Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
File: FycWA_qPBq-kSoeCBl81-WWcft0.mft (raw, json)
Hash identifier: Ui+fJ7JNwkDLMeXIF2GtjKS856EQIZo8aYBKsMB6iNU=
Subject key identifier: 98:D9:DF:90:A2:61:A9:60:F5:F5:7F:B4:1F:7D:3A:F1:A0:62:F4:54
Authority key identifier: 17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD
Certificate issuer: /CN=17271603fa8f06afa44a8782065f35f9659c7edd
Certificate serial: 019D3940B956307D221184038E5FF79189FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
Manifest number: 042B
Signing time: Sun 29 Mar 2026 11:00:36 +0000
Manifest this update: Sun 29 Mar 2026 11:00:36 +0000
Manifest next update: Mon 30 Mar 2026 11:00:36 +0000
Files and hashes: 1: FycWA_qPBq-kSoeCBl81-WWcft0.crl (hash: UD7jF9QKQPO25ai34QwCLCRrqFgPdEp1ernUpNdTMfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b9:56:30:7d:22:11:84:03:8e:5f:f7:91:89:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17271603fa8f06afa44a8782065f35f9659c7edd
Validity
Not Before: Mar 29 11:00:36 2026 GMT
Not After : Mar 30 11:00:36 2026 GMT
Subject: CN=98d9df90a261a960f5f57fb41f7d3af1a062f454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:cd:a8:c3:49:b3:e0:02:69:c5:12:c8:13:
79:eb:dd:0f:8d:1d:10:af:16:7d:fa:45:19:7d:1f:
00:71:7d:40:a4:c9:bc:9a:8b:5d:fa:16:b5:df:f6:
21:b3:a8:2d:2e:69:b3:19:36:22:c0:97:da:f1:df:
71:d5:5f:c7:59:70:85:ba:cb:df:ca:a7:c8:8b:fc:
8c:f6:17:b7:47:3a:de:7d:64:ae:d3:75:4b:16:5e:
9a:fe:4c:d8:05:d1:7d:6a:16:98:7d:02:cb:b7:0e:
83:07:84:af:61:00:24:9a:e6:41:d8:ee:4c:16:ae:
9e:80:db:d0:6b:89:dc:b7:d8:6f:22:7f:60:d2:b9:
93:16:42:0b:3f:62:15:95:9c:b4:f2:e0:43:41:a2:
3c:a4:d8:2b:6b:dd:13:c3:2a:81:ca:7f:c7:bf:bc:
85:22:45:f6:4d:84:1d:e1:be:42:81:93:32:bd:57:
93:fa:b1:98:33:e8:83:9a:d4:7d:cd:ce:7a:be:e3:
05:00:78:3d:b9:ff:a6:a4:32:e4:71:98:f6:2f:45:
ee:d6:93:50:0a:9b:8b:db:87:67:7e:05:a3:fc:bc:
ee:5b:8e:7d:b8:d1:03:d3:09:e3:11:0e:24:1a:54:
01:fa:80:3e:f3:e0:ee:d8:43:4d:e4:bb:7a:8e:8d:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D9:DF:90:A2:61:A9:60:F5:F5:7F:B4:1F:7D:3A:F1:A0:62:F4:54
X509v3 Authority Key Identifier:
keyid:17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9e:f5:cd:66:12:34:ef:34:07:db:93:03:70:2d:a6:c0:c1:
94:f2:de:90:0b:4e:d6:d4:28:df:3e:b3:0c:f1:45:a2:2c:d8:
6e:4e:b5:58:89:ad:91:7d:04:a3:31:bc:db:a2:85:dc:bf:df:
92:63:1e:02:cc:47:c6:9c:95:b5:49:02:0c:79:ec:65:26:21:
b1:19:a1:82:8f:23:d4:de:db:31:c1:04:81:f9:9d:14:c9:21:
82:3f:66:5d:cb:a1:5e:3e:ef:4d:48:63:75:69:1c:18:24:d0:
7f:d9:ea:4a:16:72:3b:65:71:e6:ab:4a:80:f3:37:c6:ee:20:
e2:c4:ec:f9:89:cb:91:b7:4d:60:da:ff:73:1c:a2:e0:34:b6:
32:49:f9:a8:3f:8d:35:c0:1b:4f:9c:e0:38:7a:65:c9:28:7d:
81:73:b5:16:bb:b2:6b:58:c2:da:8d:26:e6:04:ed:4b:b1:bf:
59:f7:bc:0b:cf:1c:20:46:f0:ba:df:4a:06:10:5f:10:ba:82:
44:1e:ed:a8:d3:fb:67:ff:5e:bc:0a:2c:5e:bf:ea:6a:6b:2d:
84:d1:6f:13:00:f9:d6:fe:38:8a:77:c6:3a:09:60:93:b7:76:
6e:43:15:69:62:c4:8b:18:41:2c:96:c1:63:ef:a9:7f:74:2a:
80:ba:f7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:34 2026 by rpki-client