Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier: LHe94qWjL4F1rQ+zTK0qZFpn6cQz9Ju6ZFkWy3wanIg=
Subject key identifier: 40:DF:72:12:F9:CF:03:80:00:3E:46:BD:25:76:C7:71:20:73:C1:19
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial: 019D3941A345946DF579B8F8F459249BE667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number: 0B5E
Signing time: Sun 29 Mar 2026 11:01:35 +0000
Manifest this update: Sun 29 Mar 2026 11:01:35 +0000
Manifest next update: Mon 30 Mar 2026 11:01:35 +0000
Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: SWvA3wmDRWXXLp1OzYRVBbyD3EQUD4ysbEVfg/ZLeR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a3:45:94:6d:f5:79:b8:f8:f4:59:24:9b:e6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Validity
Not Before: Mar 29 11:01:35 2026 GMT
Not After : Mar 30 11:01:35 2026 GMT
Subject: CN=40df7212f9cf0380003e46bd2576c7712073c119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:50:75:f8:bc:f2:fe:83:59:fa:3b:3e:1a:
58:3d:d9:f5:99:fd:79:c2:b6:5f:63:00:fb:49:ba:
1b:5c:7b:1b:f8:73:32:e0:9a:5a:a1:78:8f:27:2a:
f5:87:92:19:b6:2c:9a:2f:74:3f:6c:9c:01:7b:f1:
88:fc:aa:7b:22:6b:ad:44:8f:27:67:2f:9a:1a:9d:
e2:93:97:93:f4:c7:95:d8:e4:eb:2a:80:3f:32:f3:
6e:9e:75:0f:95:f3:65:68:70:24:a4:9c:e3:6d:10:
41:2b:50:27:bd:79:e4:92:a0:83:13:d7:77:a2:cc:
90:e4:bd:5a:dc:52:c4:b8:57:94:7e:78:3d:de:10:
ca:f7:c9:51:0c:04:fa:bb:cd:df:d4:03:c1:da:83:
87:29:9c:cd:ea:c0:42:9c:05:70:46:de:a2:9a:41:
d8:a3:ba:ea:87:36:d1:01:96:51:39:eb:9c:ae:23:
ab:4b:d4:12:ce:39:10:aa:c3:9d:7c:11:78:ec:1a:
9e:3c:09:13:47:50:13:94:96:09:ee:fe:7f:d1:36:
e1:03:05:c4:92:1d:af:f4:c0:af:fa:9e:1e:4c:5a:
bf:7a:43:a5:a1:00:88:45:8d:7e:14:00:8a:70:22:
7b:bd:2b:27:3c:09:6b:c3:fd:97:b8:ed:ff:92:90:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DF:72:12:F9:CF:03:80:00:3E:46:BD:25:76:C7:71:20:73:C1:19
X509v3 Authority Key Identifier:
keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8f:a2:72:05:cc:11:a3:e2:6f:c8:53:82:f8:69:f1:40:31:
25:8d:e2:c1:81:89:33:c4:1a:e2:5b:11:be:b8:9e:ae:e5:47:
07:6d:f4:27:89:5b:47:ad:ec:b0:75:ec:68:e2:30:85:90:39:
42:2b:f7:cb:15:ea:a5:04:ab:d6:a0:5e:30:8b:3b:ca:e2:3f:
a5:e8:76:60:8b:46:25:29:df:c8:48:0e:93:10:a9:69:44:e1:
17:12:7e:39:97:ab:c2:05:a5:90:ca:66:45:a4:98:d4:b5:7d:
5a:40:03:69:64:3a:75:e2:b1:e9:7e:b0:ac:b3:b5:52:30:61:
66:0f:a4:79:86:a5:7e:79:b8:18:51:84:58:99:63:4b:98:70:
2d:6f:78:66:f0:c5:c7:c0:e6:ad:63:49:87:86:48:e5:bd:22:
73:0d:f4:a2:fd:7c:f8:df:27:68:83:5a:a4:03:57:3b:97:6e:
e9:41:52:92:eb:07:7c:03:34:31:58:2a:d8:26:90:24:a6:23:
1e:a1:c7:11:f2:ac:39:99:60:6a:6b:43:22:b1:3a:23:d2:5c:
16:4d:32:54:cd:2b:11:98:24:47:2d:18:c3:07:6c:ca:6c:f8:
fa:e0:f6:2e:27:8e:dc:c1:94:9f:25:db:b0:bf:97:e7:c8:c9:
8a:49:3a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:17 2026 by rpki-client