Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
File: fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json)
Hash identifier: sPXKy3BxMp5kNADuS+qNo8ys29pKg9ZU6+9MLzFT99Q=
Subject key identifier: 79:ED:68:5E:E1:F9:3F:FF:07:C6:E0:E4:8F:72:27:8C:C9:A9:7A:23
Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
Certificate issuer: /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Certificate serial: 019D3865D3D597AAECA9717DE650CBE54029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
Manifest number: 0FD3
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: PFdCvfiXahJfojTlvBzEdaTA+tXDueIv+1KLbbwRZFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d3:d5:97:aa:ec:a9:71:7d:e6:50:cb:e5:40:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=79ed685ee1f93fff07c6e0e48f72278cc9a97a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:f6:ac:0f:b2:64:e0:5c:c2:8d:59:5e:77:
de:d3:78:a0:25:ce:31:04:25:25:b2:6e:20:ad:eb:
03:e1:11:7d:16:2b:5d:1b:78:e6:21:ad:e1:84:35:
c7:f2:ee:d0:fc:0f:b5:dc:5f:24:ac:40:ac:9d:a3:
0d:16:78:8e:68:7c:1a:34:4e:44:67:a1:d1:54:62:
3a:da:d3:7a:6f:36:05:1a:09:c7:75:01:35:f1:1c:
d7:94:af:0e:e4:66:4f:d9:c4:bd:2b:25:0e:f0:d7:
99:8f:08:97:af:b2:92:d5:c2:d5:5e:36:77:70:fc:
5b:20:0d:53:76:81:bf:c1:28:52:4e:6c:3b:02:3f:
14:04:60:44:ef:da:da:0b:41:61:8f:6b:8d:e7:09:
0c:88:3f:7d:39:75:83:f2:c7:d8:85:f5:b2:62:34:
55:59:9b:2d:4f:2c:f0:ce:f1:c1:60:d5:16:1c:54:
00:70:75:12:8d:0f:d1:a1:30:a7:98:a6:c8:b7:37:
9e:96:26:8b:de:c9:31:f8:14:a8:7b:85:b7:a0:e5:
17:fd:9e:03:5a:05:42:43:a1:0d:42:65:cd:a1:a1:
49:5f:8c:96:c8:92:d9:45:d7:54:ce:a7:c0:64:69:
76:fc:c2:a0:3e:42:49:84:74:60:c0:30:34:c3:1f:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:ED:68:5E:E1:F9:3F:FF:07:C6:E0:E4:8F:72:27:8C:C9:A9:7A:23
X509v3 Authority Key Identifier:
keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:41:d0:cb:69:62:ee:e6:83:fd:73:a9:4c:58:c3:55:11:a2:
20:9c:52:18:33:a2:47:3a:84:0b:63:da:e7:ff:18:f7:0f:ae:
e0:f3:a8:9d:a9:0d:66:92:fb:9c:98:da:ed:8e:76:53:dd:ed:
2a:98:e5:67:f5:7b:5e:6f:d3:b1:5d:86:07:30:69:29:53:74:
bf:fe:bf:6a:f2:94:8d:7e:6f:0c:b2:64:72:82:82:f1:66:5c:
2b:b7:18:18:b7:c9:d2:32:51:7e:9c:1a:91:e1:a3:9b:6e:97:
fa:df:e1:db:74:2d:b1:47:fa:0d:84:9d:e1:fe:dc:9e:8f:66:
38:79:9b:b3:14:50:f5:fa:b8:fd:d6:51:66:10:26:1b:7c:32:
0e:92:01:20:ac:85:9c:dc:6a:58:5e:3b:c5:00:c9:d2:f4:c7:
56:1e:13:49:b3:95:81:62:fc:c7:c7:0b:41:2f:d5:e9:ec:0d:
17:e2:ca:6d:bb:dc:5a:a4:f5:22:66:b8:b7:f3:ac:0a:99:4e:
98:bd:3b:62:ca:7f:73:74:b8:34:d1:e8:11:09:2c:f5:c6:0f:
2c:d2:31:26:de:a8:1b:e8:9f:84:af:ad:aa:a2:75:20:bc:43:
20:f9:c3:96:e0:71:76:d5:18:e3:77:59:06:fd:6b:a1:4d:6d:
c1:9b:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:37 2026 by rpki-client