Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
File: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json)
Hash identifier: LOhZ3f/C856Ui1WUgD2oBueJH/ty1lLcYIjY0OD9vtg=
Subject key identifier: 33:8B:4B:99:60:88:4D:C1:5F:DF:9B:03:4A:52:D0:BF:EF:83:7A:3B
Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
Certificate issuer: /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Certificate serial: 019D38D2F7B12C4DB5C0158DC6E4AF38DDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
Manifest number: 140E
Signing time: Sun 29 Mar 2026 09:00:43 +0000
Manifest this update: Sun 29 Mar 2026 09:00:43 +0000
Manifest next update: Mon 30 Mar 2026 09:00:43 +0000
Files and hashes: 1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: oflrrBmz8XRQqGNeRjvwjG5TgWPA1GmaXUiyg+vnfgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f7:b1:2c:4d:b5:c0:15:8d:c6:e4:af:38:dd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Validity
Not Before: Mar 29 09:00:43 2026 GMT
Not After : Mar 30 09:00:43 2026 GMT
Subject: CN=338b4b9960884dc15fdf9b034a52d0bfef837a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:98:62:c7:a7:7b:0e:eb:83:f3:99:7c:d9:
9b:b4:16:ca:7a:a3:6d:8a:3f:80:b3:88:3b:56:6e:
c2:94:23:f4:52:30:d6:8d:15:e2:c4:a4:86:57:3d:
68:17:e2:b7:3f:ad:75:f2:72:e0:5c:cc:b6:58:5b:
b7:b9:48:86:49:f8:17:71:62:8d:4f:60:bb:8b:fe:
7b:0f:f7:fa:a2:66:dd:4f:e1:a3:0a:85:55:46:e1:
de:de:5d:bc:91:8f:11:d4:47:f8:bc:32:c0:d3:eb:
58:a0:c0:a7:ae:c5:11:93:5e:47:eb:42:e0:da:83:
5a:d2:f6:30:8d:80:68:2b:d3:c7:a2:73:b8:e4:bb:
c9:4b:cc:49:3d:42:61:0a:aa:7d:96:fe:f1:e4:01:
5c:1a:25:f0:46:b0:54:5b:0b:e7:65:76:ed:25:ae:
55:e8:fc:c6:9b:1c:c9:52:97:40:41:0d:1a:43:07:
53:fb:f4:cf:0d:58:72:bc:2c:f1:09:b9:f2:07:20:
ab:f4:8c:00:bc:70:1d:50:55:87:30:a3:cf:9d:bf:
58:e7:65:4e:87:46:04:89:12:56:6b:be:a5:a9:42:
a5:c7:8f:4b:63:33:13:26:68:61:15:da:6f:93:9d:
dc:4a:6f:d4:11:ec:03:79:6c:7a:25:18:ac:55:37:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8B:4B:99:60:88:4D:C1:5F:DF:9B:03:4A:52:D0:BF:EF:83:7A:3B
X509v3 Authority Key Identifier:
keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:93:a9:44:86:f1:21:4d:5b:3f:2e:92:c3:c8:a6:e4:76:9b:
ce:6c:ff:36:d5:3d:a1:f5:98:05:eb:c6:36:fd:7c:a7:c8:08:
25:8b:85:9b:be:a8:5f:57:87:06:fb:e3:a3:14:01:0f:89:d3:
bf:00:93:fc:bd:f0:a3:97:49:9f:ab:81:2d:8b:f6:e3:1e:4a:
14:fe:48:8b:d7:1f:4d:5d:69:93:79:42:de:51:85:45:a3:12:
7c:d7:1d:ef:fd:25:4f:ca:d5:fa:2b:d2:75:7f:a7:01:aa:78:
cb:aa:05:74:9a:98:41:df:57:b4:2e:86:f3:cd:3d:de:f7:3e:
5e:c8:e3:65:ac:36:89:db:19:4c:65:8e:cf:57:4c:b9:c0:2f:
e6:7f:29:c7:cf:6a:02:8d:80:81:54:b5:79:7f:63:14:db:11:
b6:1c:ac:43:97:4d:cf:af:51:61:3a:11:c6:9e:c3:20:e0:41:
88:e0:b0:92:5a:a6:4b:e7:32:70:61:22:44:d2:59:6d:c3:62:
e5:60:33:70:91:71:71:af:4b:7f:05:3b:f3:af:ca:d2:fe:87:
8f:d7:d1:b3:53:9f:4b:5f:e1:e5:64:a3:25:39:ba:ca:fc:f8:
12:12:04:35:4c:36:7a:36:95:f1:54:50:2a:74:8c:43:c9:cd:
0e:fa:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:33 2026 by rpki-client