Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: 6vdzQ1wJtT1fNHzC24xu6tjHx5bRiHAHR+SyekbSioo=
Subject key identifier: 9E:3F:2B:06:68:DE:26:26:4F:18:17:3C:A7:72:30:C8:83:3E:00:B0
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 019D38D2B7E273A08A111419BF0C6B17CA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 0C22
Signing time: Sun 29 Mar 2026 09:00:26 +0000
Manifest this update: Sun 29 Mar 2026 09:00:26 +0000
Manifest next update: Mon 30 Mar 2026 09:00:26 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: ue0kGJsCZHNenMDu4teu7Axr1TNlebQ+t//A5zS8XjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b7:e2:73:a0:8a:11:14:19:bf:0c:6b:17:ca:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Mar 29 09:00:26 2026 GMT
Not After : Mar 30 09:00:26 2026 GMT
Subject: CN=9e3f2b0668de26264f18173ca77230c8833e00b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:36:f2:63:b9:3a:e4:4b:95:f9:a4:64:e8:6e:
ea:89:68:59:0b:d9:71:7a:a4:2c:ed:49:34:cf:b5:
9b:4b:c6:6a:97:b6:dc:f2:93:fd:94:e1:2a:54:42:
f9:8f:87:b7:59:49:71:ad:f4:db:11:c7:8c:8b:f4:
16:03:96:dd:a2:d6:74:34:dd:4a:82:ea:83:03:44:
b3:ec:32:24:fc:d8:54:f6:b3:36:20:80:15:10:cb:
64:0f:6e:7e:4a:53:55:73:95:73:68:65:1c:18:20:
e2:c1:0b:22:29:1f:4d:8f:40:a9:bd:4a:ba:44:34:
27:b7:13:ca:c4:40:13:a2:d8:ce:ac:c7:f0:fc:b4:
9c:a0:29:e1:c0:3e:de:9d:aa:f8:8a:dc:4d:91:93:
58:29:e0:da:ae:83:60:a8:cb:49:02:20:9b:bc:05:
d4:bf:aa:c5:d0:66:3e:4f:2f:db:56:fa:9c:6a:c7:
af:0a:34:46:49:47:9d:e0:a1:c2:c5:30:df:b2:bc:
9f:6c:33:f6:12:b3:aa:30:97:98:b2:75:6b:d7:33:
b1:f5:5a:d6:5c:44:66:7f:50:73:dc:6c:09:f7:15:
3c:22:8d:a3:da:13:0c:d8:fa:6f:9a:dd:fe:17:ca:
56:c7:26:14:77:35:d8:47:3a:e1:63:d9:e9:b3:f6:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3F:2B:06:68:DE:26:26:4F:18:17:3C:A7:72:30:C8:83:3E:00:B0
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:13:30:a0:83:d4:92:65:14:17:10:e6:da:77:6a:a0:4c:c7:
9f:d7:14:a4:cc:e4:d9:bc:2a:3d:73:b2:ba:7a:81:28:ea:bf:
88:ca:12:18:01:6a:9d:c9:33:16:4e:5e:5a:e1:1a:82:c2:57:
2b:c0:f4:8b:28:25:92:d5:e0:16:4f:96:65:ac:27:b7:4d:8c:
be:37:2a:c8:2f:f8:2c:a6:41:90:cd:5e:79:2c:8d:8f:f5:0e:
0e:0b:44:d0:26:ca:32:87:9a:1f:c3:e9:80:e2:ed:78:f7:c1:
0a:ff:af:7f:15:65:4e:61:65:f1:4f:10:6c:37:d2:12:38:b1:
20:c2:9e:90:9a:06:bc:39:fe:21:c3:10:03:df:ca:9f:71:f8:
ad:e4:8b:65:9a:f1:2a:7c:08:ed:57:45:16:2c:00:8a:c8:4f:
ba:24:8e:76:ee:00:ab:f4:50:86:06:50:30:55:73:a3:d5:52:
15:4c:9a:ca:1c:2b:de:a9:54:44:29:42:b1:8b:c6:58:e6:b8:
bd:6e:e1:2d:3b:c2:55:2f:3b:88:12:12:47:cc:af:bb:35:9a:
97:2c:5d:41:ac:86:0b:a9:a8:ef:2e:d2:c7:bb:27:41:fe:5e:
01:9b:bd:72:63:2b:0f:e7:2a:7e:e4:39:d5:06:75:d5:e2:cc:
53:3f:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:59 2026 by rpki-client