Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier: FHxPE75ItVKAnxeSGVj51uUshCJoUmO7yLzLhp553to=
Subject key identifier: 40:B2:B7:9E:C9:E7:1F:08:E0:6C:E2:3C:8D:CF:3B:70:83:B2:CE:7A
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial: 019D3752B63493B237803E3941E56BD62ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number: 16E3
Signing time: Sun 29 Mar 2026 02:01:00 +0000
Manifest this update: Sun 29 Mar 2026 02:01:00 +0000
Manifest next update: Mon 30 Mar 2026 02:01:00 +0000
Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: wzUQGdGWB3EojlO3fheJWiL9yHkXI3RLZqtHnYBGKik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b6:34:93:b2:37:80:3e:39:41:e5:6b:d6:2a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Validity
Not Before: Mar 29 02:01:00 2026 GMT
Not After : Mar 30 02:01:00 2026 GMT
Subject: CN=40b2b79ec9e71f08e06ce23c8dcf3b7083b2ce7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:42:23:6b:b1:25:f1:a6:03:41:7c:c5:f9:
96:84:10:7b:ff:98:00:82:6b:42:92:10:ef:38:d9:
8a:2a:cd:4c:bb:03:7f:61:ca:4d:3a:5c:1f:b6:53:
90:23:0d:35:9d:77:68:df:74:e0:32:31:08:eb:a4:
8d:92:16:38:f1:4f:de:60:9f:e4:58:62:70:6c:e2:
45:ee:2b:ce:1e:60:5a:10:f6:b2:b2:d0:02:f8:e5:
fd:c3:bb:9c:8f:53:45:35:af:d7:4f:8c:4c:46:da:
3d:eb:6b:71:94:ab:5e:ff:b0:f1:76:6b:73:14:9d:
c1:f7:e7:bd:fe:42:e9:e3:d5:90:8e:be:fd:ec:b8:
7f:9c:aa:26:3d:a2:d2:db:23:ca:0d:ad:6d:54:03:
85:9c:d8:ad:2e:1a:dc:b2:19:0c:ef:c4:93:42:76:
98:20:63:69:71:4e:34:8e:fc:aa:eb:43:64:ab:0b:
45:8c:82:68:60:ba:97:4f:6b:51:38:db:4a:64:d7:
44:47:e7:55:83:0e:71:e9:b4:dd:b9:17:d5:23:55:
d7:71:57:2d:16:5e:28:6e:56:75:ec:bb:d5:e9:ab:
82:bb:6b:4f:22:96:89:f2:23:f8:45:3c:3b:e2:7a:
13:44:f8:ee:fc:ce:1b:2e:f9:2b:b9:97:ad:dd:14:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B2:B7:9E:C9:E7:1F:08:E0:6C:E2:3C:8D:CF:3B:70:83:B2:CE:7A
X509v3 Authority Key Identifier:
keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0e:dd:28:57:7f:56:1f:5a:ae:d3:a0:d4:9a:be:3b:4d:58:
c6:64:b9:1c:30:f1:bc:8d:9a:e2:4f:4e:94:b4:8a:e8:78:c0:
72:a7:ea:21:aa:67:34:0b:66:b9:e0:c5:11:3f:d7:1d:e5:7d:
23:ed:30:37:bd:b7:c6:7c:f9:76:1b:da:48:bc:fa:3e:cb:9a:
66:3b:54:be:99:d6:35:64:f0:00:9c:13:7d:b4:23:57:ee:df:
d0:ac:4a:99:68:af:da:ab:b2:7d:74:cb:14:c5:af:3e:74:4b:
04:a7:27:fb:19:a3:92:e6:99:94:11:12:13:1e:65:11:02:78:
32:50:4f:03:6c:3f:eb:0a:b3:ee:0d:0b:d0:6b:2e:95:71:a3:
90:52:99:37:92:00:44:95:78:9c:b3:1d:3b:1f:8e:9c:e9:1d:
b3:b4:65:db:fe:7a:5a:a2:93:e6:d4:71:85:77:5f:93:49:51:
8b:dc:52:19:cf:53:ad:05:a2:da:9f:64:4e:9d:0b:1d:3d:34:
0f:d1:5b:79:42:44:6b:3e:e1:3f:59:5a:64:93:89:dc:67:0a:
2f:c8:fa:1b:12:2b:34:32:27:16:f8:27:04:87:f9:a2:86:f0:
4e:78:5d:a5:74:aa:7f:8c:aa:cf:1a:4e:82:31:a5:6c:8f:51:
c3:96:59:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:58 2026 by rpki-client