Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
File: FyesE93M6XjmP3r186adq0mS1kU.mft (raw, json)
Hash identifier: FOEBuTZN7plyaY8kl53OM62TmKkB+CuABDVltu011hc=
Subject key identifier: 28:55:23:1D:AB:83:79:C6:57:9D:CB:4E:FD:37:DB:4E:8D:DC:2E:C1
Authority key identifier: 17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45
Certificate issuer: /CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
Certificate serial: 019D3940DB914170EF0A5B601CBEFFCE51BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
Manifest number: 0BEE
Signing time: Sun 29 Mar 2026 11:00:44 +0000
Manifest this update: Sun 29 Mar 2026 11:00:44 +0000
Manifest next update: Mon 30 Mar 2026 11:00:44 +0000
Files and hashes: 1: FyesE93M6XjmP3r186adq0mS1kU.crl (hash: R54RYgyBy9NT278dt7DkYvBvV493pSTWyMQHcc5Vvyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:db:91:41:70:ef:0a:5b:60:1c:be:ff:ce:51:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
Validity
Not Before: Mar 29 11:00:44 2026 GMT
Not After : Mar 30 11:00:44 2026 GMT
Subject: CN=2855231dab8379c6579dcb4efd37db4e8ddc2ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:6b:f1:c1:b0:98:a2:f9:81:59:c0:92:7d:
8f:d2:74:da:4e:97:7b:cf:f6:81:c1:b6:55:da:83:
88:20:ea:76:23:4b:64:08:92:e7:e2:4e:79:72:e9:
d1:6f:94:45:1f:11:05:95:fc:e6:30:b7:60:7d:af:
b2:5b:c4:3f:67:38:19:57:e4:c8:84:ae:78:22:9b:
7e:12:39:53:c0:90:62:25:cc:20:dc:20:a3:e6:df:
1d:09:29:13:26:9e:75:43:96:ee:86:66:7b:e8:14:
f2:db:18:18:44:f0:71:68:00:00:43:31:0f:c2:80:
a2:ab:c4:32:7d:3e:e7:71:cf:54:a1:13:79:7a:a1:
75:d2:f4:79:c6:8f:d9:e8:4e:97:d5:12:7b:73:1d:
38:93:ec:12:49:58:e3:6f:29:3b:0d:86:76:e3:69:
1f:49:22:25:21:68:19:6e:48:36:92:c0:4d:0e:3d:
a1:f9:53:42:62:e8:9e:50:bc:9b:fd:a1:12:d1:bc:
26:b7:1a:84:86:63:a1:79:39:ae:13:14:de:5d:78:
33:c7:41:c2:33:69:5d:0f:28:7f:1a:a5:f7:63:7e:
f3:bc:57:4c:6d:a9:22:f4:a2:b7:4d:c8:4e:3a:a6:
e7:1b:d3:b9:0c:98:8a:54:b2:fb:59:6c:9f:b0:0e:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:55:23:1D:AB:83:79:C6:57:9D:CB:4E:FD:37:DB:4E:8D:DC:2E:C1
X509v3 Authority Key Identifier:
keyid:17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7f:52:cc:38:b4:b6:39:8e:1e:56:c7:9b:cb:8d:0d:4b:4f:
c6:a4:c9:94:9f:68:09:23:42:00:f4:bc:f9:1a:9f:76:c3:3c:
76:bf:b5:de:0e:60:d8:a9:2e:71:4e:36:41:25:ba:c2:74:c3:
95:20:ca:77:68:ea:56:63:a8:b5:83:d8:ac:d7:fd:2d:f1:0d:
84:23:d0:17:92:ca:4c:c8:86:12:64:54:e2:3a:09:b9:94:a0:
2f:ba:69:8b:26:49:3a:18:09:50:33:82:65:00:2b:d7:cc:e9:
43:cc:96:b5:4c:f5:b9:03:6f:b5:13:e7:9b:b0:7c:06:22:4d:
1a:8b:b8:cd:7e:92:af:8c:40:52:dc:21:ea:32:99:08:fe:4d:
e9:5f:bf:a9:14:51:5e:cb:37:99:1d:6c:84:7e:c2:05:05:80:
81:58:6c:ad:fd:4f:07:d5:1e:d7:fe:04:2b:6d:60:3c:11:e1:
8d:70:e8:ed:f1:10:4f:5a:83:d4:7d:c8:ab:35:a9:b1:ac:8f:
c4:66:1b:86:b0:46:01:d8:a7:0e:34:c9:c4:6b:5a:ea:4e:6a:
45:e7:4b:c8:89:4a:aa:fa:00:41:78:be:6c:fa:71:aa:e3:f9:
c3:46:69:85:76:7b:6e:8a:9b:de:03:48:8c:52:f7:9b:35:4d:
2c:25:b7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:57 2026 by rpki-client