Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
File: FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json)
Hash identifier: VdjlAQBaggI+qRvu4RbiOhiZItDAlY6gBTTsqZRzeEc=
Subject key identifier: 84:87:34:8C:EC:77:45:0B:62:F1:74:86:70:D3:88:57:3E:A7:DF:BB
Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
Certificate issuer: /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Certificate serial: 019D382E0F8EA64E2B40FA33409CDE881A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: 9+EDtnxymSP7Nk5bDQl+qwQuPKbaBPF1AsuwJGYJ6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0f:8e:a6:4e:2b:40:fa:33:40:9c:de:88:1a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=8487348cec77450b62f1748670d388573ea7dfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:33:62:99:f9:2a:e8:d1:19:8f:f8:50:e3:
f1:7c:bd:f9:41:a2:45:44:77:81:81:50:5e:e1:ce:
b0:98:a8:84:4d:56:cb:09:2c:d7:4a:ff:e7:32:5b:
96:be:f2:68:3e:3e:85:0b:fd:7d:07:b0:dd:fd:63:
ae:64:09:bf:a5:13:cd:e3:a2:0b:e6:f3:43:56:b4:
f8:f9:fe:73:01:cd:92:d3:5c:54:46:68:7b:f4:a3:
0b:94:04:ba:39:67:24:30:25:e6:40:fa:96:68:d0:
72:0b:32:40:1c:17:3c:64:4e:60:3b:0b:e0:92:3f:
1e:da:95:e1:e0:86:85:19:35:5d:e1:27:6e:5c:4e:
bf:54:d5:9e:f2:fc:2f:e7:62:03:6a:49:4a:90:21:
07:12:90:72:b5:2f:e6:ca:ea:be:ff:c7:e2:f5:97:
95:bb:b0:35:aa:17:6d:f6:69:34:c3:73:9f:1f:11:
0b:e5:d2:02:26:06:1a:49:f2:f8:4a:f4:20:58:52:
67:06:a8:d5:1b:b8:51:7a:74:eb:4d:61:97:56:66:
d2:d5:95:b1:ac:75:ec:6d:7b:c9:50:1d:86:33:07:
21:02:cd:0b:ab:aa:d8:d2:c0:01:e8:08:52:e8:84:
51:e5:68:71:3c:a8:82:4f:99:23:6b:ba:88:57:e7:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:87:34:8C:EC:77:45:0B:62:F1:74:86:70:D3:88:57:3E:A7:DF:BB
X509v3 Authority Key Identifier:
keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:28:45:59:75:c9:19:0b:af:e4:9c:4e:d2:9b:3b:54:01:86:
df:51:77:ea:17:5e:48:76:58:a0:36:dd:b4:5b:80:7e:0a:4b:
1b:44:a0:e0:53:8e:41:1b:24:62:0e:06:92:bb:8c:70:a5:08:
ca:f4:0f:6a:ca:0e:8d:7e:92:9a:67:c2:96:25:fa:07:12:e5:
72:f2:4f:b0:b9:3c:14:7a:a3:49:17:78:c1:a1:85:fa:2a:3b:
00:25:3a:f3:8a:e6:18:22:31:06:27:67:6f:99:cd:ea:78:cb:
e3:2b:19:b8:df:fb:84:4c:fe:a4:72:7d:bb:be:88:a8:1f:1c:
34:8e:7e:fd:50:42:52:68:f7:7c:5e:8d:87:a6:05:5d:71:02:
45:7d:95:11:d1:a7:c7:af:75:3e:bb:9c:76:e1:e8:66:ca:53:
48:5f:16:6c:4e:47:8b:ed:be:48:76:86:bc:6a:90:b2:7a:ff:
5b:49:bc:54:b1:57:2d:e1:03:6c:d4:e8:e9:e5:b3:12:26:22:
52:47:77:73:54:1e:00:af:51:9e:e8:ec:5a:b1:06:60:b5:08:
82:5e:ca:37:1c:e2:86:64:7a:b3:7c:f7:df:0f:83:1d:b6:e6:
4d:ef:99:26:37:48:56:c1:62:1a:da:3f:e6:a7:46:40:42:09:
03:cf:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:30 2026 by rpki-client