Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
File: FzUV9MhBcBT4hBX20EqfcAP8CyI.mft (raw, json)
Hash identifier: 7pV4sZMaZb5Lq5MJ049bn6OILzVvI3m2QySsOwD8oic=
Subject key identifier: C6:A2:64:2F:62:F5:41:D6:1B:14:59:4C:4A:37:36:43:89:88:0D:EC
Authority key identifier: 17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
Certificate issuer: /CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Certificate serial: 019D3A543FDB88523B7B770639A49D0A0348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
Manifest number: 0361
Signing time: Sun 29 Mar 2026 16:01:32 +0000
Manifest this update: Sun 29 Mar 2026 16:01:32 +0000
Manifest next update: Mon 30 Mar 2026 16:01:32 +0000
Files and hashes: 1: FzUV9MhBcBT4hBX20EqfcAP8CyI.crl (hash: C0H2UeCs7NF11i4XDDkAQP0kDCMm77JV7Ywkg3/zGnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:3f:db:88:52:3b:7b:77:06:39:a4:9d:0a:03:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Validity
Not Before: Mar 29 16:01:32 2026 GMT
Not After : Mar 30 16:01:32 2026 GMT
Subject: CN=c6a2642f62f541d61b14594c4a37364389880dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:23:15:9e:cc:57:ac:a0:24:27:fc:87:10:
d9:10:be:3a:2f:92:71:6c:ab:96:c4:d5:a7:9e:94:
66:49:e8:67:db:3d:10:f6:33:2a:2d:39:a7:a9:d6:
d4:96:9b:c3:bb:3d:43:93:7a:d3:b3:56:47:ed:e2:
8f:37:04:59:a1:95:08:bc:25:60:dc:90:5c:90:43:
7b:9c:59:e0:12:8d:e3:e8:b5:d9:e8:fa:50:4b:67:
91:97:b2:77:23:7b:0f:61:2d:ec:46:51:de:1b:48:
68:c6:f9:23:22:24:3e:ad:df:32:d0:3e:e2:28:9a:
f1:1c:4e:79:6d:57:f7:0b:8b:28:57:db:91:3c:13:
84:a7:8d:68:5b:7a:0b:c6:5a:81:9c:2d:2e:5b:b3:
c3:58:00:7b:d5:b6:45:b5:bf:87:44:5c:b7:43:6b:
7c:6d:76:38:42:aa:4f:04:3f:a4:2c:64:56:08:d8:
75:93:0a:32:c8:97:96:08:a7:1b:d1:ad:6d:8a:6e:
98:b3:e7:65:cd:76:79:7e:e9:f5:d6:9f:03:f8:fe:
93:ad:b8:72:3c:78:fd:97:dd:c7:72:96:5c:f4:28:
25:a4:40:d1:85:e0:53:03:9a:a0:32:f6:41:9a:ac:
28:4c:0c:80:6a:00:c9:ce:d1:01:0d:68:46:55:ec:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A2:64:2F:62:F5:41:D6:1B:14:59:4C:4A:37:36:43:89:88:0D:EC
X509v3 Authority Key Identifier:
keyid:17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6e:ff:74:bc:9a:84:ab:31:e6:95:fa:95:7d:52:05:50:8a:
d1:0b:08:fb:f8:14:53:8c:de:6c:1f:41:34:a7:cd:26:e6:fe:
e1:36:57:4e:9c:cc:4d:52:de:ad:76:cb:79:91:7f:2a:b6:e0:
b2:73:7d:90:02:ef:a4:2b:c8:5e:31:39:e7:23:ae:2d:33:a2:
6b:78:00:5d:eb:05:af:87:3c:15:aa:cb:b1:23:a2:fe:ee:14:
74:88:6e:3b:b0:9b:f2:0b:41:a3:10:d3:80:a8:44:1a:78:73:
06:b2:9d:a9:45:00:2e:8c:bd:60:19:71:b6:b8:23:49:25:d5:
b0:3c:2c:ca:7d:2f:8d:9f:b7:47:4e:a9:cd:df:db:b8:44:f3:
0a:e9:30:c6:cb:04:55:2a:26:08:0a:e1:0a:37:fa:db:e9:47:
f5:9e:5d:a4:6e:fc:8c:cc:a0:b1:87:3f:02:93:8e:7d:03:9a:
d2:53:6d:89:a3:14:a5:25:8e:4d:87:c4:ed:44:4e:26:e1:69:
f9:8a:9d:12:9e:ab:05:a7:0c:2a:b0:93:ba:da:7b:4f:e1:e1:
90:b8:6e:be:4f:8b:31:df:21:28:48:9e:aa:bf:1b:9c:5a:7f:
91:81:a7:cf:93:a0:0e:f7:8b:ed:1c:47:18:c3:0d:0d:4a:59:
34:d2:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:25 2026 by rpki-client