Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
File: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft (raw, json)
Hash identifier: 2FBVVOg5AuFuxCO4Fwq7dpEbd7RnNefS64MhyV3QYtA=
Subject key identifier: FA:E9:F6:CA:71:98:84:E1:DE:DB:C9:96:E3:CA:BC:EB:52:2F:B7:40
Authority key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
Certificate issuer: /CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Certificate serial: 019D389BA92A437A1B856C57AE30BBA8F9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
Manifest number: 03AC
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl (hash: nSknAjbXs8Q0uBJB+UZISqj363il/i+YdXSmFW9A40g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a9:2a:43:7a:1b:85:6c:57:ae:30:bb:a8:f9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=fae9f6ca719884e1dedbc996e3cabceb522fb740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8c:e3:44:34:d2:d1:84:4c:82:d0:03:05:e1:
18:82:1a:e0:f8:3b:35:4e:a0:41:f4:a0:07:d5:b3:
90:4c:aa:27:44:a5:dc:4d:e0:10:75:c4:c0:c8:c8:
47:1c:d2:80:8c:63:ba:70:cd:97:db:f4:6d:dd:eb:
54:7e:39:d8:90:ba:6e:dd:77:21:a1:b9:db:99:39:
d8:44:aa:da:ed:6a:27:55:3d:07:91:46:0b:84:8e:
5d:90:94:10:7a:d3:c5:cb:9f:dc:cc:b0:64:72:37:
bc:e4:ed:d5:81:c9:11:5f:59:65:37:52:d9:3b:68:
2b:a5:31:ea:74:ec:8e:2a:3d:7a:db:10:3a:c5:60:
9f:43:17:ae:c3:94:42:62:ca:ef:fc:d1:44:fb:ef:
68:dd:65:43:b2:30:b3:ff:93:e1:90:a3:c3:bd:42:
fd:88:17:dc:23:8a:c7:1f:87:29:f2:b5:1c:f5:64:
db:3b:13:53:3e:39:b6:25:da:77:b2:29:a6:a5:65:
c7:58:24:4f:b7:74:65:f7:f8:a5:41:54:49:4d:36:
eb:a7:44:f5:b2:9a:a4:ef:56:e9:06:aa:cb:e7:9a:
37:57:c4:6c:fb:93:24:9d:9a:de:45:4f:c5:16:af:
14:2a:aa:19:d9:8a:86:f9:cf:51:52:3d:cf:27:8c:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E9:F6:CA:71:98:84:E1:DE:DB:C9:96:E3:CA:BC:EB:52:2F:B7:40
X509v3 Authority Key Identifier:
keyid:E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f5:95:41:68:e4:10:8d:82:1f:cc:e2:10:f0:ca:de:4c:c1:
e2:85:00:5f:27:ca:ad:76:b8:e6:90:4e:43:dc:c8:53:7d:a8:
a2:61:27:29:44:e0:6d:b6:8d:9a:3f:0f:8f:de:44:1b:9b:69:
96:6a:e0:fd:57:a2:df:09:38:27:65:6b:71:7c:c6:31:74:c4:
36:8e:1d:3e:10:1b:19:87:2b:20:0f:60:46:f6:2c:ec:c3:da:
37:e8:cb:4c:9c:11:4e:67:d3:0e:be:16:26:70:36:fc:3f:28:
fd:9b:6d:3c:61:2b:4c:00:ee:db:fa:84:2a:e7:36:f0:7c:f1:
d2:35:b3:7d:af:45:3f:ab:8f:a7:16:fb:4c:0d:10:68:49:53:
40:5e:81:de:4f:80:12:e0:e5:61:c2:52:18:58:25:72:4f:b9:
ff:3e:e7:31:d6:9d:70:22:ef:dd:03:a3:17:7d:36:5b:04:0a:
91:ca:40:ea:7e:5d:a8:ac:72:19:40:ec:eb:6b:f9:f6:78:ab:
91:dd:26:f2:40:40:de:4f:1b:65:72:1a:c2:33:6b:b3:05:9a:
e7:39:b3:49:6d:a7:b1:9a:15:ff:3b:69:fb:a7:bd:bc:d9:ca:
8c:00:d0:02:ee:33:74:41:0d:ec:16:0e:60:28:d1:72:23:24:
54:28:e1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:14 2026 by rpki-client