Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
File: o_fz-CX46MJWXq77Zud0TJKV3Mk.mft (raw, json)
Hash identifier: LuU6UITBQMLkXqBG3uwHqEMu3Gqf0SLdgW2z9Yiuloc=
Subject key identifier: 9F:CB:E3:22:C4:DE:AE:58:3D:11:6B:A5:A5:1F:D3:50:3D:DA:47:F9
Authority key identifier: A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
Certificate issuer: /CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Certificate serial: 019D38655CDB811AB8A049197BDC169A5BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: o_fz-CX46MJWXq77Zud0TJKV3Mk.crl (hash: eEfmiRERNm1yuP4f4UqOzmRpsxxAPnRNxgd7DBAAjS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5c:db:81:1a:b8:a0:49:19:7b:dc:16:9a:5b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=9fcbe322c4deae583d116ba5a51fd3503dda47f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:8c:b7:ae:77:ee:1b:6a:d2:cc:ad:28:f7:
64:f3:c0:fe:a5:f3:c5:ee:ee:42:09:db:30:87:0b:
c7:0a:06:b0:ff:49:25:8c:4c:12:ff:77:01:ae:35:
34:24:c6:eb:7e:db:6b:ef:f8:94:5f:e4:1d:bb:82:
e6:57:28:b8:c5:7a:74:9c:cb:b3:fe:7d:83:15:a4:
83:01:bb:38:13:01:ca:0e:c2:db:9e:dd:8f:77:3c:
f0:c2:47:76:ec:0a:e5:25:1b:bb:d5:b5:5e:ef:36:
78:b8:b4:a3:5e:6e:6d:69:99:14:f3:1c:77:47:96:
af:40:50:d8:99:d7:ae:93:84:00:82:75:17:00:7d:
b5:d8:7a:29:7e:bd:2d:15:77:02:27:9b:04:40:fe:
02:80:e0:79:3c:c6:e8:d3:21:ff:0b:09:db:63:bd:
0f:e6:aa:fc:d3:66:5c:23:84:28:d6:92:e1:b2:69:
8e:23:04:ed:04:fd:cb:fe:bc:62:60:70:08:c9:0d:
a1:9f:8f:f6:bf:83:1c:e9:2f:0f:db:ee:c6:f6:b8:
58:43:20:50:43:2c:5b:bb:26:33:db:78:d4:df:ea:
be:dd:08:c9:4d:a8:f0:f0:b2:12:2b:7e:6f:04:73:
d7:02:99:8d:66:50:69:e5:a6:90:c0:d6:6e:8d:08:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:E3:22:C4:DE:AE:58:3D:11:6B:A5:A5:1F:D3:50:3D:DA:47:F9
X509v3 Authority Key Identifier:
keyid:A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:20:6f:46:d9:f8:64:31:6a:fe:30:75:68:1b:36:c5:2f:16:
e9:c1:83:3c:77:68:cf:1a:60:27:4f:e5:45:49:19:43:ae:ba:
8c:b3:24:9c:1e:f7:20:c5:f2:dc:65:f3:29:c7:eb:0c:72:f0:
c6:88:d5:20:7b:46:96:79:c5:26:3d:85:81:9f:8f:8c:7e:f7:
6a:a4:5a:8e:e6:ec:b5:9c:2c:e4:a0:1f:02:20:8d:da:f9:1b:
63:b9:de:02:a3:71:69:20:6d:20:dc:e3:34:e2:22:ab:35:51:
cc:7c:98:d6:ac:54:fd:a9:c9:01:2e:99:1f:bf:0e:1b:98:9c:
7d:8f:19:b6:18:73:38:e2:b4:1f:51:dc:3c:06:8c:9c:fa:82:
e4:90:8f:a6:19:d1:b6:18:b4:13:94:32:56:59:09:67:d9:c0:
01:d2:91:98:c7:ef:81:1b:5f:d3:a6:01:1d:ce:78:44:96:e6:
23:37:0f:10:e5:92:44:22:72:ae:25:fa:3d:53:03:df:fe:68:
d2:4c:97:ab:75:84:fc:5a:37:31:cc:1e:36:23:80:6f:70:d4:
4d:4e:b4:b9:b4:5c:62:cc:ad:b8:c4:48:4c:4e:c9:f8:9d:01:
23:5e:01:33:2c:78:16:6f:83:39:48:fe:e3:0d:5f:47:35:1c:
97:8c:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:21 2026 by rpki-client