Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
File: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft (raw, json)
Hash identifier: L79vzoQCUC2BnVrujhu07PUrmlM8/OnI34MFL/Cl6N4=
Subject key identifier: D1:46:50:E1:85:87:A6:B8:1E:A2:A2:3C:27:BC:36:E0:A0:D2:91:55
Authority key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
Certificate issuer: /CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Certificate serial: 019D37C09FD0C1F26962EFA8CA83F36B5781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
Manifest number: 100F
Signing time: Sun 29 Mar 2026 04:01:03 +0000
Manifest this update: Sun 29 Mar 2026 04:01:03 +0000
Manifest next update: Mon 30 Mar 2026 04:01:03 +0000
Files and hashes: 1: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl (hash: tTnDPLRhFLVBvOtIMUFoPBBVTwqC2/TKiV/RHjWjoZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9f:d0:c1:f2:69:62:ef:a8:ca:83:f3:6b:57:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Validity
Not Before: Mar 29 04:01:03 2026 GMT
Not After : Mar 30 04:01:03 2026 GMT
Subject: CN=d14650e18587a6b81ea2a23c27bc36e0a0d29155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:df:36:14:1d:65:ba:e2:70:fe:e3:4c:58:ab:
8f:92:0d:9b:b5:12:79:29:f0:38:bb:0e:86:3e:a4:
1f:51:7b:c9:44:e2:77:fa:6f:83:e5:2d:a4:71:5a:
88:3f:73:02:5e:be:da:86:0c:dc:05:2f:6d:68:5d:
6d:f4:d0:37:f9:86:1a:0c:69:0f:e5:d7:16:a4:75:
5e:b7:71:68:d1:05:b8:13:99:c1:9f:7c:4c:03:34:
12:fa:d7:97:61:ae:06:58:37:b3:a5:1c:67:d3:e1:
ec:c0:b5:dc:c8:29:7d:b2:78:03:29:0c:ee:6d:fe:
f3:fd:26:d7:5e:e8:1c:1a:af:2c:fe:93:c1:fd:8c:
3d:32:8b:c9:bf:44:1f:85:bd:44:0e:f4:f0:46:eb:
a6:c3:f2:a2:08:b2:43:77:58:81:a2:8d:72:05:6c:
52:04:36:8e:56:38:12:b9:3f:b7:52:55:ac:c3:33:
37:51:3c:d0:97:9e:19:f9:dc:e5:ce:76:ed:42:18:
e5:1c:ba:fb:46:3a:cb:5d:ef:d5:f4:8a:4a:d5:8f:
3d:fc:19:22:fc:43:d0:ec:5f:9c:5e:96:0b:c9:60:
2c:ed:5c:c4:99:aa:d0:e1:23:7d:cf:cc:bf:07:99:
c1:57:2e:2f:42:22:31:16:f2:f9:0f:20:32:ff:1c:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:46:50:E1:85:87:A6:B8:1E:A2:A2:3C:27:BC:36:E0:A0:D2:91:55
X509v3 Authority Key Identifier:
keyid:7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0a:c4:06:0b:5e:50:3e:47:1d:36:be:8f:82:6a:41:19:ce:
4a:be:bf:7a:c5:91:26:51:38:ed:51:6d:5d:de:02:c5:9e:bd:
66:2c:9d:e3:66:f7:d0:16:df:78:5b:13:59:6b:f2:3b:8c:7e:
fe:44:97:79:19:c5:33:b6:bb:ff:59:f7:52:ee:ca:e9:f0:d8:
2a:7f:25:d1:d3:36:06:d5:ec:0f:b2:9d:cb:97:58:00:dd:74:
0d:10:ad:5a:9a:8c:dd:62:25:7a:91:53:00:71:46:a0:f4:17:
44:ae:32:d6:71:05:b4:27:47:dc:0f:a5:8a:05:d8:60:55:f6:
88:0b:6f:21:f5:32:f7:b8:7a:74:23:93:54:d4:60:3c:58:5f:
dc:f8:46:81:bb:74:58:09:27:a3:e3:3b:a2:8f:cf:f6:c0:07:
c1:83:68:a9:75:c0:f9:40:57:d2:4f:ac:c1:e1:fb:af:a5:42:
fa:f7:f3:1b:c2:4f:46:ef:53:a3:f8:1c:ba:be:f1:15:67:00:
51:52:70:93:4b:3f:04:7f:8a:d1:6a:69:21:d6:9c:03:86:fe:
5c:df:bc:54:40:d5:0d:bd:e1:94:a6:7e:58:da:ff:c8:56:c2:
8d:42:ea:a3:2a:78:6a:d5:25:e0:49:79:eb:14:b4:71:28:b3:
44:78:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:56 2026 by rpki-client