Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
File: fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json)
Hash identifier: K19yJo5r4a+FCCR6tS2aqG+FvAKDynNR896wLf9CyfY=
Subject key identifier: EF:47:FA:A7:6F:FF:44:2E:2B:36:77:23:F8:5F:AA:EA:73:36:D0:7F
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Certificate issuer: /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial: 019D38657425B03B67B2A6E69E7959AA71A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
Manifest number: 0522
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: MJWRhW7DiQeUoyp+Lc5DVtfkpnIgYDpwf6PcitMDZC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:74:25:b0:3b:67:b2:a6:e6:9e:79:59:aa:71:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=ef47faa76fff442e2b367723f85faaea7336d07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:3a:f4:87:8b:08:51:f5:91:8c:4a:25:b1:
37:c7:c2:e6:ab:4f:d2:51:cb:52:43:f1:47:0f:af:
1e:9c:6d:2d:79:9e:62:e2:47:bd:1c:22:50:e7:70:
b3:5e:db:f1:46:2d:57:d3:f9:bd:8b:c7:ea:17:96:
d5:da:87:40:ab:1e:a2:43:1f:04:8b:a5:51:7e:b5:
45:e7:6e:f0:48:dc:fe:b7:1b:7c:fb:db:34:67:4c:
d0:db:70:c9:2b:a1:c8:43:5d:b9:fe:54:2d:c9:c6:
4a:03:a4:d0:a2:2c:03:5f:f8:6d:b3:68:05:ee:9f:
28:fe:96:93:b8:a4:e4:e5:eb:f8:3c:53:4a:1a:20:
35:4d:cf:4c:b6:6c:06:4e:5c:15:d9:b9:5a:a3:28:
80:e7:b6:07:52:c3:12:53:33:6e:ce:d3:74:fa:42:
de:b7:ff:c6:66:69:af:55:13:e9:4e:9c:08:a7:48:
d4:8e:ac:19:6f:b7:50:86:53:f2:09:0b:b0:aa:8c:
a7:fe:01:e3:1e:f4:fe:4a:86:c3:7d:f3:67:10:78:
67:4b:b5:cb:ae:2d:8b:30:8a:4e:58:44:fc:8a:2f:
8e:fc:0a:6f:5d:85:f7:b2:3b:fa:69:16:64:24:b3:
0a:c8:2c:eb:ca:5c:86:92:bb:a7:bb:eb:fe:6a:0f:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:FA:A7:6F:FF:44:2E:2B:36:77:23:F8:5F:AA:EA:73:36:D0:7F
X509v3 Authority Key Identifier:
keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b7:a8:39:c9:28:35:cc:f2:58:62:5a:e1:03:2a:74:f0:18:
a7:6d:64:4c:41:51:db:9a:f4:de:8b:18:e9:b8:3e:df:1e:ed:
0b:69:ab:8a:c4:8a:36:f0:39:03:06:77:51:18:f3:0a:8a:48:
4d:7b:51:7b:a3:af:32:79:59:6d:28:f1:ea:27:0f:74:ba:db:
4a:9e:db:cc:fe:4b:b3:78:b8:95:a9:2a:79:10:83:58:af:d2:
9a:ef:a2:4a:52:2b:ba:fb:87:c9:49:b0:4b:d8:19:90:2d:79:
dc:cd:58:cb:e2:76:96:99:1a:30:7d:40:4a:11:fb:57:ab:ce:
76:73:0a:38:13:76:28:b1:eb:73:50:94:64:06:2e:4b:c5:45:
ef:b8:ee:ca:44:25:f5:07:f1:c3:31:63:39:94:98:4e:3c:2b:
01:2d:3c:35:2a:c1:65:fa:0a:ec:69:77:a2:eb:5c:c1:91:99:
8f:d3:05:25:88:ef:fd:ab:8c:6d:0f:b9:b3:b1:56:21:9f:39:
72:4d:3a:7f:3b:52:0c:2a:14:a2:be:29:6f:5e:00:8e:b3:5a:
b6:08:2c:f5:76:8e:9b:01:3b:36:53:30:60:70:ef:17:e8:98:
f6:ae:6e:6e:c7:1d:dd:34:8a:cc:39:76:89:b9:43:b6:df:1f:
84:a9:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:48 2026 by rpki-client