Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
File: fiR7mB00T2vEwetCMx0jKDgWE3w.mft (raw, json)
Hash identifier: UouL0wBgeCnMLLptwmBO5FsGVHPBcuSkROaDpPW5VlU=
Subject key identifier: 3E:66:D9:88:3F:49:4B:1B:BA:CD:C8:B3:06:5B:7C:2A:50:D7:88:05
Authority key identifier: 7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
Certificate issuer: /CN=7e247b981d344f6bc4c1eb42331d23283816137c
Certificate serial: 019D39414CB521A2730FBCA285745FF72769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
Manifest number: 15A6
Signing time: Sun 29 Mar 2026 11:01:13 +0000
Manifest this update: Sun 29 Mar 2026 11:01:13 +0000
Manifest next update: Mon 30 Mar 2026 11:01:13 +0000
Files and hashes: 1: fiR7mB00T2vEwetCMx0jKDgWE3w.crl (hash: 4BOW547vU3y5EK9RfCeRudRidFTvk7pBJ/0CUomBzrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:4c:b5:21:a2:73:0f:bc:a2:85:74:5f:f7:27:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e247b981d344f6bc4c1eb42331d23283816137c
Validity
Not Before: Mar 29 11:01:13 2026 GMT
Not After : Mar 30 11:01:13 2026 GMT
Subject: CN=3e66d9883f494b1bbacdc8b3065b7c2a50d78805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f2:5b:7d:23:9f:8d:a4:5c:b1:4c:06:05:b3:
a7:54:75:56:35:aa:c2:c0:35:b8:28:20:53:03:36:
9b:67:70:3a:3e:34:47:de:ca:5b:95:55:96:6f:09:
93:b0:7e:21:da:14:46:02:3c:c7:bc:3f:55:fe:65:
cf:11:89:3a:86:0a:7c:2f:c6:70:2d:aa:1d:38:f8:
7c:2a:30:f8:40:89:99:73:0d:5a:2b:00:0f:80:6d:
01:05:83:86:37:79:5d:3e:00:65:49:bd:6f:46:db:
5e:01:3e:a2:a3:fa:88:48:40:3b:dc:cb:04:c9:3c:
fc:4b:e4:72:70:f1:1d:31:79:6c:7e:c4:42:6b:69:
0a:d0:cc:8e:69:78:7c:18:ef:68:dc:89:8f:01:4f:
f4:18:79:1f:04:f5:e3:19:c4:85:8a:01:9f:73:09:
0f:f0:5f:97:4f:39:5d:8e:4d:a9:a9:a5:93:6c:4b:
9a:0c:2f:c1:d2:af:9a:80:5e:ec:0a:c8:bf:02:0e:
d4:ec:57:21:59:07:1b:83:ac:df:a6:6d:c4:f2:3f:
42:78:f3:42:c6:20:4a:ad:86:e4:ed:b7:ec:90:fa:
63:0d:dd:80:d4:3c:08:89:4c:86:db:cb:6b:32:b8:
49:fa:b3:1d:41:88:7a:42:1e:0e:5a:e7:d8:54:8c:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:66:D9:88:3F:49:4B:1B:BA:CD:C8:B3:06:5B:7C:2A:50:D7:88:05
X509v3 Authority Key Identifier:
keyid:7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:bb:de:71:66:a4:51:1e:15:57:e1:00:58:60:27:48:12:c2:
0c:cb:5e:88:40:24:ae:a1:85:85:bb:ea:df:64:65:8d:5c:4c:
1a:43:27:0e:c4:12:9c:63:43:54:12:21:2e:68:30:8d:0d:1c:
a8:db:ad:3e:c5:4d:86:be:b0:70:10:24:fc:d4:c3:14:55:fc:
4f:5f:5e:0c:ba:b5:5a:6a:2a:12:df:4c:92:b9:9d:72:3b:c2:
e0:46:2d:ee:ae:f2:90:40:95:05:98:f3:fb:66:62:ea:ce:8f:
d4:84:e9:c8:9f:0a:50:a5:b8:7c:2f:ad:88:36:0e:8b:75:7f:
b3:b4:d0:07:75:27:51:d0:94:62:66:85:38:51:02:a4:ef:eb:
91:f6:5e:43:12:62:05:fd:98:73:7c:6c:0d:ca:b0:22:be:32:
49:d1:42:45:ea:f1:18:62:21:25:0b:13:62:35:5a:98:80:9c:
1d:35:c9:5a:56:b3:ef:8e:b0:67:26:33:09:26:0e:b0:2b:d1:
99:05:d2:26:21:f4:1a:b5:17:96:7a:bc:8f:27:ae:0a:62:57:
69:1d:e3:49:90:89:24:f5:85:8d:e7:23:bc:00:d0:17:ef:7a:
d6:b5:78:46:ad:df:39:72:5c:64:4c:75:4b:00:1d:52:75:7d:
7f:45:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:40 2026 by rpki-client