Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier: wZ71JCmCQtJxKxjzZhK/PXRoD+fJjxen+lrqlsNJL5o=
Subject key identifier: 7F:D3:7E:2E:F6:82:B0:B6:0F:A9:C8:B9:59:A4:17:E9:23:47:51:5D
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer: /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial: 019CEDF0B6EEDA60412BEA2713601DD39A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number: 08C3
Signing time: Sat 14 Mar 2026 20:01:41 +0000
Manifest this update: Sat 14 Mar 2026 20:01:41 +0000
Manifest next update: Sun 15 Mar 2026 20:01:41 +0000
Files and hashes: 1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: +oAuosZKQLeMPxa5T2Z/ZwexQjNvsA6fJMWgH4PouBw=)
2: 4uQBWkALISvD6y91tLrUckXc3Og.roa (hash: onT9wzStJ0yxe/DG9p0SCT14FtXKok1QUI7Daf8dWqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:f0:b6:ee:da:60:41:2b:ea:27:13:60:1d:d3:9a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Validity
Not Before: Mar 14 20:01:41 2026 GMT
Not After : Mar 15 20:01:41 2026 GMT
Subject: CN=7fd37e2ef682b0b60fa9c8b959a417e92347515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:26:16:e4:29:4d:a9:95:ac:41:1e:f9:a7:
ca:7f:99:d5:25:ff:f2:5f:ea:ad:d1:7e:d5:63:50:
5a:a4:93:74:db:bb:3c:d2:a7:0d:8d:24:47:b0:52:
1d:3d:82:ab:c8:17:ee:c1:95:9a:91:e4:82:a6:b6:
1d:ea:b8:9b:48:c2:40:18:3a:c8:11:80:3c:b7:75:
8a:d0:ea:01:84:d1:60:de:6a:62:c3:a3:14:b8:4b:
f5:f5:bf:0e:04:13:44:08:d5:b6:dc:2b:ed:41:e2:
9f:80:07:48:63:e8:be:4b:33:8c:36:dd:05:88:be:
7b:e2:1c:b5:3f:52:2d:e6:27:b0:68:cf:e9:f0:79:
1e:b8:ac:9b:14:68:5c:3a:9a:9c:4e:ef:c4:83:23:
f5:98:93:da:ec:b7:1f:cf:10:b1:77:46:93:6d:7e:
66:26:6e:cb:8e:38:f5:43:56:49:fc:a4:79:a1:6f:
be:73:20:95:b1:1e:ec:35:9f:38:e6:10:e5:3b:7c:
6d:f5:8a:2b:3b:60:ff:dd:14:06:7d:59:59:ba:c8:
03:21:20:d2:6f:57:2d:54:94:8d:c8:4d:8d:21:23:
e8:a0:cc:29:8a:f1:73:13:ff:94:15:ec:44:81:72:
43:15:bb:2c:46:c5:71:1d:cd:a0:05:af:80:92:a2:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D3:7E:2E:F6:82:B0:B6:0F:A9:C8:B9:59:A4:17:E9:23:47:51:5D
X509v3 Authority Key Identifier:
keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ce:d2:bc:84:0e:89:cb:a3:53:62:12:04:39:4d:04:2c:55:
1a:ab:74:b8:34:68:45:99:d5:c1:e9:91:9b:ea:aa:0e:1e:de:
30:00:7c:c7:6e:f2:ba:df:e9:9c:e2:1e:48:56:3e:6f:ea:77:
ff:98:be:71:f5:4f:2d:8b:18:28:57:3c:1d:49:85:68:50:d1:
42:63:08:a8:37:cf:1c:0d:6f:ce:fd:ce:bf:df:84:7a:48:33:
a9:62:3d:8d:c0:80:82:4a:0b:b6:f8:0b:2c:4a:0a:e8:2c:d7:
09:ec:82:57:49:2c:2d:b1:38:23:bb:56:4c:36:74:a0:50:08:
34:0f:17:23:45:fe:1f:c6:15:63:c0:45:7f:04:44:67:70:e7:
69:7d:9d:f3:bb:be:6c:83:e2:f7:18:bd:fd:48:95:21:94:67:
14:68:6b:85:b7:d7:2e:df:05:51:78:11:63:54:4b:88:73:b0:
8a:d2:97:a3:2e:ac:44:ae:a7:58:43:b4:05:37:28:30:fd:32:
d5:4c:af:15:3b:df:9e:07:52:fa:a0:53:ae:6c:d5:3c:4a:7b:
12:1a:b6:aa:0a:51:ed:b2:11:2a:1c:08:5f:85:e6:41:c5:6d:
05:15:b2:04:38:bb:a9:ad:64:04:b4:89:b0:8d:9b:a5:d4:4a:
64:b3:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:56:57 2026 by rpki-client