Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File: fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier: HcnvvX8axaZZKesrNddBx7lhYNs6cWOFczYxaDCYqik=
Subject key identifier: DA:FC:E9:FC:5D:E0:8C:AC:A8:44:AA:DA:6E:01:80:9F:6C:27:EC:20
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer: /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial: 019D3865E0427CCBD5C36F13B9A2F5B14CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number: 114B
Signing time: Sun 29 Mar 2026 07:01:33 +0000
Manifest this update: Sun 29 Mar 2026 07:01:33 +0000
Manifest next update: Mon 30 Mar 2026 07:01:33 +0000
Files and hashes: 1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: wJuHAOVGpLv09DTFO28p+/8pHniGYTQS3aUJIVJ5gqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e0:42:7c:cb:d5:c3:6f:13:b9:a2:f5:b1:4c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Validity
Not Before: Mar 29 07:01:33 2026 GMT
Not After : Mar 30 07:01:33 2026 GMT
Subject: CN=dafce9fc5de08caca844aada6e01809f6c27ec20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:0a:a9:7d:2e:d5:4f:2d:56:af:90:c4:75:
9e:48:fb:50:b0:5e:8f:0d:aa:28:ff:79:cf:19:69:
e4:e8:c2:32:d7:7c:05:82:1b:67:60:6f:e4:ac:4c:
10:e9:97:50:ff:3b:15:19:fd:f7:ee:12:66:b2:d5:
ef:78:b1:01:0f:ae:2e:f1:9b:c9:95:53:8b:b8:03:
35:62:36:3b:a6:a3:c3:75:e0:6f:fc:3f:00:b4:9a:
53:e5:f6:89:6c:95:df:f0:62:36:7c:1a:a3:ef:99:
b7:3d:29:21:13:2e:2c:ea:78:09:be:41:7f:b3:c8:
c2:06:84:ed:9a:ad:df:21:0a:8d:e9:76:6d:fc:b0:
cc:fa:1e:1b:06:af:0c:dc:8b:03:96:69:c6:c6:42:
75:31:e1:4b:04:8f:0d:e2:3a:cd:b3:7e:54:12:cd:
a5:65:b3:4d:0a:81:0d:14:a4:e6:50:16:42:bf:2a:
3a:61:1b:a5:8c:fd:a5:15:1e:af:32:e5:48:21:7a:
d5:e2:75:8d:b7:88:43:86:6d:18:a4:3d:d7:54:10:
d3:33:8d:86:8b:78:4b:11:56:0c:6b:3e:e6:87:a4:
9a:4c:d2:6e:52:e3:c7:28:86:cb:2b:4c:3b:75:bf:
41:48:29:81:da:a5:68:cf:f8:13:5a:f2:b8:42:60:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FC:E9:FC:5D:E0:8C:AC:A8:44:AA:DA:6E:01:80:9F:6C:27:EC:20
X509v3 Authority Key Identifier:
keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e3:31:ff:9d:b4:dd:d3:e4:d7:33:ea:d0:d9:3b:d9:e5:61:
c2:8e:79:de:ce:70:d0:e4:96:38:b2:1a:4c:5c:52:0f:ff:27:
b1:ea:86:00:18:45:20:48:2d:ac:72:37:b3:81:7f:8b:81:d8:
91:39:5f:57:76:59:61:3f:0b:c0:a8:c4:67:3a:99:51:df:76:
dd:fb:61:93:00:8b:52:a5:d0:81:4f:cf:10:3c:7b:21:7f:e5:
b2:4b:e7:4e:ab:f5:1f:db:2e:b7:88:22:39:b8:72:4d:29:f8:
29:6b:81:11:38:ff:05:9c:d4:2e:65:62:bf:5b:fc:a2:6d:65:
9e:a9:df:31:f1:d9:a3:2d:46:66:bb:92:2d:34:93:e3:0d:bd:
97:cd:3e:37:ab:67:27:b1:95:df:a4:c8:5e:80:00:55:d9:5d:
82:77:93:06:d3:fc:f5:61:c4:4d:5d:1b:f1:b7:f9:5d:17:a9:
e5:40:94:6c:3f:79:1a:b4:14:2a:95:55:9d:6c:29:27:e2:b2:
cf:af:48:42:12:bf:2e:f0:d9:a7:52:59:d1:d5:a6:40:00:04:
0a:15:1f:b7:50:5e:f8:ac:47:74:08:54:2d:b0:a4:1e:e1:c8:
e6:fb:59:b6:65:03:5c:bb:fb:9f:40:17:f5:b4:4f:c2:69:a5:
42:43:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:47 2026 by rpki-client