Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
File: fKnhWNylWE83ofg0myiaaBLbkko.mft (raw, json)
Hash identifier: WcyfizDY99LqzUP9msKeDJIFs4eAkQ9E2lqzQoEn8Xk=
Subject key identifier: 4B:AD:9C:F2:F4:6D:60:29:56:1B:0B:05:46:1F:73:F5:8C:9C:A5:AF
Authority key identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
Certificate issuer: /CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Certificate serial: 019D39778F6DB7356BC540ED4A676CF3F5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
Manifest number: 0AF9
Signing time: Sun 29 Mar 2026 12:00:29 +0000
Manifest this update: Sun 29 Mar 2026 12:00:29 +0000
Manifest next update: Mon 30 Mar 2026 12:00:29 +0000
Files and hashes: 1: fKnhWNylWE83ofg0myiaaBLbkko.crl (hash: UNWRz5hA8dToQY2jzhJ6LfYM/cApMn0XGo3c0fvJj1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:8f:6d:b7:35:6b:c5:40:ed:4a:67:6c:f3:f5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Validity
Not Before: Mar 29 12:00:29 2026 GMT
Not After : Mar 30 12:00:29 2026 GMT
Subject: CN=4bad9cf2f46d6029561b0b05461f73f58c9ca5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:6f:8e:04:c4:b1:73:e6:1c:0e:bd:9d:f6:
1d:12:86:d9:dd:fb:82:cd:99:0c:05:38:db:c9:43:
ec:aa:c8:7b:22:5b:c8:8f:8b:3e:21:1c:a5:3f:fd:
63:71:7c:54:5c:45:20:ee:84:f1:98:46:93:ce:95:
b4:63:a4:d7:a5:64:d6:a6:22:5f:a3:73:6a:e5:10:
26:6b:20:2e:ab:d2:99:14:d8:26:a1:91:af:3c:b6:
b8:26:7e:81:bd:03:48:31:6f:16:88:eb:98:1b:dc:
c4:cf:19:4a:bf:c1:72:ae:02:e3:b9:d2:43:dc:6b:
54:d5:2e:f4:36:f0:2c:bb:db:97:f1:c5:7f:87:f0:
29:a1:e7:12:8f:a7:bd:46:34:de:96:19:b1:38:f7:
0a:4b:b1:85:a5:51:5c:a4:9a:48:a5:14:2a:4a:d8:
cd:d5:d2:94:ab:17:e1:1b:ae:7d:f2:ed:43:c2:3b:
fd:05:19:8a:94:00:fd:cb:8a:8f:71:98:0f:f0:ad:
0c:91:a4:dc:31:a3:52:0c:15:ef:44:fb:d9:31:90:
29:f4:a1:9e:22:03:82:8d:e4:d9:b6:ea:1a:f4:be:
b8:a4:92:03:ba:6e:1e:65:2f:da:7a:d7:06:5f:ad:
cd:3e:76:ae:65:89:a3:41:e7:25:76:fc:98:eb:09:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AD:9C:F2:F4:6D:60:29:56:1B:0B:05:46:1F:73:F5:8C:9C:A5:AF
X509v3 Authority Key Identifier:
keyid:7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ff:97:ce:ae:86:f9:52:dd:18:1c:38:81:97:10:3b:b7:a6:
2c:ff:31:d3:a8:a1:ae:83:e4:92:81:11:67:0e:db:de:9d:92:
bc:55:53:6f:22:71:75:cd:0a:43:9b:0e:e6:53:40:51:47:d0:
7d:57:24:21:8f:53:aa:ba:f4:5f:ab:1c:c3:d4:a3:1e:67:bd:
ca:4d:ce:c4:81:fd:7e:30:25:cc:ac:5f:f9:78:ad:dc:b9:24:
5b:ab:38:1a:1c:8b:e8:a2:1d:65:94:28:b0:a9:02:c2:f2:0d:
a1:e8:9c:28:fe:9e:c3:94:ae:d9:34:9a:14:2d:f8:88:1d:cf:
6b:b7:bf:e2:7f:dc:a5:c1:b0:ae:61:f7:5e:a8:61:47:88:aa:
d9:ca:2e:d6:29:8d:18:b4:9d:db:03:96:40:20:4f:1a:75:44:
cb:4e:2e:f3:7a:fb:2f:9c:a0:54:f8:ce:d3:81:d6:4b:f6:c7:
b9:cc:42:07:89:43:a7:4a:9a:08:a1:3c:0a:1d:d8:d7:3f:e8:
1a:3c:98:3d:76:a0:45:ae:b9:17:ce:1c:e9:64:45:fd:b8:05:
8c:ea:a7:07:17:9e:54:fe:40:da:d5:8b:b6:19:f2:37:5e:f7:
d3:ad:f8:ad:c0:b1:52:5d:38:91:64:7c:c6:30:e5:82:5a:85:
25:3b:50:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:51 2026 by rpki-client