Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
File: FxGAccwfrZwvkqEikhrUeLE0ew4.mft (raw, json)
Hash identifier: TKpStz3ym0euQ2xBiY/AuZWKdEjSFW+y81zrHKCLn9M=
Subject key identifier: 38:22:8B:5B:3A:1D:91:41:F8:9A:07:F5:BA:B4:E9:B3:07:E9:A7:D5
Authority key identifier: 17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E
Certificate issuer: /CN=17118071cc1fad9c2f92a122921ad478b1347b0e
Certificate serial: 019D38665E0FF9798ABA3D6591DEC3A83AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
Manifest number: 092D
Signing time: Sun 29 Mar 2026 07:02:05 +0000
Manifest this update: Sun 29 Mar 2026 07:02:05 +0000
Manifest next update: Mon 30 Mar 2026 07:02:05 +0000
Files and hashes: 1: FxGAccwfrZwvkqEikhrUeLE0ew4.crl (hash: oP/x5agb+TCaSTlbpro382iVOMHu/XoQ7v5YrdrcnXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5e:0f:f9:79:8a:ba:3d:65:91:de:c3:a8:3a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17118071cc1fad9c2f92a122921ad478b1347b0e
Validity
Not Before: Mar 29 07:02:05 2026 GMT
Not After : Mar 30 07:02:05 2026 GMT
Subject: CN=38228b5b3a1d9141f89a07f5bab4e9b307e9a7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:f2:4d:22:ec:1f:48:37:6b:7a:76:f7:c4:
ad:54:e0:14:64:0f:ef:97:ac:47:77:4b:9c:69:3b:
ca:0c:d4:14:d8:68:eb:80:eb:cd:60:18:35:35:34:
8a:29:0a:a1:9d:5c:b5:30:a9:81:4f:e1:a6:44:dd:
2a:7f:d7:12:ec:9b:9a:38:89:6f:2e:be:df:38:0f:
6b:0d:18:ac:87:55:73:97:d0:83:cc:a7:ea:a1:66:
91:af:e8:96:54:d2:8e:6b:70:70:fb:78:a5:98:d2:
c5:7f:44:83:e5:6d:09:81:d9:ca:96:e6:19:ba:26:
41:20:2d:34:40:82:08:00:2a:b6:fa:90:fe:53:24:
a7:b8:23:c3:0f:81:c6:f1:03:95:f3:22:28:a6:01:
21:8d:d2:82:e2:aa:c9:8d:c7:e8:09:c6:60:2a:89:
81:77:99:78:b9:5a:52:48:ba:06:56:d4:8b:0b:5d:
43:17:65:fd:58:a2:25:50:9a:63:f1:4d:19:01:27:
fa:dc:50:3b:0b:11:a7:5a:c7:0e:80:80:4e:03:e0:
63:73:79:3d:8a:e4:d8:f5:c7:e2:c7:ee:e2:19:ce:
ef:49:59:fa:71:f9:1e:f1:b7:b6:4f:72:68:4a:cd:
1b:3b:90:aa:d5:fe:ec:34:78:5b:79:cb:94:1f:a1:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:8B:5B:3A:1D:91:41:F8:9A:07:F5:BA:B4:E9:B3:07:E9:A7:D5
X509v3 Authority Key Identifier:
keyid:17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7c:20:be:d9:ea:bf:f9:e0:0d:9f:43:64:98:ae:9b:4d:07:
17:7f:fa:27:c6:4e:16:94:09:ef:8e:e4:fd:cc:b8:0e:c1:91:
26:e7:80:ff:66:53:dd:e4:1b:55:a0:c8:0c:46:94:88:9a:e5:
c4:f9:f5:e6:4e:4d:5c:ab:58:35:b8:81:4f:e8:59:54:74:88:
f1:8a:89:24:87:ae:4b:b6:0d:26:8b:7f:fe:3d:fa:cd:0c:ed:
d7:4e:f9:f9:fc:79:cf:5c:c8:89:4d:40:7d:78:8d:d0:b0:23:
e6:81:b0:40:78:a3:85:10:98:1f:78:04:54:36:1b:2d:e3:cc:
2e:9e:09:88:b0:c1:5f:6b:52:1e:09:23:1b:b4:88:ee:a9:a7:
95:01:6a:97:08:a0:3b:68:cb:00:6b:5c:e5:2c:b9:02:0a:b5:
9d:41:e5:34:41:cd:c0:79:b5:77:62:1c:79:dd:d7:dd:8c:c7:
91:f4:2e:91:b4:ac:64:c6:b2:f5:be:37:29:13:95:a4:e8:67:
09:0d:b6:08:f8:da:de:7c:55:ef:b6:4d:ba:ff:d7:21:5b:a9:
23:6f:bc:f4:30:86:0a:d2:af:ef:3e:cc:bf:92:d7:1c:ab:34:
99:34:f6:38:f3:33:a4:ef:ed:3f:e2:d8:da:cd:59:77:71:4b:
3a:fc:46:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:29 2026 by rpki-client