Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: 1YTAqel5w8uDSlrQEYGzRveQorDLCwXGI4FG0sJYlaY=
Subject key identifier: D6:93:E4:FA:33:E7:BD:4F:3C:55:F2:A1:63:10:6D:14:E0:B2:BA:40
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 019D3A8AFD971A2C234F33566E285D362A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 15C5
Signing time: Sun 29 Mar 2026 17:01:20 +0000
Manifest this update: Sun 29 Mar 2026 17:01:20 +0000
Manifest next update: Mon 30 Mar 2026 17:01:20 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: awraUjJ6JyKwbzjrTlL1nGHbvEtEC2SFvXy7FC2rnA0=)
2: lVcBo5vuxQrLHVx-CazpWVzHmK8.roa (hash: vG4AHQ6D6vSRnjokMxDtiTnVibG0s89z9DApsJwgQrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:fd:97:1a:2c:23:4f:33:56:6e:28:5d:36:2a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Mar 29 17:01:20 2026 GMT
Not After : Mar 30 17:01:20 2026 GMT
Subject: CN=d693e4fa33e7bd4f3c55f2a163106d14e0b2ba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:38:10:97:55:26:03:97:d3:fc:de:f7:cd:
af:dd:88:14:58:87:b4:b9:32:07:e5:63:55:c2:01:
80:e1:e0:0f:aa:94:17:a0:3d:28:a3:e6:fe:30:42:
af:a0:99:8e:3a:c6:9c:19:61:51:4e:51:3f:01:01:
b6:8d:21:4a:10:09:47:70:82:cd:84:10:00:e5:aa:
e3:0d:fb:0f:57:cd:42:82:4b:58:46:cd:c6:2d:bd:
4f:ab:43:38:45:c7:83:58:83:cc:83:90:6b:54:a2:
22:82:68:ce:d3:4b:99:60:3d:7b:dd:24:44:74:0e:
e7:b7:1b:06:6a:96:32:9b:49:b7:2e:07:4b:22:70:
8c:d5:d6:37:ef:ee:d6:55:b8:8d:72:09:ec:3e:96:
71:c5:5b:2b:c9:db:e0:b8:cd:ab:1f:c1:62:20:ea:
9a:4b:42:01:18:d6:f7:e3:c4:69:29:df:75:52:61:
54:c7:b8:cd:b4:0f:1a:53:26:45:04:2a:de:e8:34:
5e:0c:16:5e:98:bb:27:00:d0:6b:ed:09:34:54:2d:
5e:4f:e0:5f:31:aa:91:02:47:1f:50:46:87:0f:3d:
f5:eb:cb:32:61:11:7a:a2:f9:20:1c:9f:8f:93:98:
1c:48:11:d7:a6:e2:59:03:da:b9:27:52:78:71:15:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:93:E4:FA:33:E7:BD:4F:3C:55:F2:A1:63:10:6D:14:E0:B2:BA:40
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:01:13:d1:d6:fb:c3:b9:1f:91:ca:f6:a0:a8:f5:19:f4:0a:
cd:26:a0:b0:04:3e:05:cc:c2:3d:07:fb:27:58:d5:a8:00:ae:
3a:5d:b0:2e:23:d6:b5:6d:c5:75:4f:07:3b:65:1c:7c:94:78:
aa:87:b5:be:d4:b4:8a:0c:5f:97:d8:fe:de:5e:3f:92:9c:02:
25:cb:0c:39:46:9c:b6:af:5e:82:62:d4:10:0d:09:b4:30:46:
78:da:4e:56:3b:7d:ec:d3:a7:3b:97:c6:e8:31:83:55:93:06:
3a:1b:6d:b4:b6:4e:6a:6f:db:19:ec:62:4a:2d:c4:ae:72:f7:
de:bc:1e:4d:af:26:2c:08:39:dd:c6:f8:b0:73:73:00:91:4b:
4a:d8:9e:5a:61:f6:ed:3d:be:82:ac:56:1b:57:03:ea:86:91:
08:cc:b0:22:58:2c:53:1a:a6:56:46:35:b9:12:85:5d:9d:02:
32:33:13:68:5d:01:fe:b5:40:d6:a1:eb:31:3e:7b:1b:b4:ec:
20:e1:cd:a0:15:65:00:a0:56:89:ad:c8:11:c3:a8:0e:b4:18:
ca:06:44:78:68:91:2d:97:c9:21:cb:81:44:88:1a:3f:11:c3:
9d:71:a2:c8:ea:4f:1c:0b:26:e4:c4:4d:4d:c5:ea:2e:ec:c9:
5f:a2:12:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:24 2026 by rpki-client