Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
File: frHgvC-KBA2BVYCM9LKcVM2tlEI.mft (raw, json)
Hash identifier: AhDWMg1fRmwXGNtxbjozSSt4f/2azrN74MteH1k61/w=
Subject key identifier: 37:DF:D3:34:7D:54:92:FA:51:12:49:74:06:F0:63:30:A7:77:17:26
Authority key identifier: 7E:B1:E0:BC:2F:8A:04:0D:81:55:80:8C:F4:B2:9C:54:CD:AD:94:42
Certificate issuer: /CN=7eb1e0bc2f8a040d8155808cf4b29c54cdad9442
Certificate serial: 019D389C366A5907B5A4C650206BFEF1A56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
Manifest number: 01F1
Signing time: Sun 29 Mar 2026 08:00:54 +0000
Manifest this update: Sun 29 Mar 2026 08:00:54 +0000
Manifest next update: Mon 30 Mar 2026 08:00:54 +0000
Files and hashes: 1: frHgvC-KBA2BVYCM9LKcVM2tlEI.crl (hash: LYIWIGa++4KvslJV0hT1XjE9u+IYjiLxBfOXMToSxR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:36:6a:59:07:b5:a4:c6:50:20:6b:fe:f1:a5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb1e0bc2f8a040d8155808cf4b29c54cdad9442
Validity
Not Before: Mar 29 08:00:54 2026 GMT
Not After : Mar 30 08:00:54 2026 GMT
Subject: CN=37dfd3347d5492fa5112497406f06330a7771726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:e7:0d:95:89:3d:e7:01:82:54:22:13:5b:
9d:16:1c:9a:1a:34:d6:79:de:42:9a:57:fb:77:34:
4e:21:44:7f:1c:cd:c7:02:5e:b3:ec:2e:c3:f5:a0:
1a:a9:c4:e9:65:4a:c8:ca:34:bd:1c:be:5e:06:aa:
e2:7f:76:4c:c7:12:c0:e8:b7:a5:e8:d8:13:30:dd:
ff:e9:1f:12:fc:62:05:fc:2a:7c:ef:cc:65:62:b1:
5d:ad:90:ae:00:62:4c:a6:57:03:7e:94:78:59:97:
bb:5b:46:8b:79:f2:5a:dd:7e:9d:fe:93:ec:71:f1:
f2:9d:c7:e6:1f:2d:09:82:8e:ca:3f:a4:30:a0:89:
81:44:3c:07:ed:fc:dc:ba:87:42:31:90:0a:b6:32:
55:2f:5b:63:a3:6a:35:83:83:6f:0c:1e:94:86:66:
5d:f0:b7:33:51:a2:7c:bd:a3:fe:ae:19:f1:a1:c6:
89:69:44:3a:18:a7:44:6d:3a:3b:b2:f9:96:27:ad:
68:cb:be:a9:9f:79:80:c6:fb:af:cd:7d:20:1b:32:
94:a8:64:fa:10:90:30:1b:0b:61:f6:d6:f0:df:5c:
c8:4b:9b:45:57:7b:eb:e1:d0:26:f9:9b:3b:72:ce:
67:39:c2:9e:79:ac:c5:f4:2c:f6:ab:3c:f1:49:9b:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DF:D3:34:7D:54:92:FA:51:12:49:74:06:F0:63:30:A7:77:17:26
X509v3 Authority Key Identifier:
keyid:7E:B1:E0:BC:2F:8A:04:0D:81:55:80:8C:F4:B2:9C:54:CD:AD:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4f:55:5a:84:e9:e9:3e:f4:31:2d:63:52:dc:95:a1:e4:9a:
ba:cb:05:0e:20:1e:2e:e8:1b:5b:12:e1:90:e4:c6:24:85:39:
aa:ee:76:f5:00:8e:34:95:85:d2:fc:95:10:04:a7:33:df:fa:
29:bc:3a:3d:ad:33:99:9c:ef:a9:79:40:07:f2:31:f5:20:fa:
c9:5d:c9:d2:c2:bf:e4:34:17:3c:6e:a7:39:22:98:6b:79:b3:
94:37:b4:9a:28:9a:e4:df:58:8b:ab:7e:dd:35:34:d6:a8:45:
7e:21:d4:74:39:bf:cb:ff:40:9d:ba:99:2e:4b:a1:78:07:5d:
cb:97:4f:f4:bc:86:fc:20:77:e4:8a:c1:18:ea:d8:53:87:e9:
a0:67:95:a0:07:f3:f7:2d:2f:a4:10:12:92:da:56:f9:71:76:
54:21:77:91:a1:10:d1:bd:41:ed:80:18:c0:24:fb:6b:36:e9:
41:38:dd:1d:83:94:49:86:42:d3:43:29:dd:77:a4:ae:e3:38:
47:94:3f:7d:5a:51:e0:03:08:cb:86:4f:e6:1f:1e:6c:72:38:
a9:87:14:d8:fc:4a:25:b7:a0:0d:af:5d:66:8d:cf:e0:a5:a7:
5b:87:e6:3c:a3:8d:44:0e:d6:8f:e8:6b:87:35:62:59:c7:e3:
15:ae:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:38 2026 by rpki-client