Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
File: fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json)
Hash identifier: CFwXCPhSDEl2e5oFbhUdQ/bm2JN0ZApujvn1zEcjO44=
Subject key identifier: A1:B6:E1:C2:E9:88:1B:C6:45:EB:22:D4:4D:F8:ED:3F:0C:E5:CE:55
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Certificate issuer: /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial: 019D37F6E332D583395635DABCF94179758A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
Manifest number: 12B9
Signing time: Sun 29 Mar 2026 05:00:19 +0000
Manifest this update: Sun 29 Mar 2026 05:00:19 +0000
Manifest next update: Mon 30 Mar 2026 05:00:19 +0000
Files and hashes: 1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: Ac8OP70RQXWmpW74jPokRpF4tNUezeObCrGkud6MqL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e3:32:d5:83:39:56:35:da:bc:f9:41:79:75:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Validity
Not Before: Mar 29 05:00:19 2026 GMT
Not After : Mar 30 05:00:19 2026 GMT
Subject: CN=a1b6e1c2e9881bc645eb22d44df8ed3f0ce5ce55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:6a:6e:96:03:91:7c:b7:3b:3b:60:67:24:
f4:57:84:42:4e:b5:d6:0d:49:d1:3b:a5:43:af:4f:
97:a8:cd:96:74:ef:dd:34:90:28:35:50:aa:6b:1b:
c7:d3:61:bf:fc:c6:31:50:8d:fd:a8:20:b6:4d:48:
ab:23:6d:73:d2:6b:46:39:81:bd:7a:0b:93:67:ed:
30:9a:94:b0:7e:fd:7f:c6:91:2e:5c:c5:9f:d6:64:
7a:76:e8:d8:64:f1:dc:65:3b:5f:0e:a7:70:ed:47:
91:92:1a:53:3e:72:25:a9:5c:ae:c3:a3:99:8f:65:
9c:30:36:af:5b:2c:28:de:f5:12:43:30:c1:30:0e:
e8:1b:06:cd:0e:a8:04:da:8f:4e:29:e8:59:3a:a5:
ac:2e:87:04:fd:0e:ac:77:6f:ba:20:ff:54:79:37:
ba:62:5f:fe:90:88:08:41:46:8c:33:f6:4e:b3:f8:
f6:b2:5f:41:10:13:3f:c1:4b:e8:70:d8:23:e1:f1:
82:bb:59:25:d1:49:7c:eb:47:b0:ad:26:94:95:f8:
bf:44:32:ed:89:98:d1:5e:41:10:0b:45:da:c8:c4:
ba:17:05:b3:6e:fd:50:34:ef:e5:cd:37:21:99:b3:
cd:fa:4a:a6:bc:7c:74:33:e6:e9:56:27:8a:c2:a6:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B6:E1:C2:E9:88:1B:C6:45:EB:22:D4:4D:F8:ED:3F:0C:E5:CE:55
X509v3 Authority Key Identifier:
keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cf:c7:a6:74:da:52:8a:77:4e:fc:66:20:55:e8:ac:ee:a6:
72:f0:d6:d0:f1:87:8a:b8:64:4a:57:5a:64:72:b6:a3:af:c8:
2e:2b:d1:1c:9f:e0:ec:65:1c:c9:8a:45:4b:7c:1b:d5:a1:db:
f5:ce:b1:6a:a6:44:34:f6:ae:12:e3:18:81:3b:ba:d2:3a:ed:
e0:3d:18:f3:e3:ee:ea:68:57:70:1b:fe:d2:ba:da:99:13:7e:
d5:85:ac:02:f8:fd:ee:3e:f8:af:4c:d0:5e:7e:31:9e:34:c2:
c3:40:ae:f6:fd:80:65:c1:af:a3:c9:c6:0a:54:7f:3d:5a:d0:
6c:fb:47:a6:e8:b1:f4:d9:ea:d0:96:11:6e:1e:68:57:e0:47:
f9:7a:7e:81:84:cb:b0:13:5b:40:77:82:01:d5:26:05:80:4e:
b8:73:40:9d:54:84:52:92:55:6a:f2:89:48:d5:7c:b6:a6:0e:
91:8c:22:0a:c1:aa:e4:73:98:cd:f1:c4:47:35:b4:20:08:34:
85:b9:ea:dc:9a:6a:d3:90:a5:13:eb:c4:42:46:28:a1:8e:a6:
ba:b1:69:25:0e:dc:6f:d4:b3:21:62:59:fe:41:86:f1:21:08:
2a:f2:6b:a7:aa:86:e6:41:6c:51:65:cf:7d:75:e8:db:c3:29:
85:70:4c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:23 2026 by rpki-client