
8c:c4:d1:c8:04:e8:44:a7:8e:3d:bf:a2:2c:dc:d4:
3f:a5:fc:25:a0:da:9c:5e:55:9d:be:a9:b5:16:21:
d3:ae:1b:19:5c:2c:c0:02:26:b0:98:bc:39:38:61:
65:cc:27:11:d9:b7:2e:c9:7b:d8:9a:59:64:a6:a1:
9b:d7:e1:73:64:6f:c9:97:fa:b8:9e:84:da:60:83:
3e:e3:f6:9b:d6:7b:42:1b:53:8c:80:0d:4d:1f:63:
b7:a9:ad:69:9c:4b:6e:4e:34:12:b6:48:49:f1:b7:
ac:1d:b2:51:6a:91:17:12:68:7c:2d:a8:43:82:95:
11:bb:c4:ce:d5:62:fa:8a:f1:7d:63:83:9c:76:4d:
51:55:87:df:86:36:a8:cf:cf:29:cf:c4:38:27:3c:
f0:db:a0:95:b0:a2:18:66:29:44:73:84:b2:14:42:
95:8e:42:6a:5a:06:4b:04:55:5d:e8:7b:06:69:b6:
2d:f5:5a:f1:88:a1:a2:28:c9:80:63:89:7a:7e:25:
f2:84:c8:8b:70:e4:08:77:5b:8e:66:19:86:9c:90:
c0:ae:c8:72:cc:c0:35:09:f0:76:73:53:8d:1c:a5:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:E1:39:B4:92:A2:75:0D:5B:7B:C9:41:42:7F:1A:3D:32:11:91
X509v3 Authority Key Identifier:
keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:24:3e:60:fd:34:1b:33:13:9b:e3:1f:83:59:32:01:db:68:
3d:2d:29:6f:da:4d:8b:94:3e:48:08:50:ed:53:46:7d:e4:e5:
98:f1:33:b6:34:54:ac:76:c7:75:14:68:9d:3c:88:d5:fc:48:
d8:84:78:09:d9:35:bd:a0:59:48:b8:82:6a:53:6e:a0:67:45:
53:3c:fd:8a:68:aa:b5:1a:1e:ab:cb:1e:99:09:ec:dc:a7:13:
de:18:21:46:47:f0:55:e3:18:05:9f:45:bd:71:59:f2:6c:86:
35:fb:de:ad:f8:86:a7:e4:8b:f8:30:dd:72:f9:b3:29:31:91:
20:c4:4a:71:1a:39:32:30:82:f9:d5:ae:f9:63:b6:b1:d7:da:
c9:d9:ff:f9:e0:b7:b4:e7:11:70:7b:59:5c:e3:dc:e9:d7:d2:
31:8e:4e:89:88:89:e7:82:c1:cf:53:cd:56:99:3a:1b:9f:6a:
cb:d6:c5:82:66:2c:a3:66:a1:82:b7:e8:e8:15:97:9c:f8:3f:
93:9f:32:86:52:6b:09:12:d1:ac:86:3c:73:bc:e6:c0:e4:fc:
cc:a6:4f:61:1a:2a:e9:ef:ae:5d:82:97:e0:64:16:26:da:ab:
ce:7f:36:54:03:51:48:0f:40:5c:f1:e3:fb:f2:ca:51:28:74:
80:ad:ee:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:22 2026 by rpki-client