Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
File: frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft (raw, json)
Hash identifier: evlnvClvr34pc8PC2Kb82GTEDxzAPYFBHCdlIgmChFs=
Subject key identifier: 29:3B:A1:07:0E:E9:72:70:B2:22:2D:4A:85:11:4C:CA:91:F5:C9:ED
Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
Certificate issuer: /CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Certificate serial: 019D37526AA4D7E61B5ECED0288A8893F19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
Manifest number: 0C36
Signing time: Sun 29 Mar 2026 02:00:41 +0000
Manifest this update: Sun 29 Mar 2026 02:00:41 +0000
Manifest next update: Mon 30 Mar 2026 02:00:41 +0000
Files and hashes: 1: frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl (hash: uhaFOfsk9IyKvIY2gFQPWFR/ppZuTRKjCTLTUbmRKGU=)
2: wFVKBdOf5AuSyla8OiX9SFUY-tw.roa (hash: iTs7VKMvCLrjV7ehvtgY+XyRQW8+vYLmCINqKdnZzs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:6a:a4:d7:e6:1b:5e:ce:d0:28:8a:88:93:f1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Validity
Not Before: Mar 29 02:00:41 2026 GMT
Not After : Mar 30 02:00:41 2026 GMT
Subject: CN=293ba1070ee97270b2222d4a85114cca91f5c9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:64:d6:f1:b8:fe:7a:32:43:dd:e4:76:81:
a4:e4:e6:da:7e:bb:f9:9a:be:57:8a:c3:51:12:56:
49:b9:f2:2d:b4:ca:9e:00:68:f6:26:3b:40:0a:4f:
05:4e:0f:86:b2:86:67:8c:15:79:96:52:c9:c9:1f:
c6:0b:16:60:74:83:16:35:88:c9:eb:3d:02:b5:82:
8b:35:ce:d5:f0:51:a5:72:b2:db:39:4c:04:38:1d:
5d:a4:1f:f5:ac:96:85:62:df:b0:a1:12:35:7a:3d:
8b:bc:cb:93:36:ee:1e:01:b1:0d:ec:2b:31:c2:8c:
52:af:8b:2f:db:10:6c:ed:f1:2c:da:e2:ab:8c:33:
41:da:8b:3e:f4:58:41:38:21:de:4f:e0:51:60:bb:
34:bf:46:29:07:07:d7:ac:2b:c3:56:f1:ec:8d:cf:
23:f7:c6:83:9a:39:d4:3e:4b:12:67:d3:7e:97:0a:
eb:54:88:81:d6:b6:b6:0e:41:73:09:30:7b:ff:ff:
6e:3d:c4:25:f7:16:91:0a:be:ac:1e:2e:7a:24:b8:
41:6c:ae:c0:ff:92:e3:0e:ef:1e:09:be:e7:23:e1:
ad:12:bf:ea:68:f8:94:5c:8a:a2:99:c3:e2:ee:36:
d1:1a:e0:1d:22:8b:d2:7a:16:34:a1:63:bd:ac:8f:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3B:A1:07:0E:E9:72:70:B2:22:2D:4A:85:11:4C:CA:91:F5:C9:ED
X509v3 Authority Key Identifier:
keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:10:d1:5f:ca:de:c8:c3:a2:f7:d9:26:d5:2a:3c:4d:2a:13:
af:1c:a1:07:a0:e4:f4:72:25:e4:22:c8:a1:12:f5:38:13:a0:
75:11:f3:40:39:44:4a:8a:51:39:c8:13:3d:f8:9a:64:73:1b:
44:7e:dc:59:07:6a:90:4c:d5:1f:11:ad:50:b0:c6:5c:74:90:
99:a7:88:75:01:78:f9:2c:09:ab:db:98:17:c6:da:35:52:9b:
7f:bf:b5:fe:33:1d:2c:14:de:54:a9:42:48:aa:5a:d3:11:d6:
7c:d8:f8:48:f4:51:45:de:a8:5e:91:9d:8f:d3:d4:fa:e2:16:
c9:47:29:99:52:a8:d5:23:8d:31:80:e2:a6:e1:75:55:39:3e:
23:53:b7:fc:de:c5:c8:b7:b7:a5:3b:bb:4d:7a:02:1f:b7:c7:
8d:ff:62:ed:00:70:dc:15:5b:94:5a:99:00:fa:05:15:e2:86:
93:fb:42:4c:32:82:b9:c3:41:90:73:26:14:2e:05:d5:df:5e:
a2:88:9b:08:47:66:e4:1b:e8:88:64:e8:68:22:53:06:ae:c2:
93:fe:63:d5:8d:85:76:53:12:14:a5:79:58:24:4f:dd:7a:8c:
a7:e3:53:ba:cd:e5:89:16:62:6f:e6:12:d1:c6:c8:5c:24:f0:
a4:21:b8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:30 2026 by rpki-client