Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
File: fiR7mB00T2vEwetCMx0jKDgWE3w.mft (raw, json)
Hash identifier: hSfNYcbgYAxWQBCyVNmoH49f5fet8X/hPAOYXj22vj8=
Subject key identifier: 2A:07:D5:8C:6C:14:29:13:F4:8D:12:7A:1C:EB:23:FD:83:24:30:DE
Authority key identifier: 7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
Certificate issuer: /CN=7e247b981d344f6bc4c1eb42331d23283816137c
Certificate serial: 01A1788303AED3F7FAC6EA43061332710FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
Manifest number: 17D9
Signing time: Mon 26 Oct 2026 14:00:14 +0000
Manifest this update: Mon 26 Oct 2026 14:00:14 +0000
Manifest next update: Tue 27 Oct 2026 14:00:14 +0000
Files and hashes: 1: fiR7mB00T2vEwetCMx0jKDgWE3w.crl (hash: HY3Ejh0dolixOLhkWf+8B1GsHoIvkpGdgoyWJzFPahg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:03:ae:d3:f7:fa:c6:ea:43:06:13:32:71:0f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e247b981d344f6bc4c1eb42331d23283816137c
Validity
Not Before: Oct 26 14:00:14 2026 GMT
Not After : Oct 27 14:00:14 2026 GMT
Subject: CN=2a07d58c6c142913f48d127a1ceb23fd832430de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:6c:20:69:84:84:7c:49:21:9a:70:48:5d:
fa:91:bb:d6:52:3a:fe:5c:7f:09:50:fb:39:fb:44:
77:c9:cb:4f:05:6b:08:c3:32:35:c7:ab:e9:69:0e:
5e:0e:82:46:42:8a:9b:c1:1a:c4:37:c1:2c:a0:b1:
de:b3:5d:02:cd:bc:96:e8:dc:9e:5b:36:20:f8:71:
06:e7:7f:a3:19:b0:e3:3a:ea:b4:e0:23:3f:6e:42:
3f:0e:58:8e:83:79:16:bb:87:23:67:5a:30:e0:39:
6b:ac:ae:f6:d5:3a:b6:41:36:3e:92:a7:7e:a5:ac:
dd:3e:2e:a3:97:30:07:18:52:c0:9b:d0:ec:f4:ee:
4a:51:0d:d0:53:00:dc:0b:cd:59:48:d1:34:4c:3f:
2a:2d:92:ed:63:60:81:e8:c3:dd:54:00:df:22:94:
54:aa:2d:b3:13:d8:e7:43:6d:fe:fa:e6:db:1a:23:
94:e9:39:aa:9f:2f:cf:bc:f2:c2:8c:d0:2f:b1:36:
2e:28:7e:dd:6a:fc:ae:32:e2:96:11:c2:99:a7:04:
58:8b:98:2d:76:98:f9:ca:8f:01:04:84:71:55:c1:
82:5f:47:84:3c:ff:6e:f5:cb:fd:ad:be:a0:17:54:
40:b2:cb:25:74:18:64:83:6d:c6:f2:77:35:a2:a2:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:07:D5:8C:6C:14:29:13:F4:8D:12:7A:1C:EB:23:FD:83:24:30:DE
X509v3 Authority Key Identifier:
keyid:7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d3:ce:4b:67:b9:55:f5:3c:6d:12:ee:b3:f3:cd:c8:cf:62:
68:7f:e2:88:10:e3:d3:31:a5:64:bd:9a:c8:0d:61:da:bb:38:
61:cd:d3:34:3b:ba:79:98:61:34:e6:e0:b2:80:83:f8:78:18:
95:79:05:86:d2:e8:cc:db:b5:31:81:ed:e5:50:f5:81:26:d4:
cd:bb:62:4b:2d:b3:66:e1:23:b4:9c:87:05:09:16:fa:77:76:
0e:f7:b0:24:97:f6:40:03:96:4c:86:8b:72:41:75:4f:16:c2:
8b:4c:3b:c4:30:ae:5b:06:3e:e6:1a:9b:d3:8b:7c:78:4e:d3:
18:94:26:d0:4a:46:6d:dc:f2:96:00:14:4f:42:b8:4c:eb:a0:
49:50:f6:0b:01:62:b2:8f:19:5b:55:90:1e:90:1c:9b:2a:52:
32:72:13:30:81:32:04:92:a3:19:21:c8:b9:a8:18:a1:27:13:
f3:ca:f0:23:29:d3:2a:98:e6:4f:9a:7f:d7:6a:19:c1:4d:53:
99:cb:22:c5:e8:ad:b2:4b:ee:6a:36:3b:c1:f2:e7:2d:5f:d6:
27:07:99:78:ca:c0:91:47:05:f3:68:6f:1c:e4:10:51:7b:d2:
76:d2:17:a5:77:e9:e6:d9:5f:22:ef:f8:c3:81:80:da:85:5b:
74:19:24:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:10:24 2026 by rpki-client