Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier: E5bpT40gDlUfnCpocTtAHaEfniD8ZqN+yTTPPxCx3ik=
Subject key identifier: 54:F5:BA:B9:D4:E1:BB:E9:D4:F9:55:1E:BC:69:A8:F3:11:4E:94:88
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer: /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial: 019D38657B4B17D6CE1BF3DFCB8DAB6363C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number: 080E
Signing time: Sun 29 Mar 2026 07:01:07 +0000
Manifest this update: Sun 29 Mar 2026 07:01:07 +0000
Manifest next update: Mon 30 Mar 2026 07:01:07 +0000
Files and hashes: 1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: Selek2EOrVgcptGsvsUoNXCrb0QCIwJQefpGvBX6t2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7b:4b:17:d6:ce:1b:f3:df:cb:8d:ab:63:63:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Validity
Not Before: Mar 29 07:01:07 2026 GMT
Not After : Mar 30 07:01:07 2026 GMT
Subject: CN=54f5bab9d4e1bbe9d4f9551ebc69a8f3114e9488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:7c:35:1c:6c:8b:da:c4:5c:5f:04:1b:53:
cf:83:da:d1:da:3f:47:e3:f0:91:cc:d2:13:4b:46:
70:fc:9b:a2:6c:8c:f7:3b:26:d3:f3:1c:49:34:b3:
dd:2b:03:f0:ca:3f:81:dc:91:6b:5b:35:e6:fd:75:
6d:1f:02:5c:20:20:be:66:4e:a0:88:3a:01:1e:5b:
49:96:85:dd:73:ab:8b:58:44:2e:46:31:73:68:63:
85:eb:f7:6c:5b:30:ea:6a:97:ed:cd:46:fe:dc:19:
03:04:4c:4d:a0:a8:71:c8:fb:0f:ff:76:ac:1f:c6:
ad:4d:05:26:8b:e2:10:fc:93:a3:29:aa:cf:76:95:
28:98:27:a1:db:c8:92:0f:f2:7b:ff:c8:7b:47:8e:
b0:4b:a7:56:43:08:fc:f6:16:68:6c:a4:1d:20:f1:
98:ae:78:6b:68:37:4b:98:65:13:d2:8b:5c:a2:28:
b0:da:8a:5d:38:2b:ca:cd:ae:bc:30:2e:8a:fd:8f:
99:c3:7c:8d:73:cb:25:2d:ec:d3:3c:01:02:73:ee:
1c:27:45:02:0c:5a:e7:41:57:f2:90:da:aa:7f:82:
cd:15:80:04:3d:57:95:16:6b:5a:3c:40:97:8d:4f:
79:06:72:35:af:9a:a8:df:c8:36:86:46:6d:5b:85:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F5:BA:B9:D4:E1:BB:E9:D4:F9:55:1E:BC:69:A8:F3:11:4E:94:88
X509v3 Authority Key Identifier:
keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:46:9f:dd:d5:53:37:d6:0b:89:1e:7a:d9:f3:0d:d7:6b:cf:
4a:c3:8e:a5:3c:9a:17:cd:5e:17:e9:8f:8c:c6:f0:80:2c:a2:
3b:15:4d:87:93:60:7a:ed:49:ff:76:87:07:64:55:43:7d:ff:
00:e1:0e:1e:a2:98:9c:99:e1:6c:80:ae:e6:ec:3a:f6:ca:f3:
6f:ec:fc:6d:ae:79:aa:a2:62:21:62:0a:e3:b5:02:ea:16:4a:
5e:88:65:16:ea:e6:fe:e3:f4:f7:63:ea:7b:02:6c:5b:89:ec:
68:02:75:cf:0c:d0:56:c0:62:71:86:e6:19:d3:ef:b8:f7:ca:
36:39:f0:db:f9:38:6c:3c:04:b7:75:04:69:8c:46:e5:61:f0:
bc:a8:0f:3c:31:9d:ff:90:00:83:32:9e:9e:ba:fe:65:94:5d:
2a:87:7b:5a:d9:61:ad:b5:6a:75:c8:59:a9:68:fa:51:b3:0b:
ac:39:a5:f8:ba:54:51:79:23:43:50:59:23:eb:05:b6:74:cc:
6d:03:dc:fe:ac:25:3b:22:66:ba:f6:30:37:f3:0c:98:7c:c1:
97:e1:b1:cc:c4:6e:fa:e6:6b:ed:16:84:24:88:5d:c4:32:b1:
b7:2b:b7:ac:99:12:06:87:9b:05:3c:99:1f:1a:90:cc:85:03:
da:e5:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:40 2026 by rpki-client