Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: 0nom39uu4+xLbWAz79F8K4n9t+XqBGqXjjrJWRqu4qg=
Subject key identifier: BC:1B:35:DF:8E:F5:C2:3A:BB:A6:47:0F:F0:65:AE:F6:DB:63:69:17
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 019D3909DC135420141FF6D1580BA4A69F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: 7xxge3paD+N4FGeoJed+eEyE7h5oYaHjNBSLo6iii44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:dc:13:54:20:14:1f:f6:d1:58:0b:a4:a6:9f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=bc1b35df8ef5c23abba6470ff065aef6db636917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:0d:82:a4:8a:72:38:78:5a:99:58:cb:29:
3b:35:57:38:8f:0b:75:70:dd:48:48:71:73:79:67:
33:40:64:26:b2:76:62:a8:3a:32:63:88:99:5c:3b:
a4:ad:c2:38:fb:d0:ff:31:44:0f:87:47:7f:5e:fd:
e2:ef:e8:7c:1b:b4:66:b6:52:5f:52:02:c1:71:6d:
34:76:f9:da:e2:c9:37:ff:cf:8d:e2:3c:d3:51:8a:
1d:87:50:e5:d3:31:0f:11:34:e4:7a:95:95:ab:c1:
a0:5a:d4:a2:a5:43:5a:15:f1:cf:c8:cd:db:95:ec:
25:bf:bb:56:4f:67:50:f3:d2:27:d5:9b:9d:ab:a0:
f8:1c:7a:9f:53:6b:18:3a:71:f0:23:97:6a:97:00:
ba:a4:70:54:04:08:80:b9:71:ab:67:f5:fb:ed:3b:
d7:ba:96:bf:83:84:12:b0:9e:fb:f9:2a:ab:d2:81:
c4:32:4f:fa:98:8a:ea:50:6d:b1:8f:43:e8:33:f1:
88:6a:23:de:04:58:14:db:5d:b8:24:4a:d8:80:1c:
4e:d8:fc:bb:2c:b6:4e:e8:30:a1:36:15:d0:9b:95:
44:41:49:fb:4b:eb:f0:d3:0c:a2:eb:8c:02:8b:a8:
f9:cd:38:c7:eb:3e:ad:31:dd:5b:30:04:17:46:a5:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1B:35:DF:8E:F5:C2:3A:BB:A6:47:0F:F0:65:AE:F6:DB:63:69:17
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:43:47:f9:03:a0:f2:43:61:48:6a:b7:84:83:df:33:84:58:
e3:ad:47:d1:cb:19:7b:7b:26:e9:78:d8:1a:39:90:98:84:7b:
0a:b6:93:43:66:25:8a:47:48:68:b2:e1:e3:52:58:7f:aa:82:
78:1c:25:1a:c6:3e:96:1d:2c:3e:ba:76:26:a6:0b:d0:fd:63:
7f:ec:fb:7f:96:2d:aa:00:69:4e:56:14:cd:3a:37:38:bb:22:
eb:2e:92:b5:1b:97:ac:62:cc:2c:50:db:76:1f:60:33:d5:f2:
3a:29:b3:35:5c:c3:e2:8d:92:bd:ca:3e:2f:c5:37:36:35:31:
4a:d0:de:2f:87:44:43:85:9c:13:ad:98:15:30:15:4e:d5:14:
4e:a6:78:5f:5c:f6:2b:04:f0:e9:47:25:29:14:fa:83:90:a9:
63:fc:42:ad:9c:60:99:37:8c:38:ba:7e:b3:28:b8:73:7f:1c:
e8:ad:78:ff:45:e4:4c:3d:d2:12:68:f4:b5:86:30:5f:02:54:
3d:d4:b8:df:65:76:ee:79:69:5c:d8:80:88:e2:92:0c:86:b3:
86:93:2e:d1:8e:3f:fd:78:1d:72:79:38:1a:7c:2c:ab:7f:fe:
69:f9:f0:c7:2a:59:01:d9:ad:86:35:ca:12:8f:04:66:e5:4c:
cd:d4:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:38 2026 by rpki-client