Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
File: fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json)
Hash identifier: qhJWbboRu2Qdws9zD1krSzkGT8vKZz8kpLocnfrO8NU=
Subject key identifier: 4D:73:A7:48:A2:AE:DE:C0:A0:3A:69:B1:37:E2:27:5E:A5:46:52:EF
Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
Certificate issuer: /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Certificate serial: 019D3909A336131840FE99D9D74DBE5B0122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
Manifest number: 04CE
Signing time: Sun 29 Mar 2026 10:00:25 +0000
Manifest this update: Sun 29 Mar 2026 10:00:25 +0000
Manifest next update: Mon 30 Mar 2026 10:00:25 +0000
Files and hashes: 1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: LnSSvRAUixwgGMKwRy2yVNdaza3D+7YSXTsm6T6Zr0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a3:36:13:18:40:fe:99:d9:d7:4d:be:5b:01:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Validity
Not Before: Mar 29 10:00:25 2026 GMT
Not After : Mar 30 10:00:25 2026 GMT
Subject: CN=4d73a748a2aedec0a03a69b137e2275ea54652ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:ce:2c:ea:21:b0:fb:ab:81:31:a7:56:54:
c7:36:49:9b:05:d9:f8:37:0a:ab:ab:4e:44:0b:ad:
7f:99:dd:20:9f:18:1e:f3:e8:ab:a1:9a:9a:cb:dc:
0f:c3:e7:a8:0a:b6:47:ed:40:ee:c8:34:66:94:01:
ca:d1:f1:e7:5b:5e:75:78:c7:6d:1a:d2:7b:50:95:
52:e2:09:11:e7:ab:e9:eb:01:8a:62:57:9f:87:5e:
0a:5b:97:57:20:73:da:3c:01:db:47:a1:8b:bc:af:
7b:20:98:03:5c:11:98:1d:15:8b:57:fd:ac:fb:68:
33:5f:f2:d6:05:59:d6:cb:63:e9:4d:06:14:93:5b:
7f:0e:3a:99:b8:a6:6c:f6:7a:e0:75:b4:7c:a9:30:
33:f8:61:e9:bc:17:aa:0b:8b:9d:d4:bf:51:f5:f2:
d5:d9:12:66:af:5e:92:04:19:2d:f8:24:10:a0:40:
97:34:72:c5:8e:ec:01:1c:f1:6a:17:46:9d:43:5f:
64:91:aa:34:37:ed:a3:ff:a9:9a:82:77:48:e1:e2:
e9:8d:7b:7a:be:10:2e:83:e7:a9:5f:4c:2a:fa:d6:
b7:f6:ff:2d:50:a5:a0:28:f6:aa:02:ac:93:74:bb:
17:a8:a5:e7:e2:9c:1d:e3:5f:6d:d5:ef:ad:93:a0:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:73:A7:48:A2:AE:DE:C0:A0:3A:69:B1:37:E2:27:5E:A5:46:52:EF
X509v3 Authority Key Identifier:
keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c4:ab:6f:9b:dd:96:67:e3:97:e4:42:55:37:ce:8a:6a:e8:
e8:43:2a:f5:86:ce:8f:03:9d:19:0f:d9:48:1f:57:95:cf:7a:
06:74:4a:55:25:3e:8b:89:f9:f2:33:fc:30:5e:cb:e0:12:2d:
97:90:be:c8:73:a3:e6:ad:03:3c:5c:5d:eb:fd:fe:de:70:3c:
dc:fe:25:52:93:69:90:59:ea:20:81:65:96:88:4d:2b:83:19:
e0:cc:ed:1d:12:83:74:e9:41:5a:a4:29:12:e0:6e:12:9e:1c:
b2:63:30:d2:10:3b:37:d7:a8:2d:46:8a:4c:ff:1b:e3:8e:a1:
f3:83:7e:36:66:9d:f2:40:19:ad:67:8b:a2:f5:36:e0:f6:d1:
61:5e:3e:40:54:5b:b3:c8:42:45:a7:7a:f1:f2:e9:50:51:35:
e5:68:93:5b:4c:de:a3:96:15:d6:d9:3e:65:d7:58:13:c9:4a:
3d:06:45:b9:88:9c:c7:53:96:44:48:f3:20:a0:c8:75:f8:3a:
14:bc:e3:1c:7e:70:f2:62:e8:c6:ba:4d:bd:54:a9:8a:53:fb:
2c:2f:72:d0:61:ba:f7:26:d9:3b:f4:c0:d9:00:39:b3:44:b6:
11:5e:12:c8:60:77:ac:9b:be:08:ff:d3:84:75:f6:58:c3:2e:
a3:57:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:41 2026 by rpki-client