Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
File: fEn63vQJ71hdX0o1su85SbWZxUc.mft (raw, json)
Hash identifier: sbOTLZUvuV2D5T8oqxXzG96MbT2kxVftGhuoLOoz7dc=
Subject key identifier: 5D:7A:D8:95:F2:D3:E8:5B:07:BE:0A:6E:44:1A:75:15:03:79:E8:02
Authority key identifier: 7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47
Certificate issuer: /CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
Certificate serial: 019DCC3D496C3B203738A5C0273354A9313F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
Manifest number: 31
Signing time: Mon 27 Apr 2026 00:01:01 +0000
Manifest this update: Mon 27 Apr 2026 00:01:01 +0000
Manifest next update: Tue 28 Apr 2026 00:01:01 +0000
Files and hashes: 1: Kfv8pSzvP6yGqpNKWB0u9MATNiE.asa (hash: K8Z32NZvPzbYmVaeeJNzMlZvkbrlXgcqv646vOrcs/Y=)
2: fEn63vQJ71hdX0o1su85SbWZxUc.crl (hash: 5AXtz+rrOM3ldnYsV8yK10EEyJXH5TFhJIG90BwnLJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:49:6c:3b:20:37:38:a5:c0:27:33:54:a9:31:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c49fadef409ef585d5f4a35b2ef3949b599c547
Validity
Not Before: Apr 27 00:01:01 2026 GMT
Not After : Apr 28 00:01:01 2026 GMT
Subject: CN=5d7ad895f2d3e85b07be0a6e441a75150379e802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c0:83:51:65:5b:41:63:f1:25:f5:60:8f:d8:
d0:65:b3:8b:2c:07:6d:aa:49:de:26:d4:3b:ed:b6:
f7:a8:ab:84:22:27:cd:73:31:c1:c9:43:5d:a8:ac:
5d:45:93:1c:34:99:cc:27:1a:09:8c:91:5d:c7:6e:
63:f7:9c:39:f5:89:b2:4a:78:63:1f:ca:59:82:32:
0b:0c:20:f5:58:50:4f:7c:74:53:ae:3a:f3:ce:07:
cb:fc:8a:d3:03:52:ca:89:37:1e:79:0a:26:3a:da:
f7:a1:4f:f0:61:22:68:50:54:60:0c:31:06:69:65:
3e:69:d8:bf:b1:5a:65:67:c3:97:85:be:b9:d8:96:
06:60:6e:3e:f2:9a:b0:88:7f:79:36:3a:43:16:25:
0b:d4:43:d1:2a:ae:3b:de:f6:d3:54:ec:c8:3f:d8:
f4:f9:06:f9:16:56:34:b6:e0:fd:15:4c:6c:7c:bc:
c6:44:52:38:65:da:3e:25:6b:ac:39:e0:37:fa:7e:
ef:f5:19:e0:ce:71:f1:6e:3b:e7:ee:30:61:d1:05:
1c:6f:6e:92:c6:15:10:3a:57:6c:bc:45:94:a4:8c:
47:c6:b2:bd:ec:8a:2b:8a:0c:e7:72:17:33:c6:97:
f5:f8:68:26:96:af:df:da:0f:12:3a:89:f5:39:69:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7A:D8:95:F2:D3:E8:5B:07:BE:0A:6E:44:1A:75:15:03:79:E8:02
X509v3 Authority Key Identifier:
keyid:7C:49:FA:DE:F4:09:EF:58:5D:5F:4A:35:B2:EF:39:49:B5:99:C5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEn63vQJ71hdX0o1su85SbWZxUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/36176b-4684-4420-b790-a4c66078acb7/1/fEn63vQJ71hdX0o1su85SbWZxUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fb:dd:5c:dd:36:7e:ec:b2:2c:d9:33:0a:af:4e:98:07:93:
79:99:15:9d:f7:df:48:71:75:ed:ae:b3:e0:93:dd:39:1e:4d:
66:7e:cc:29:f1:1a:28:2a:54:60:06:49:15:67:07:8a:ba:9e:
8f:c2:d5:08:d6:00:74:be:e1:df:d1:43:5e:aa:54:b1:05:05:
5e:d3:31:b6:3e:a0:aa:98:11:54:7c:5d:db:d5:55:1a:20:ea:
fe:c4:3c:26:8f:65:02:84:a1:6c:79:c8:1d:82:4c:f2:c8:84:
6a:72:e0:c8:8d:00:eb:12:29:25:c9:4c:e9:71:36:32:b2:8d:
b5:4a:73:38:dd:af:6e:88:5f:96:a0:3e:34:8f:64:1e:01:cf:
94:6e:cc:14:6b:86:f7:0e:d0:b2:ce:d6:64:0a:46:e8:48:dd:
a0:b5:87:12:2e:a1:af:7a:03:08:5a:ec:20:a9:37:d7:1c:43:
bb:6a:7f:d5:dd:f0:08:8e:8c:40:ca:69:56:c1:4a:d3:a3:d6:
17:0b:b4:d0:dd:f9:f4:1a:0c:1f:76:18:73:1e:de:61:e0:a1:
8b:c4:9e:da:b9:04:44:2b:3a:8c:a6:4c:83:f9:1f:80:de:68:
2b:e5:6f:1e:e6:52:fb:a2:77:ab:4d:7a:98:2d:7b:ee:0a:1c:
9d:e7:8d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:38:25 2026 by rpki-client