Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
File: fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft (raw, json)
Hash identifier: VQRtwOKew+GujygYH791WfV8Q7Sl/22nizZ/rVfZWI4=
Subject key identifier: BA:8B:8A:9C:51:3E:4C:67:42:C8:36:0E:AE:4C:47:15:DA:7D:73:B0
Authority key identifier: 7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
Certificate issuer: /CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Certificate serial: 019D3866513E828CCB802FC64EC8B2A80A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
Manifest number: 081E
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl (hash: tZC4N30bjiBEDkB5fkPqba/3Z8jtm8aO8STUfakpepk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:51:3e:82:8c:cb:80:2f:c6:4e:c8:b2:a8:0a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=ba8b8a9c513e4c6742c8360eae4c4715da7d73b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:a9:e6:d3:45:d4:9a:82:89:39:de:54:37:
28:cb:9c:ab:5a:23:08:25:65:c9:33:06:70:fa:18:
76:68:11:2e:e0:f0:35:6c:98:fc:da:8a:f2:a6:46:
ba:a5:67:5a:bf:2c:cf:dd:e9:4e:d1:66:bf:53:96:
29:67:f9:3d:20:e5:4b:d6:aa:b7:9c:de:7b:ac:52:
49:98:18:ad:67:18:fb:c4:18:30:86:99:dc:20:6f:
54:e3:0f:77:f6:95:9d:8b:35:13:10:5d:2d:f0:d1:
d8:1b:f6:60:74:47:ed:a6:17:e1:90:7d:3e:f7:fd:
61:a7:93:4f:b9:d4:6d:d6:14:f1:52:ed:95:a5:71:
c3:9c:d7:f3:b5:c0:d9:1e:70:59:42:a4:c0:f7:f9:
40:d5:bc:26:88:5b:a2:61:b4:0c:4e:10:42:a7:83:
dc:5c:69:11:05:b0:32:5a:e1:48:d0:9f:45:e7:50:
77:2a:5e:3c:5e:36:ad:51:5b:b8:e1:a2:a6:8c:64:
d4:33:11:99:94:9e:c9:36:12:8f:38:52:4e:09:77:
c7:48:ce:c4:27:62:9b:d6:5e:fc:57:7f:fb:3b:c5:
69:67:b2:9b:5e:8e:54:fe:ff:48:a0:71:33:da:10:
d6:4d:e3:4f:ad:f9:12:28:90:2b:1b:3b:a0:ad:90:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8B:8A:9C:51:3E:4C:67:42:C8:36:0E:AE:4C:47:15:DA:7D:73:B0
X509v3 Authority Key Identifier:
keyid:7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f3:42:b3:d4:af:42:61:ae:ed:48:49:70:79:73:67:6f:6a:
d7:0c:46:1e:89:49:de:b0:6c:ba:24:8a:9c:94:f6:6e:98:76:
75:5e:f4:d7:51:31:b8:73:f7:05:dc:56:86:9d:11:87:4d:9f:
33:5f:86:9e:ce:4e:e8:73:a4:69:6c:b7:58:89:93:82:0d:9a:
79:64:10:4a:1c:63:60:8f:cc:2f:b2:d6:63:5a:bd:94:84:11:
b9:c8:44:2a:bf:f0:43:1a:53:5f:b7:7f:63:db:22:43:2d:69:
50:a5:b5:c4:5a:dd:3e:ef:6c:55:c4:fd:a5:7c:84:34:40:a3:
e4:95:02:2d:83:b6:ac:f6:79:59:56:1f:79:f6:32:97:f6:a6:
68:56:23:a9:28:34:36:19:1a:30:19:aa:86:b8:44:49:f9:00:
39:fa:6f:c6:37:26:f6:db:19:3b:72:9e:6f:ec:2a:59:91:2b:
82:c3:81:f7:17:90:3c:b3:f0:01:be:64:eb:43:14:f6:48:30:
02:41:29:d7:91:e3:81:8e:d2:fd:73:3e:93:39:a6:5d:f2:52:
11:4e:10:89:01:c4:24:b4:ae:17:4d:3f:00:b8:ac:05:3c:c0:
ab:62:17:8d:37:38:d0:f3:92:f4:bb:be:c8:4b:d6:e9:8a:f0:
df:1b:b4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:54 2026 by rpki-client