Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.mft
File: _AzBczfYTpuF2W_dk-N7bx25080.mft (raw, json)
Hash identifier: 2A/ARb0UdSToNYtKCUPDbQkF2q9dH2/Y7YpUJ9YeTHs=
Subject key identifier: F2:18:CD:BF:51:D9:57:4E:7D:EC:A2:6E:65:3B:01:EA:91:54:FD:F8
Authority key identifier: FC:0C:C1:73:37:D8:4E:9B:85:D9:6F:DD:93:E3:7B:6F:1D:B9:D3:CD
Certificate issuer: /CN=fc0cc17337d84e9b85d96fdd93e37b6f1db9d3cd
Certificate serial: 019D39AE4F117029D5F1921173893BBB0B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AzBczfYTpuF2W_dk-N7bx25080.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.mft
Manifest number: 016E
Signing time: Sun 29 Mar 2026 13:00:17 +0000
Manifest this update: Sun 29 Mar 2026 13:00:17 +0000
Manifest next update: Mon 30 Mar 2026 13:00:17 +0000
Files and hashes: 1: _AzBczfYTpuF2W_dk-N7bx25080.crl (hash: YlEtQPI8DQbOUGpOUhmeBiy7ZHFbyDleSx54HnX+HPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AzBczfYTpuF2W_dk-N7bx25080.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:4f:11:70:29:d5:f1:92:11:73:89:3b:bb:0b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0cc17337d84e9b85d96fdd93e37b6f1db9d3cd
Validity
Not Before: Mar 29 13:00:17 2026 GMT
Not After : Mar 30 13:00:17 2026 GMT
Subject: CN=f218cdbf51d9574e7deca26e653b01ea9154fdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:a6:09:fe:f5:39:3d:6c:ff:94:60:03:cd:
39:d2:e8:d2:03:47:cd:6d:8f:c2:5f:c6:10:0f:de:
91:e2:e5:a4:d8:bb:32:ac:01:f3:57:14:f9:06:d2:
03:72:3d:a9:d6:bd:76:a9:fc:64:9f:07:f2:8e:b1:
ae:bc:64:35:81:f0:0d:71:a9:ca:21:23:b0:de:b0:
9c:aa:71:9d:d0:cd:28:0e:7e:a6:cd:7f:34:af:3e:
53:0e:dc:05:69:7d:40:78:60:81:ef:f5:7d:29:cd:
7a:17:23:4e:ca:10:21:58:ef:2f:9f:78:85:09:16:
b1:52:d3:69:3c:ca:3f:a6:51:ff:45:bd:79:b0:81:
7c:c6:44:85:30:75:73:39:68:aa:4a:e0:26:d9:ca:
04:9e:9b:f9:a1:c6:3f:79:8a:b6:88:78:be:66:5c:
6d:fe:e9:80:3d:24:62:42:24:bc:c1:b8:e1:d3:1b:
e8:ae:9d:04:98:2d:bb:8d:08:96:d4:e0:b6:cf:af:
f0:ce:89:f0:4a:cf:fe:2d:42:f4:41:0f:8d:24:64:
10:c2:fa:00:49:15:3c:5f:0a:ef:04:6c:91:70:64:
51:c3:16:72:35:67:2f:f5:8e:47:e9:29:aa:20:4d:
ec:f1:bb:9c:74:e2:46:c2:01:20:83:cd:74:ab:35:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:18:CD:BF:51:D9:57:4E:7D:EC:A2:6E:65:3B:01:EA:91:54:FD:F8
X509v3 Authority Key Identifier:
keyid:FC:0C:C1:73:37:D8:4E:9B:85:D9:6F:DD:93:E3:7B:6F:1D:B9:D3:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AzBczfYTpuF2W_dk-N7bx25080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cb:d6:ae:d4:af:c4:ee:8d:e9:44:53:24:67:47:45:67:33:
93:1a:b3:0a:68:f2:1f:40:5f:62:c3:1a:b7:f9:3b:34:ec:8f:
21:e1:c9:f9:ba:7a:f0:84:cc:b2:ba:84:46:b3:bc:14:e7:c5:
a2:26:1d:a9:01:7b:10:59:56:7c:0d:bd:5f:7d:d9:d6:8f:30:
31:78:0d:5f:16:f7:e8:71:6d:34:66:f0:ba:e2:e6:89:54:72:
68:a3:80:0d:cf:db:f1:f1:dc:f2:2b:43:a8:68:0d:56:91:10:
b4:0d:47:48:49:5e:dc:09:82:07:fe:f1:2b:2e:27:fb:e8:fb:
48:81:cb:6a:35:7c:c4:58:64:98:a5:e6:7b:08:82:4e:3f:ed:
2c:8e:f9:a9:84:88:57:f2:9a:0d:87:c1:31:af:bf:56:cd:6b:
2c:9a:1b:cf:29:78:6f:d1:80:18:e7:82:fb:51:d2:59:17:e7:
78:ed:0d:8c:b4:30:f2:ed:b4:82:ed:48:64:fe:35:eb:af:08:
d5:d8:a1:32:c1:b5:98:57:9f:49:89:84:d6:d3:c8:56:96:d9:
51:73:37:4e:21:4d:26:3a:00:31:4e:72:68:2e:5c:2c:24:cc:
6a:5f:cb:7b:32:75:db:bb:27:08:ba:cc:ea:76:b1:3f:83:ec:
26:a0:19:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:02 2026 by rpki-client