Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
File: F3XdxSn1elmets19uiuSstN190o.mft (raw, json)
Hash identifier: AlX8Gymq+9K7uBIy8D0M6lxRXnL60CDqrVf+i5SHHHQ=
Subject key identifier: B2:C3:13:70:91:E6:FD:D0:B3:C0:0D:A4:98:B1:63:FD:85:C2:AE:5D
Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
Certificate issuer: /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Certificate serial: 019D38664BAD982AFC71C652F421A10C8651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
Manifest number: 0AC4
Signing time: Sun 29 Mar 2026 07:02:01 +0000
Manifest this update: Sun 29 Mar 2026 07:02:01 +0000
Manifest next update: Mon 30 Mar 2026 07:02:01 +0000
Files and hashes: 1: F3XdxSn1elmets19uiuSstN190o.crl (hash: xbUHlD+WXCnKdAbZC3ILtXCHi97FC6wsHReP0HaHcrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4b:ad:98:2a:fc:71:c6:52:f4:21:a1:0c:86:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Validity
Not Before: Mar 29 07:02:01 2026 GMT
Not After : Mar 30 07:02:01 2026 GMT
Subject: CN=b2c3137091e6fdd0b3c00da498b163fd85c2ae5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:9a:f2:71:d7:d6:a1:b7:0f:a8:ec:4d:aa:
3c:82:c0:7d:42:76:95:34:f8:3a:44:ed:5a:24:64:
df:99:94:89:5b:ee:8a:02:fc:aa:df:22:14:1b:a4:
3f:6d:bc:a4:14:19:66:5b:6c:3c:11:2e:15:a9:a4:
be:83:40:9f:ef:42:96:85:83:40:f2:b2:dc:c3:bf:
13:3c:5b:97:3f:79:3d:f6:41:21:5f:ef:e0:72:08:
5c:c3:43:53:8c:e9:62:60:d3:34:7a:32:42:d2:54:
e2:c4:bd:e1:61:8e:7c:fe:4f:a6:88:0b:78:2c:cc:
5c:7e:b0:74:6d:e7:c7:d6:b9:9d:98:ec:44:f2:d9:
c7:aa:e5:27:5f:cf:3a:35:5e:4a:a4:46:03:21:66:
20:00:b2:c2:67:98:b4:74:6a:cf:95:c9:2a:53:5d:
e5:f7:4d:7e:e0:8e:5c:c9:03:42:d2:bb:2b:5f:e0:
0f:d8:bc:15:d4:70:0c:50:74:4a:9e:e5:75:d6:d3:
44:eb:67:85:60:b1:f9:a6:e9:0f:45:74:c9:45:c1:
e5:94:e3:a7:11:e9:11:bb:f1:89:f0:7d:5b:71:33:
b8:4b:fd:50:ef:56:e3:9a:66:14:66:03:56:ce:63:
9a:b5:d5:b9:04:e8:2a:7a:1c:17:52:98:8d:2e:ae:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C3:13:70:91:E6:FD:D0:B3:C0:0D:A4:98:B1:63:FD:85:C2:AE:5D
X509v3 Authority Key Identifier:
keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ec:3a:2a:75:e8:f5:1d:2c:31:60:8f:cb:20:92:70:fe:4a:
1f:24:03:63:fc:7b:71:7b:a6:e2:e2:59:6d:90:7d:c7:f0:d1:
92:e9:64:a5:2b:55:4f:a0:52:fb:de:a4:22:23:67:99:12:d7:
3d:da:f0:30:88:b3:aa:3f:eb:05:6b:8e:c1:43:93:85:8a:18:
bb:6c:25:81:19:b8:db:c4:fe:38:4e:12:61:8a:fd:14:0d:a1:
98:ce:59:61:5b:a9:ec:34:a9:fe:38:c8:8f:34:08:7e:b5:7a:
6a:8e:e6:d9:43:37:34:04:0f:19:e2:33:dd:f6:6a:a9:52:8f:
4e:9c:66:f2:14:da:ce:65:d8:6f:00:2e:4e:55:b8:0c:32:82:
46:00:d3:fc:56:d1:b7:ca:28:29:e6:f3:53:84:d0:58:d2:cb:
70:5d:13:ee:5d:b6:72:ed:80:9c:95:93:84:16:fb:dd:21:61:
b5:db:c7:05:65:88:70:37:13:72:bf:fb:0c:e1:ad:de:63:a6:
eb:f3:9e:48:79:5f:b7:fa:1a:b0:84:18:69:e4:8b:a5:13:de:
5b:05:96:e9:02:12:6c:7b:28:70:3f:80:3f:1f:3a:15:a4:07:
9e:3b:36:1c:40:31:e2:6a:52:72:95:e9:42:b9:2c:b2:df:e1:
ff:69:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:37 2026 by rpki-client