Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.mft
File: fIOIMRS3dX0t-tjbBVzaFbScMQw.mft (raw, json)
Hash identifier: FeJKdNA1JT7MQBYhEDOxT1lxC5TmSRtW3PTS0O5jmT8=
Subject key identifier: 36:E5:AF:64:E0:5E:15:C2:5C:0B:CB:6B:4A:DB:DA:BF:71:FE:64:74
Authority key identifier: 7C:83:88:31:14:B7:75:7D:2D:FA:D8:DB:05:5C:DA:15:B4:9C:31:0C
Certificate issuer: /CN=7c83883114b7757d2dfad8db055cda15b49c310c
Certificate serial: 019D397820C8649AACF0D08CBEACDDBA3917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIOIMRS3dX0t-tjbBVzaFbScMQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.mft
Manifest number: 0C
Signing time: Sun 29 Mar 2026 12:01:07 +0000
Manifest this update: Sun 29 Mar 2026 12:01:07 +0000
Manifest next update: Mon 30 Mar 2026 12:01:07 +0000
Files and hashes: 1: fIOIMRS3dX0t-tjbBVzaFbScMQw.crl (hash: d72R5VeRaEf7EPHEcUT5MksG1tfcrqdDeu2xbScdMjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIOIMRS3dX0t-tjbBVzaFbScMQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:20:c8:64:9a:ac:f0:d0:8c:be:ac:dd:ba:39:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c83883114b7757d2dfad8db055cda15b49c310c
Validity
Not Before: Mar 29 12:01:07 2026 GMT
Not After : Mar 30 12:01:07 2026 GMT
Subject: CN=36e5af64e05e15c25c0bcb6b4adbdabf71fe6474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:d8:a4:4c:d9:f5:b0:34:47:c9:cf:c9:78:
31:c2:e3:30:34:b4:ff:45:e2:17:53:aa:e9:e6:0a:
9d:a0:84:cc:0b:22:f0:ed:01:2e:b6:23:4d:0e:09:
78:a4:da:ec:ea:e8:ab:88:ef:d5:8b:8a:f5:82:10:
2a:02:72:6c:06:66:20:ec:a4:40:f2:ee:0c:db:25:
37:d1:71:85:5e:5e:36:a1:58:61:01:63:ba:1b:67:
6a:85:e3:d7:23:bd:b7:50:f7:69:bc:a3:66:e7:5e:
cf:cb:e6:35:d5:a8:d9:ed:6e:63:2f:9b:e8:93:26:
f8:d4:67:5a:fb:b2:e1:e1:c9:02:a2:7e:d7:c4:c5:
a8:b0:92:10:e1:6b:c4:23:4c:37:4c:d2:49:83:d8:
0c:ce:1a:e7:c1:57:a0:20:32:41:29:67:bf:d9:c5:
64:13:2c:17:39:1c:a7:f1:06:0f:d9:1a:d0:48:3c:
40:35:12:ae:c0:3d:17:36:ba:a4:f4:31:e3:56:ac:
d0:a3:a4:ec:98:d6:4c:b5:c3:60:a7:8c:b7:57:c3:
2f:6d:ca:de:f0:94:6d:ce:d3:ae:6e:10:46:9e:ce:
52:22:a6:08:c0:bd:2e:2d:5d:aa:c1:09:b1:17:c1:
27:e8:1a:f5:78:b8:64:7b:29:df:48:88:55:2f:cf:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E5:AF:64:E0:5E:15:C2:5C:0B:CB:6B:4A:DB:DA:BF:71:FE:64:74
X509v3 Authority Key Identifier:
keyid:7C:83:88:31:14:B7:75:7D:2D:FA:D8:DB:05:5C:DA:15:B4:9C:31:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIOIMRS3dX0t-tjbBVzaFbScMQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ec7fb3-d5d8-41ca-b82a-86805cf24f4b/1/fIOIMRS3dX0t-tjbBVzaFbScMQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6a:a4:7a:ac:c6:df:9a:d3:4a:38:63:62:9a:87:5c:cd:9f:
e8:f1:28:f3:12:7d:ea:fa:dd:14:3a:df:8b:b6:4a:e8:24:98:
4c:21:39:68:a4:50:e3:cc:fb:13:02:ea:74:31:47:79:f7:41:
00:32:81:32:49:1d:ed:15:27:09:e5:f9:d7:ad:6e:4b:19:52:
75:1f:d5:66:af:8c:f1:7a:fa:7b:aa:8b:84:4a:07:cd:fd:14:
f8:97:e0:42:23:62:06:50:af:1c:ff:a3:74:9e:6a:52:c6:e9:
88:bc:c8:84:bb:f2:c3:8b:73:5e:29:76:f0:d6:1b:09:eb:9b:
36:a2:f8:81:f2:36:df:98:cb:fe:9a:e8:71:0c:11:09:f0:2d:
bb:08:da:d3:bb:9b:72:33:0a:94:7c:7a:eb:72:3f:71:b3:93:
9c:d4:bd:50:0f:04:82:c3:eb:d7:b4:3b:ff:05:e8:05:b7:67:
6d:a4:86:62:f2:48:24:49:7c:9b:9c:51:d2:42:53:4a:6c:22:
97:d5:7d:cc:20:7a:fa:2f:06:1e:e5:6e:54:6f:88:d3:53:59:
d0:f3:8c:29:0d:95:2c:00:e9:21:e6:a1:7b:46:a3:0b:0b:b3:
73:60:fc:fa:0d:77:ba:3e:b2:e4:8c:82:eb:93:c7:11:09:73:
9a:ae:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:20 2026 by rpki-client